1
Almost every infrastructure decision I endorse or regret
Assortment of technology startup infrastructure recommendations
2
3
Why we use our own hardware
Why we use our own hardware and what the tradeoffs and costs look like
4
Dokku: My favorite personal serverless platform
Like Heroku, but you own it.
5
This website is hosted on Bluesky
Well, not this one. But this one is! How? Let’s take a closer look at Bluesky and the AT Protocol that underpins it. Note: I communicated with the Bluesky team prior to the publishing of this post. While the functionality described is not the intended use of the application, it is known behavior and does not constitue…
6
7
Building Meta's GenAI infrastructure
Marking a major investment in Meta’s AI future, we are announcing two 24k GPU clusters. We are sharing details on the hardware, network, storage, design, performance, and software that help us extr…
8
Fly.io has GPUs now
Documentation and guides from the team at Fly.io.
9
Compromising OpenWrt Supply Chain
Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at Flatt Security Inc. A few days ago, I was upgrading my home lab network, and I decided to upgrade the OpenWrt on my router.1 After accessing the LuCI, which is the web interface of OpenWrt, I noticed that there is a section called Attended Sysupgrade…
10
11
S3 is files, but not a filesystem
"Deep" modules, mismatched interfaces - and why SAP is so painful
12
.INTERNAL is now reserved for private-use applications
Whereas, on 1 March 2019, the Board took action on each of the 35 recommendations issued within the Competition, Consumer Trust, and Consumer Choice (CCT) Review Team Final Report dated 8 September 2018, as specified within the scorecard titled " Final CCT Recommendations: Board Action (1 March 2019) ". The Board…
13
14
Amazon S3 Adds Put-If-Match (Compare-and-Swap)
Discover more about what's new at AWS with Amazon S3 adds new functionality for conditional writes
15
We're Leaving Kubernetes
We are moving away from Kubernetes for cloud development environments after 6 years of experience at scale. Learn about Gitpod Flex and our new approach to development infrastructure for developers.
16
I looked through attacks in my access logs
I've been self-hosting for over a decade. It's freeing because I own my data, and do not depend on any platform other than my cloud host, which I can easily switch off. Self-hosting gives much insight into what it takes to run a cloud service. Anyone
17
Considerations for a long-running Raspberry Pi
Keeping a Raspberry Pi online and working with zero intervention for weeks, months, or years is somewhat of an art form. Several classes of things can go wrong, and you need to consider how your Pi will recover from each of them.
18
Supabase Storage now supports the S3 protocol
Supabase Storage is now officially an S3-Compatible Storage Provider.
19
JIT WireGuard
Our fancy WireGuard setup was accumulating stale peers. Here's what we did about it.
20
Nix is a better Docker image builder than Docker's image builder
Xe Iaso's personal website.
21
22
I Followed the Official AWS Amplify Guide and Was Charged $1,100
An interesting thing happens when you follow the official Amplify guide.
23
The gigantic and unregulated power plants in the cloud
Recently a Dutch hacker was able to take control of 4 million solar panel installations (FTM (Dutch), Euractiv, Victor Gevers). And this wasn’t the first time something like this has happened either (PV Magazine). As usual, huge thanks are due to the many beta readers and experts who helped improve this article with…
24
Lidl's Cloud Gambit: Europe's Shift to Sovereign Computing
Lidl is launching sovereign cloud computing in Europe. GDPR and data compliance is driving the EU to look for local alternatives.
25
Cloning a Laptop over NVMe TCP
Recently, I got a new laptop and had to set it up so I could start using it. But I wasn't really in the mood to go through the same old steps which I had explained in this post earlier . I was complaining about this to my colleague, and there came the suggestion of why not copy the entire disk to the new laptop…
26
Why are we templating YAML? (2019)
I was at cfgmgmtcamp 2019 in Ghent, and did a talk which I think was well received about the need for some Kubernetes configuration management as well as the solution
27
Winding down Google Sync and Less Secure Apps support
MDM push of password based IMAP, CalDAV, CardDAV, STMP, POP and Exchange ActiveSync (Google Sync) will no longer work for customers who try to connect to an LSA for the first time.
28
My 71 TiB ZFS NAS After 10 Years and Zero Drive Failures
My 4U 71 TiB ZFS NAS built with twenty-four 4 TB drives is over 10 years old and still going strong.
29
Microsoft technical breakdown of CrowdStrike incident
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
30
Intent to end OCSP service
Today we are announcing our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible. OCSP and CRLs are both mechanisms by which CAs can communicate certificate revocation information, but CRLs have significant advantages over OCSP. Let’s…