Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 164 posts.
I Add 3-25 Seconds of Latency to Every Site I Visit
There’s a sort of breathless industry-specific fact in software that goes around every so often.
Deploy your side-projects at scale for basically nothing – Google Cloud Run
Google Cloud Run is the perfect deployment system for all your side projects. It is dirt cheap, fully managed serverless and scalable.
“Let’s use Kubernetes.” Now you have eight problems
For smaller teams, Kubernetes is usually the wrong solution: too complex, too complicated, and with too much work to keep it running.
How to burn the most money with a single click in Azure
The twit was followed by a very productive discussion, with many nice people trying to figure out even better ways to spend money on AWS. As an Azure user, I felt sad and left out, so I decided to fix this injustice. If you are in quarantine and you have insane amounts of money to spend, I got you covered: you only…
How to contact Google SRE by dropping a shell in Cloud SQL
Note: The vulnerabilities that are discussed in this post were patched quickly and properly by Google. We support responsible disclosure. The research that resulted in this post was done by me and …
Software will eat software in a remote-first world
Is that a good thing?
Self-host your fonts for better performance
This browser caching change kills the utility of cross-site resource CDNs like Google Fonts.
Building a Simple VPN with WireGuard with a Raspberry Pi as Server
Now that wireguard will be part of the upcoming Linux 5.6 Kernel it’s time to see how to best integrate it with my Raspberry Pi based LTE-Router/Access Point Setup. What is my scenario? Raspberry Pi 3 with a LTE hat, using a public IP address. This will be the VPN server (called edgewalker in this post) An Android…
The War on Upstart Fiber Internet Providers
The personal site of Chris Hacken — entrepreneur and operator who founded and sold Loop Internet. Essays and a podcast on building internet infrastructure, companies, and other hard things.
So you want to build an embedded Linux system?
(Heads up — this article was published in October 2020. Much of the general discussion is still relevant, but many of these SoCs are getting quite long in the tooth, and some of the software issues mentioned here have been addressed)
We use Kubernetes and spot instances to reduce EC2 billing up to 80%
The story behind the talk I gave at Vietnam Web Summit 2018
Git scraping: track changes over time by scraping to a Git repository
Git scraping is the name I’ve given a scraping technique that I’ve been experimenting with for a few years now. It’s really effective, and more people should use it. Update …
Linux Hardening Guide
Linux is not a secure operating system . However, there are steps you can take to improve it. This guide aims to explain how to harden Linux as much as possible for security and privacy. This guide attempts to be distribution-agnostic and is not tied to any specific one. DISCLAIMER: Do not attempt to apply anything in…
Small mail server best current practices
(This post was originally written as a reply on the mailop mailing-list, but a friend asked me to turn it into a blog post. I’ve edited it, mostly adding more links to elsewhere, but there are some additions here.)
Monitoring your own infrastructure using Grafana, InfluxDB, and CollectD
Have you ever wondered which node consumes more resources? Managing a bespoke dashboard for your infrastructure. Learn how to create it.
How to properly manage SSH keys for server access
This article was on the hacker news frontpage. You can find the related discussion here. Every developer needs access to some servers for example to check the application logs. Usually, this is done using public-private key encryption where each developer generates their own public-private key pair. The public keys of…
Erase your darlings: immutable infrastructure for mutable systems
Over time, a system collects state on its root partition. This state lives in assorted directories like /etc and /var , and represents every under-documented or out-of-order step in bringing up the services.
Raspberry Pi as a local server for self hosting applications
Raspberry Pi for self hosting applications, locally secure private connection, install Tor Proxy, emby media server
Linux is Most Used OS in Microsoft Azure – over 50 percent of VM cores
For the last few years, Microsoft has stated during event keynotes and in other places that Linux is a rapidly growing operating system (OS) being used within Microsoft Azure. They had proudly stat…
Moving my serverless project to Ruby on Rails
Serverless is like a black hole. It promised exciting adventures, but the gravity sucked me in and I spent most of my efforts dealing with its complexity, in...
I made a simple geolocation service
Learn how to create simple Geolocation service without 3rd-party APIs
The modern HTTPS world has no place for old web servers
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…