181
'No way to prevent this,' says only package manager where this regularly happens
Kevin Patel - Application Security Engineer @ NISC
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,839 posts.
Infrastructure & DevOps
Any year
182
Why I love NixOS
Why I love NixOS is really about the Nix package manager, reproducibility, and sane system management in the LLM coding era.
183
We're migrating many of our servers from Linux to FreeBSD
More about this in the article I wrote to accompany my talk at EuroBSDCon 2024 . Please note: This article was (unexpectedly) quite popular and many...
184
GitHub Actions has a package manager, and it might be the worst
GitHub Actions has a package manager that ignores decades of supply chain security best practices: no lockfile, no integrity verification, no transitive pinning
185
Upgrade your SSH keys
Upgrade to faster and more secure SSH keys. I promise a smooth transition to the use of your new keys.
186
187
The UK is wasting a lot of wind power
The UK discarded 6% of its windpower last year, at a cost of almost £1bn. What’s going on, and how can we fix it?
188
Cloning a Laptop over NVMe TCP
Recently, I got a new laptop and had to set it up so I could start using it. But I wasn't really in the mood to go through the same old steps which I had explained in this post earlier . I was complaining about this to my colleague, and there came the suggestion of why not copy the entire disk to the new laptop…
189
190
Replacing Kubernetes with systemd (2024)
In this post I go through the journey of overusing Kubernetes and how systemd can actually do most of what I use it for.
191
The “mail is hard” myth
TL;DR: - Mail is not hard: people keep repeating that because they read it, not because they tried it - Big Mailer Corps are quite happy with that myth, it keeps their userbase growing - Big Mailer Corps control a large percentage of the e-mail address space which is good for none of us - It's ok that people have…
192
193
Why are we templating YAML? (2019)
I was at cfgmgmtcamp 2019 in Ghent, and did a talk which I think was well received about the need for some Kubernetes configuration management as well as the solution
194
How I run my servers (2022)
I've been writing recently about servers and internet infrastructure 1 . A lot of this writing is predicated on running server software on a VM or physical machine, rather than using a more cloudy solution, which is somewhat unpopular these days. However, I think it's a pretty reasonable way to do things, and it's not…
195
Docker operations slowing down on AWS
I’m CC’d on mails when things get slow, but never when things work as expected or are fast…oh well. Like an umpire in baseball, if we are doing our jobs, we are invisible. Subjec…
196
Behind the scenes, AWS Lambda
How does AWS Lambda work under the hood? Let's find out together!
197
Reasons Kubernetes is so complex
Preface Hello friends! It’s been a while. I’ve been finding it very hard to write while holding up a full-time job, and I’ve also been dealing with some very...
198
Stack Overflow: How We Do Deployment
This is #3 in a very long series of posts on Stack Overflow’s architecture.Previous post (#2): Stack Overflow: The Hardware - 2016 EditionWe’ve talked abou...
199
Golang SSH Security
Working on a project for a client recently, I needed to speak the SSH protocol in Golang code. So I started with the x/crypto/ssh package, part of the suite of libraries from the Golang developers which is not part of the standard library and not part of their usual compatibility guarantees, but more along the lines…
200
SSH tricks
This post is part of my “Unix fundamentals” series. Recent posts in this series include settling into Unix , standalone lexers with lex , and sculpting text with regex, grep, sed and awk .
201
202
My 71 TiB ZFS NAS After 10 Years and Zero Drive Failures
My 4U 71 TiB ZFS NAS built with twenty-four 4 TB drives is over 10 years old and still going strong.
203
Minecraft as a Kubernetes admin tool
KubeCraftAdmin : The adventurer’s admin tool
204
AI handles incidents, engineers lose touch with their systems
AI-assisted incident response can lower MTTR while leaving engineers less prepared for the complex incidents automation cannot solve.
205
206
207
Bye CUPS: Printing with Netcat
Turns out printing doesn't have to be hard
208
Google suspended my company's Google cloud account for the third time
On each of the last two Fridays, Google has suspended SSLMate 's Google Cloud access without notification, having previously suspended it in 2024 without notification. But this isn't just another cautionary tale about using Google Cloud Platform; it's also a story about usable security and how Google's capriciousness…
209
Dropping Cloudflare for Bunny.net
Dropping Cloudflare and migrating to bunny.net, starting out with my blog.
210
CrowdStrike's impact on aviation
Just after midnight Eastern Time on July 19, 2024, the enterprise cybersecurity company CrowdStrike YOLOed a software update to millions of Windows machines. Or as they put it: