Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,839 posts.
Infrastructure & DevOps
Any year
A story on home server security
Happy New Year! Or so I thought. After a refreshing Christmas vacation with my family, I was stashing something away in our storage room when I noticed the server fan running at maximum speed. This was very unexpected, considering my server is powered by an Intel i3 and should handle all the light tasks I run quite…
Saving Energy: Home Server That Automatically Suspends to RAM and Wakes Up Again
Researcher interested in usable security and privacy.
Defcon: Preventing overload with graceful feature degradation (2023)
This is one in a series of papers I’m reading from OSDI and Usenix ATC. These paper reviews can be delivered weekly to your inbox , or you can subscribe to the Atom feed . As always, feel free to reach out on Twitter with feedback or suggestions!
Making my own bed sensor
I recently created some “bed sensors” for my smart home that detect if one of us, or both of us, is in bed. I use a couple of pressure mats that detect when weight is applied to them, and stuck then under our mattress at around hip level and these tell my Home Assistant home automation platform if
Just use Postgres
Advice: When you are making a new application that requires persistent storage of data, like is the case for most web applications, your default choice should be Postgres .
Running My Own XMPP Server
Notes from setting up Prosody in Docker for federated messaging, with file sharing, voice calls, and end-to-end encryption.
Remote access to production infrastructure (death to the VPN)
A little over a year ago, my employer threw away our VPNs in production and production-like server environments and moved towards a set of new, cutting-edge technologies that make remote access sim…
DevOps: An idea so good, no one admits they don’t do it
The ideas behind the DevOps movements undeniably changed the software development world for the better - but by now, the term “DevOps” has lost all meaning. Sometimes an idea is so good, that you can’t argue with it. I’m not saying that the original idea behind “DevOps” was perfect - I’ve written about some of the…
Why systemd?
This blog post is based on a talk I gave on 2014-05-21. For a few years now, GNU/Linux distributions have been migrating away from SysV ini...
OTel isn’t going well
For years now one of the most reliable complaints I hear when I try to drag a team off their vendor specific SDK and onto OpenTelemetry is some variation of: "why does it seem like this isn't done yet?" Vendor SDKs for observability are, to put it charitably, idiot-
That Old NetBSD Server, Running Since 2010
A retrospective on a NetBSD server set up in 2010 under tight deadlines, running almost untouched for over a decade on consumer-grade hardware-proof of the OS's remarkable stability.
Hanging S3 downloads
Large downloads work from all other servers, but fail from S3. Must be a problem on their end, right?
2022 was the year of Linux on the Desktop?
It finally happened!
Monorepo: please do
You should choose a monorepo because the default behavior it encourages in your teams is visibility and shared responsibility, especially…
AWS’s Share of Amazon’s Profit
I’ve often heard it said that AWS is a major contributor to Amazon’s profitability. How major? Here’s a graph covering the last ten quarters, with a brief methodology discussion:
K8s Service Meshes: The Bill Comes Due
Kubernetes Service Meshes aren't free anymore, what teams need to know moving forward.
Hello IPv6: a minimal tutorial for IPv4 users
A short IPv6 tutorial, explaining the basics, primarily for home and small networks.
10Gb/s Ethernet: what I did to get it working in my home
I already had 2.5Gb/s working. Here's how I upgraded the whole house to 10Gb/s Ethernet -- including real iperf3 numbers, MikroTik switches, scary thermals, and what actually worked.
What domain name to use for your home network
Always use the ‘.home.arpa’ top-level domain (RFC 8375), and don’t use the special-purpose ‘.local,’ or made-up undelegated domain names like ‘.lan’ or ‘.home.’
Clock synchronization is a nightmare
Time seems simple. But we engineers lose sleep over something as basic as keeping clocks in sync. Here’s why…