Recent submissions

Comment · 6 years ago
Maybe they didn't know there is a difference? I'm from Europe and I didn't. You register to be able to vote? Why isn't every citizen automatically allowed to vote?
Comment · 6 years ago
Comment · 6 years ago
IPV6 commonly does that. Your next hop is installed as a link-local fe80-entry which is derived from the mac address. Not exactly what you're after, but removes the IP numbering need.
Comment · 6 years ago
That's not the "cattle vs. pet" as I understand it. The servers are identical, i.e. cattle. This is just a case of sticky sessions. It's a common pattern to help latency and keep resource usage down.
Comment · 6 years ago
This doesn't help you now, but why didn't you keep the old site and just 301'd to the new page for a year or so?
Comment · 6 years ago
Build systems usually don't care what you added. Modification of source means rebuild.
Comment · 6 years ago
> because the Rust way is actually the right way.

[Citation needed]

Comment · 6 years ago
Comment · 6 years ago
No, you also need to be able to MITM. Snooping the traffic is not enough to do harm.
Comment · 6 years ago
That Europe cost seems high, tbh. In the Nordics for example I'm pretty sure everything is paid for.
Comment · 6 years ago
+1. When I had to use AWS for batch workloads, which at the time at least didn't have a TTL attribute on VMs, I made sure that the VM first scheduled a shutdown in like 30 min if the test was supposed to only run in 10 min.
Comment · 6 years ago
And then have to live with asking yourself "could I have done more?"
Comment · 6 years ago
I doubt that would be 1 and not developed using 2 followed by a "don't touch" policy, tbh
Comment · 6 years ago
There are a few. https://github.com/tink-ab/login-service is one I wrote and open sourced when I worked at the associated company. Adding something like https://github.com/dhtech/authservice + https://github.com/dhtech/prodaccess would give you client certificate provisioning and handling.

In the end you'd easily get e.g. daily U2F with monthly cert rotation. Or whatever you end up wanting.

Open source have had this convered for years, but you'll have to look for it.

Disclosure: I'm the main author of all those three projects.

Comment · 6 years ago
BeyondCorp is the effort/program name, ÜP is one of the software that enables it to be implemented. ÜP is just a fancy Envoy/nginx reverse proxy.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton