3841
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,378 posts.
Infrastructure & DevOps
Any year
3842
3843
XZ Utils Backdoor Still Lurking in Docker Images
In this blog, we share a new finding in the XZ Utils saga: several Docker images built around the time of the compromise contain the backdoor. At first…
3844
How We Failed at OpenStack
Use Equinix Fabric to establish direct, low-latency connections to a variety of services providers.
3845
Farewell, Solaris
MongoDB's blog includes technical tutorials, MongoDB best practices, customer stories, and industry news related to the leading non-relational database.
3846
Using Nginx and UWSGI
Shop a wide selection of domains at HugeDomains.com. Find the right domain name today.
3847
Vercel Edge Middleware: Dynamic at the speed of static
Execute custom logic at the moment of request, pushing personalization to the edge with exceptional performance.
3848
3849
3850
3851
3852
Rktnetes brings rkt container engine to Kubernetes
Editor's note: this post is part of a series of in-depth articles on what's new in Kubernetes 1.3 As part of Kubernetes 1.3, we’re happy to report that our work to bring interchangeable container engines to Kubernetes is bearing early fruit. What we affectionately call “rktnetes” is included in the version 1.3…
3853
BrowserStack Post Mortem (Shell shocked)
Official transparency report on the November 2014 BrowserStack security breach involving a legacy prototype server (Shellshock). Incident fully resolved. BrowserStack is now SOC 2 Type II, ISO 27001:2022, and GDPR compliant. Trusted by 50,000+ companies.
3854
Introduction to UEFI HTTP(s) Boot with QEMU/OVMF
The historic go-to solution for network booting is PXE. PXE is based on DHCP and TFTP. It is tricky to correctly configure, even trickier to make it highly available and good luck with the security with this clear-text unsigned protocol.
3855
Hardening Compiler Flags for NixOS
In the past year some Mayflower colleagues have started using and contributing to NixOS, a purely functional GNU/Linux distribution that combines package and configuration management. We decided that we would give it a try in production but stumbled upon some issues that had to be resolved first. We have added new…
3856
The real failure rate of EBS
Our experience running AWS EBS at scale for critical workloads
3857
Kubernetes and Kernel Panics
How Netflix’s Container Platform Connects Linux Kernel Panics to Pods
3858
3859
A PyTorch Approach to ML Infrastructure
Distribute and run AI workloads on Kubernetes magically in Python, like PyTorch for ML infra. - run-house/kubetorch
3860
SmartDataCenter and Manta are now open source
Today we are announcing that we are open sourcing the two systems at the heart of our business: SmartDataCenter and the Manta object storage platform . SmartDataCenter is the container-based orchestration software that runs the Joyent public cloud ; we have used it for the better half of a decade to run on-the-metal…
3861
Canary analysis: Lessons learned and best practices from Google and Waze
Waze, maker of the community-based traffic navigation app, estimates that canary releases can prevent a quarter of all incidents on their services.
3862
API Gateway Identity Crisis – are they replaced by service mesh?
API Gateways are going through a bit of an identity crisis these days.
3863
Mantle – Serverless Maps Using Lambda or Cloudflare Workers
Self-host map APIs on your own cloud account, serverlessly
3864
How Google's build system works
This is the second in a four part series describing how we use the cloud to scale building and testing of software at Google. This series el...
3865
3866
Briar and Bramble: A Vision for Decentralized Infrastructure
What if we could build secure systems that didn't depend on central servers or even Internet access to let people collaborate? What would a system like this mean for political organizing, disaster relief, or even civic infrastructure? The Briar app and the Bramble framework are an attempt to find out.
3867
Unprivileged Docker Builds – A Proof of Concept
I work at a very ‘locked-down’ enterprise, where direct access to Docker is effectively verboten.
3868
The Cost of Being Crawled: LLM Bots and Vercel Image API Pricing
A misconfiguration that might have cost us $7,000
3869
3870