1
Ubuntu on Windows
Update: Here's how to get started using Ubuntu on Windows See also Scott Hanselman's blog here I'm in San Francisco this week, attendin...
Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 4,339 posts.
2
The boring technology behind a one-person Internet company (2018)
We are experiencing heavy load from malicious bots scraping our website content, so we ask you to log in to continue visiting the page.
3
Axios compromised on NPM – Malicious versions drop remote access trojan
Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.
4
IoT hacking and rickrolling my high school district
This is the story of how I created a botnet of IPTVs to rickroll 10,000+ students for my senior prank.
5
After self-hosting my email for twenty-three years I have thrown in the towel
Many companies have been trying to disrupt email by making it proprietary. So far, they have failed. Email keeps being an open protocol. Hurray? No hurray. Email is not distributed anymore. You just cannot create another first-class node of this ne
6
Serverless: slower and more expensive
Recently I wanted to try changing the API we have at CardGames.io and try using the Serverless framework. Serverless has been a hot topic in the tech world for the last few years and I was procrastinating wanted to keep my tech skills up to date by trying something new, so I decided to spend a few hours learning about…
7
8
9
WTF Ubuntu?
In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.
10
I Add 3-25 Seconds of Latency to Every Site I Visit
There’s a sort of breathless industry-specific fact in software that goes around every so often.
11
Let's Encrypt Root Trusted by All Major Root Programs
As of the end of July 2018, the Let’s Encrypt root, ISRG Root X1, is directly trusted by Microsoft products. Our root is now trusted by all major root programs, including Microsoft, Google, Apple, Mozilla, Oracle, and Blackberry. Today’s announcement that we’re trusted by all major root programs represents a major…
12
Amazon Web Services in Plain English
It's named what? Figure out what Amazon Web Services should actually have been called.
13
14
I got pwned by my cloud costs
I have been, and still remain, a massive proponent of "the cloud". I built Have I Been Pwned [https://haveibeenpwned.com/] (HIBP) as a cloud-first service that took advantage of modern cloud paradigms such as Azure Table Storage to massively drive down costs at crazy levels of performance I
15
I'm all-in on server-side SQLite
Ben Johnson has joined Fly.io
16
All my servers have an 8 GB empty file on disk
Last night I was listening to the latest Under the Radar , where Marco Arment dove into nerdy detail about his recent Overcast server issues. The discussion was great, and you should listen to it, but Marco's recent server troubles were pretty similar to my own server issues from last year, and so I figured I'd share…
17
Announcing SQL Server on Linux
It’s been an incredible year for the data business at Microsoft and an incredible year for data across the industry. This Thursday at our Data Driven event in New York, we will kick off a wave of launch activities for SQL Server 2016 with general availability later this year. This is the most significant release...
18
Decisions that eroded trust in Azure – by a former Azure Core engineer
Inside the complacency and decisions that eroded trust in Azure—from a former Azure Core engineer.
19
How uv got so fast
uv’s speed comes from engineering decisions, not just Rust. Static metadata, dropping legacy formats, and standards that didn’t exist five years ago.
20
21
We updated our RSA SSH host key
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com.
22
Let's Encrypt is Trusted
We’re pleased to announce that we’ve received cross-signatures from IdenTrust, which means that our certificates are now trusted by all major browsers. This is a significant milestone since it means that visitors to websites using Let’s Encrypt certificates can enjoy a secure browsing experience with no special…
23
Entering Public Beta
We’re happy to announce that Let’s Encrypt has entered Public Beta. Invitations are no longer needed in order to get free certificates from Let’s Encrypt. It’s time for the Web to take a big step forward in terms of security and privacy. We want to see HTTPS become the default. Let’s Encrypt was built to enable that…
24
25
Inside the longest Atlassian outage
Hundreds of companies have no access to JIRA, Confluence and Atlassian Cloud. What can engineering teams learn from the poor handling of this outage?
26
Don't start with microservices – monoliths are your friend
I’ve been having this thought on the back of my mind for a long time to write about why it’s often a bad idea to start with microservices for a brand new project.
27
Don't rent the cloud, own instead
Data centers are cool, everyone should have one.
28
Almost every infrastructure decision I endorse or regret
Assortment of technology startup infrastructure recommendations
29
Let's Encrypt Has Issued a Billion Certificates
We issued our billionth certificate on February 27, 2020. We’re going to use this big round number as an opportunity to reflect on what has changed for us, and for the Internet, leading up to this event. In particular, we want to talk about what has happened since the last time we talked about a big round number of…
30
How we got read access on Google’s production servers
This is the original writeup on how Detectify security researchers gained read access on Google's production servers.