Recent submissions

Comment · 11 years ago
Comment · 12 years ago
I make complete AMIs with packer, configure them entirely using environment variables in userdata, configuration data in etcd, and shell scripts, and run all services in docker containers, which I also build using packer. With all services in containers, AMIs are almost never rebuilt and there is no need for configuration management/mutating infrastructure.

Building containers with packer is easier than switching to Dockerfiles for existing builds, but does not support fast, incremental build and deploy or tagging. Even without those features, I see no advantages in traditional CM other than the convenience of familiarity and legacy.

Comment · 13 years ago
Another possible explanation is that she is intelligent and motivated and you are an asshole.
Comment · 13 years ago
Comment · 13 years ago
NIST has weighed in on how to use TLS: http://tools.ietf.org/html/rfc6460

I am not aware of any proposed attacks on the approved cipher suites that are anywhere near feasible. TLS deployment is far behind known best practice. We should do something about that.

Comment · 13 years ago
Comment · 13 years ago
That you are unable to distinguish between an instance of sexual discrimination (called sexual discrimination) and systemic sexual discrimination (called sexism) does not mean anything political or Orwellian is afoot. Words have meanings. Ignorance of the meanings of words is easily solved. Stubborn refusal to recognize your own errors is rather less so.
Comment · 14 years ago
Asserting all members of a group of people are subhuman sure does sound like something that happened in Europe in the 30s and 40s. What point were you trying to make?

Immanentize your personal eschaton,

Lil 'B

Comment · 15 years ago
Seems like a lot of folks missed the section of the post explaining their implementation and use of _ECDHE_ not _EDH_. The performance impact of ECDHE is surprisingly small.
Comment · 15 years ago
Correct!
Comment · 15 years ago
More great work from Google legitimizing and advocating for strong HTTPS defaults. I'm looking forward to this being broadly adopted.

Securely Yours,

Lil' B

Comment · 15 years ago
We have no plans to support Thrift.
Comment · 15 years ago
Much like our engineers, our software is extremely opinionated. Ordasity, Scalang, and Overlock are all small, extremely focused libraries to solve a single problem in a single way. This is quite similar to the Unix philosophy and we have found it to be similarly successful. Projects like Akka take a more maximalist, all-encompassing approach that doesn't work well for the way we build and operate services.

One love,

Lil' B

Comment · 15 years ago
Well said, sir.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton