pmccarren

s/lazy/efficient/g :)

> CertManager is on strike and certificate has expired

Had a good chuckle here, hah.

I too have been using sops for years, and agree -- dotenvx encryption seems very similar to sops.

I'd prefer an integration between dotevnx and sops where dotevnx handles the UX of public env and injection, while leveraging sops for secret management and retrieval. Additionally, being able to have multiple keys for different actors is important.

Having a single `.env.keys` file feels risky and error prone. dotenvx encourages adding your various env files, such as `.env.production`, to vcs, and you're one simple mistake away from committing your keyfile and having a bad day.

If sops is not to be integrated, dotenvx could take some inspiration where the main key is encrypted in the secrets file itself, and you can define multiple age key recipients, each of which can then decrypt the main key.

> Brig. Gen. Pat Ryder, Pentagon press secretary, told reporters Friday that an F-22 fighter aircraft based at Joint Base Elmendorf-Richardson shot down the object using the same type of missile used to take down the balloon nearly a week ago.[0]

[0] https://apnews.com/article/pentagon-shoots-down-unknown-flyi...

Shameless plug - I've been building the startup Wedge[0]. In addition to helping prevent application fraud, I deeply believe applicants are _people_ and have more to share beyond a resume.

We enable companies to asynchronously collect a short series of video responses from an applicant either at application time or later in the process.

[0]https://www.wedgehr.com/product

Yep, rather straight-forward. Little bit of iptables forwarding and you're all set:

  echo 1 > /proc/sys/net/ipv4/ip_forward
  iptables -A FORWARD -i eth0 -o wlan0 -j ACCEPT
  iptables -A FORWARD -i wlan0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
  iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE

I'd recommend wireguard[0] in preference to openvpn.

refs: [0]https://www.wireguard.com/

That is very intriguing.

The location of injection site was spot on. However, I'm unsure if there are other factors at work beyond specifically location

Pure, unadulterated speculation:

It felt like the mRNA took hold in both my arm, _and_ my heart. Which given the proximity and paths between, is not entirely surprising.

It felt like the vaccine entered my bloodstream and was taken up, in part, by the heart. Which then started making spike protein and soliciting an immune response.

I'd really love to learn more about this, but haven't been able to find any good resources. If anyone can point me in the right direction, I'm all ears!

Anecdote: I too experienced this reaction, albeit after the first dose.

Noticeable but not significant heart pain beginning approximately 4 hours after getting the first vaccine.

Speaking with medical professionals, they said symptoms should improve with time, and they have nearly completely across the 1.5 months since.

Unsure if worth noting, but I had very strong immune responses to both the first and second doses.

for fans of tmux, I'm partial towards tmate[0], instant tmux session sharing over ssh, optionally through a relay

refs: [0]https://tmate.io

> Google has made a deal for access to patient records from HCA, which which operates 181 hospitals and more than 2,000 healthcare sites in 21 states, _so the tech company can develop healthcare algorithms_.

I'm a huge fan of croc! Even just for the sake of a single binary, but there's so much more to love about it.

I'm a huge fan of croc[0]. Very similar to Magic Wormhole, but a bit more flexible and written in go.

Straight from the README:

> croc is a tool that allows any two computers to simply and securely transfer files and folders. AFAIK, croc is the only CLI file-transfer tool that does all of the following:

- allows any two computers to transfer data (using a relay)

- provides end-to-end encryption (using PAKE)

- enables easy cross-platform transfers (Windows, Linux, Mac)

- allows multiple file transfers

- allows resuming transfers that are interrupted

- local server or port-forwarding not needed

- ipv6-first with ipv4 fallback

- can use proxy, like tor

refs:

[0]https://github.com/schollz/croc

From my experience, most _independently_ owned cell phone retail stores (Verizon, Sprint, AT&T, etc) have several Cellebrite devices no site which are used daily to aid in device migration from old to new.

As I understand it, Cellebrite devices are not exactly hard to acquire.

This is awesome! Firefox Send[0] is another very similar product in the space. Excited for more file transfer players!

- [0] https://send.firefox.com

I'd appreciate a thorough postmortem on this one to satisfy my curiosity.

I can drag it just fine with the 503 error displayed.. You do have to be a few pixels from the top window border, but it works great nonetheless.

StatusPage has native Subscriber Notifications [0]. Cloudflare must not have it setup on their end.

[0] https://status.io/features

Hah, I remember this all too well

Wasn't familiar with BPF programs until I saw your comment, and subsequently went on a search trail. Really like what I've read. BPF and XDP provide so much utility!

I thought Jessie had a good overview[0] of BPF

[0] https://blog.jessfraz.com/post/linux-observability-with-bpf/

FWIW, I know iOS's camera natively detects QR codes, and I believe Android does as well.

In my opinion, the ability to use the native camera app to read a QR code significantly reduces the barriers-to-read for general users

Think we could crowd source the outage reports? I'll build the dashboard if there's interest

Likewise, s3 ops are failing for me too.

Specifically ${BUCKET}.s3.amazonaws.com is failing to resolve.

In being careful to not build an impossible barrier-to-entry, perhaps the requirement becomes active upon certain criteria (e.g. number of users)

How would one motivate these companies to _actually do something_ with the results of the audit? Perhaps, buried deep in the burrows of their bureaucratic empire, are several audit reports outlining this vulnerability..

And you'd need a fourth person to push the floppy in.

I too rolled my eyes when I read that sentence..

Check your Safari setting "Show full website address". Checking it will show the full URI.

I'm certainly not a fan of the new URI scheme, but it is worth pointing out that Safari has already made the same change. Furthermore I'm not convinced said change is a net-negative for the average consumer.

Safari added the setting "Show full website address", which does just that. I wouldn't have a problem if Chrome followed suit and defaulted to the new scheme, but gave us the option to show the full URI.

Let's optimize!

    #!/bin/bash
    db_set () {
         echo "$1,$2" >> database
    }
    db_get () {
         # read database line by line in reverse, stopping at first match
         tac database | grep -m 1 "^$1," | sed -e "s/^$1,//"
    }