91
Server Setup Basics for Self Hosting
My post on how I like to manage servers. I cover SSH, networking, log rotation, and server management basics.
New
The latest blog posts to take off on Hacker News. 281 posts.
92
Lidl's Cloud Gambit: Europe's Shift to Sovereign Computing
Lidl is launching sovereign cloud computing in Europe. GDPR and data compliance is driving the EU to look for local alternatives.
93
My IRC client runs on Kubernetes
Trust me, there's a reason for this
94
Leveraging AI for efficient incident response
We’re sharing how we streamline system reliability investigations using a new AI-assisted root cause analysis system. The system uses a combination of heuristic-based retrieval and large language m…
95
Continuous reinvention: A brief history of block storage at AWS
Marc Olson, a long-time Amazonian, discusses the evolution of EBS, highlighting hard-won lessons in queueing theory, the importance of comprehensive instrumentation, and the value of incrementalism versus radical changes. It's an insightful look at how one of AWS’s foundational services has evolved to meet the needs…
96
Breaking down a record-setting day on the Texas grid
Market highlights and explanations from a day of records in ERCOT.
97
98
The gigantic and unregulated power plants in the cloud
Recently a Dutch hacker was able to take control of 4 million solar panel installations (FTM (Dutch), Euractiv, Victor Gevers). And this wasn’t the first time something like this has happened either (PV Magazine). As usual, huge thanks are due to the many beta readers and experts who helped improve this article with…
99
Just use Postgres
Advice: When you are making a new application that requires persistent storage of data, like is the case for most web applications, your default choice should be Postgres .
100
We survived 10k requests/second: Switching to signed asset URLs in an emergency
A long day of debugging led to a better solution: Signed URLs.
101
Stripe's Monorepo Developer Environment
An overview of the tools and environment Stripe engineers used to write and test code, as of 2019 or so.
102
Building data infrastructure that will last
As a consultant, I have been called in to review and, in many cases, replace dozens of half-finished, abandoned, and sometimes forgotten data infrastructure projects.
103
.INTERNAL is now reserved for private-use applications
Whereas, on 1 March 2019, the Board took action on each of the 35 recommendations issued within the Competition, Consumer Trust, and Consumer Choice (CCT) Review Team Final Report dated 8 September 2018, as specified within the scorecard titled " Final CCT Recommendations: Board Action (1 March 2019) ". The Board…
104
Hacking a Virtual Power Plant
I recently had solar panels and a battery storage system from GivEnergy installed at my house. A major selling point for me was that they have a local network API which can be used to monitor and…
105
How we migrated onto K8s in less than 12 months
Migrating onto Kubernetes can take years. Here’s why we decided it was worth undertaking, and how we moved a majority of our core services.
106
How the electricity markets respond to a nuclear trip
Looking at the data of how ERCOT maintains grid stability when a nuclear plant unexpectedly goes offline.
107
Making Machines Move
Gather round the fire to hear the tale of how we built migration for stateful apps on a global public cloud without building a SAN.
108
CrowdStrike's impact on aviation
Just after midnight Eastern Time on July 19, 2024, the enterprise cybersecurity company CrowdStrike YOLOed a software update to millions of Windows machines. Or as they put it:
109
Is Cloudflare overcharging us for their images service?
I recently went down a very deep rabbit hole to understand why, some months, Cloudflare was charging us 3x what we were expecting for their Cloudflare Images service. I’m posting this write-up because back then, a quick search didn’t turn anything up; and Cloudflare support has totally ghosted us for more than 8…
110
Microsoft technical breakdown of CrowdStrike incident
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
111
A skeptic's first contact with Kubernetes
Key concepts & much deserved YAML ranting
112
Unfashionably secure: why we use isolated VMs
Why we use isolated VMs as a hard security boundary.
113
Preliminary Post Incident Review
Read the preliminary post incident report regarding the CrowdStrike Falcon content update affecting Windows hosts.
114
Intent to end OCSP service
Today we are announcing our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible. OCSP and CRLs are both mechanisms by which CAs can communicate certificate revocation information, but CRLs have significant advantages over OCSP. Let’s…
115
Maestro: Netflix's Workflow Orchestrator
By Jun He, Natallia Dzenisenka, Praneeth Yenugutala, Yingyi Zhang, and Anjali Norwood
116
Prometheus metrics saves us from painful kernel debugging (2022)
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
117
Google Distributed Cloud air-gapped appliance
The Google Distributed Cloud air-gapped appliance is an integrated hardware and software solution that lets you run workloads at the tactical edge.
118
Technical Details on Today's Outage
Learn more about the technical details around the Falcon update for Windows hosts.
119
120
Building and scaling Notion's data lake
How Notion build and grew our data lake to keep up with rapid growth