Recent submissions

Comment · 7 years ago
WireGuard is actually pretty awful from an IT security org perspective. There are no logs when someone connects or is trying to connect, so auditing or troubleshooting becomes extremely difficult short of packet captures. Additionally, there is no concept of two step auth, so if your key is compromised, anyone can connect without anyone knowing about the compromise.

If security companies adopt WireGuard, expect things like PulseSecure to remain as a wrapper around WireGuard. They'll at least standardize on a performant and verifiable VPN solution.

Comment · 7 years ago
How turn key do you expect the self hosted option to be? If it contains a lot of other software like SQL and Redis, would you be comfortable installing it or would you expect the option to bundle it in some kind of installer? Would you be OK with using a container, or would you want binaries?
Comment · 7 years ago
Is there really a market for a self hosted B2C SaaS options? Would it be enough of a differentiator to drive business away from competitors?
Comment · 7 years ago
Comment · 7 years ago
How are you doing multi tenant MinIO?
Comment · 7 years ago
To me, this represents a fatal flaw in Vault's architecture. What it does should be table stakes/standardized and operate in a distributed fashion via integration into the underlying secrets engines. I'm honestly surprised the CNCF hasn't found a project out there to challenge Vault, we desperately need alternatives.
Comment · 7 years ago
That's not necessarily a good thing. Sometimes ex-engineer managers are the worst kind of manager due to their own misconceptions or arrogance.
Comment · 7 years ago
My setup: AMD ryzen tower with 32GB ram and multi port PCI NICs running Debian. Internet comes into the onboard NIC, and I VLAN out the NICs to downstream devices. Server itself doesn't run anything directly, instead I use nspawn "VMs" connected to the same VLANs as necessary. I rsync to a raspberry pi with a USB HDD at a relatives house.
Comment · 7 years ago
This seems to be impacting NPM for me.
Comment · 7 years ago
Comment · 11 years ago
This is one of the worst advertising campaigns I've ever experienced.
Comment · 11 years ago
This is terrible advice. Golang may have a flavor-of-the-week status in some people's minds, but it's a language that really deserves more credit. It is really easy to program and learn, and it does a lot of stuff other languages rely on third party programs for. With each release, nagging issues (namely around garbage collection) are getting resolved, but it's more than production ready. To ignore Golang right now would be akin to ignoring Java back in the early 2000s in my opinion.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton