1,554 karma · joined September 12, 2018
https://www.bejarano.io
Half the data Chrome collects is harmless, and the other half is up to the user to give up:
- Location data: you are asked and must approve for Chrome to use (at least on macOS) - Financial data: you must enter it manually and click "save for future use".
Could it be better? Sure! But I think DDG is exaggerating here. We're not _that_ bad.
Thanks for being so kind, this is awesome!
But it is, I recall it once was the hottest sauce in Hot Ones[0].
I've found it to be the best spicy I've ever eaten: it does not leave the mouth (no throat or lip burn, does not go up your nose), the crescendo is soft (if you dilute it), and takes no more than 20min to go away after your last bite.
Also, don't forget the "winners" are appointed by the consumers, if everyone likes your product what can you do about it?
Are consumers supposed to skip the best option just because the company behind it is getting too big?
I use Basic Auth for many of my LAN-only web services at home and KeepassXC + browser extension feels like having client-side certificate authentication or similar, feels like going through airport security without taking your stuff off into bins.
When it works, it works great. You can tell the extension to auto-fill and auto-submit, so that it feels like you had been logged in from the very beginning.
The problem is, it works (in my experience) around 80% of the time. I'm guessing it's not on them since it requieres websites to follow certain standards in order to have autodetectable login form fields, but it's a pain nonetheless.
Try it, it takes a couple mins to set up. The best feature IMO is the keyboard shortcuts to fill in details.
All "Show HN" posts should do that IMHO.
I'll have to agree, there are few but very vocal.
Whenever you expect to get a traffic spike, you can always turn proxying on for a day or two and turn it off afterwards.
At the moment people, myself included, use "self-host" for both.
Setting resource requests also enables the use of HorizontalPodAutoscalers.
Be warned, though, in my experience etcd requires a somewhat decent read/write latency, or else it's going to fail, and when etcd fails everything fails. Your changes don't apply, etc.
It cost me 90€ at an IBM refurbished sell. It is downstairs by the router, and it has been hosting everything for me except my email and my blog (which I want to host but I'm not sure about the reliability of my ISP's service, this morning it went down for 5h12m, without prior notice or anything).
It is amazing how much you learn from doing stuff. I'm currently on my 3rd year of univerity for CS, so I've tried the academia-style learning process, reading books on my own and doing stuff on my own. The latter is the best method by far.
Self-determination is a right you reject when you step foot on Spain (and practically every other country).
We might have to change that, I don't know, but the Spanish constitution is no fascist rule, or else almost all modern democratic states are, too.
It is very complicated.
Then an illegally-binding referendum was organized by the Catalan government on October 1st, 2017. The result was 90% leaves, but yet again, 43% voter turnout, and there were no democratic guarantees, as some people were caught voting multiple times, the census was obtained illegally, etc.
After that illegal referendum, the Catalan government decided to secede and declare independence. That's why they were prosecuted and recently convicted. Declaring the independence of a part of Spanish sovereign territory is explicitly forbidden under the name of "secession" in Spanish constitution, and because it goes against the nation's own sovereignty it is considered a very serious crime, that's why they were convicted up to 13 years.
From my POV, as a Catalan citizen, this is ordinary application of law, the law that we all agreed upon in the first place, and the riots and violent scenes seen recently are simply caused by a minority of the pro-independent minority which want independence at all costs, and police forces can't allow that, thus, conflict.
That also infringes Spanish constitution's 2nd art., "the Constitution is fundamented atop the indissoluble unity of the Spanish nation".
It's not that they "should have let them vote", it's that they can't, unless the Spanish citizens reform the constitution and remove those articles.
The separatist movement is blocked in that regard, and unless all other UN countries were to recognize Catalonia as an independent state, they are locked in as a "comunidad autonoma" until a constitution reform happens.
Everyone will tell you their side of the story, with half-truths and euphemisms wherever they need them.
Source: I'm Spanish, currently living in Barcelona.
There's some features you could easily add to yours in order to make it a better overall image.
Well, I'm removing the battery and the pseudo-UPS logic right now. The battery looks fine, but I'm not taking any risks, since it's on top of the DL380 but under a wooden TV stand.
Thanks for the heads up! You might have prevented a fire.
I gave you an apples to apples protocol comparison. If you tell me there's a single bit that lets you distinguish between HTTPS traffic and DoT traffic running both on 443/TCP, then I'll buy your "kill switch" argument.
And even if you do, nothing keeps me from saying farewell to my ISP as soon as they press that switch.
I agree in that end-users shouldn't give a dime about DNS privacy, it should be private by default, but it is up to us to promote the correct protocol over the "hacky" one.
If DNS-over-HTTPS is superior, then why don't we shove everything down 443/TCP? Or better yet, why don't we get rid of TCP altogether and send everything over a port-less encrypted dynamically-reliable trasport protocol? Surely middleman couldn't distinguish between traffic.
Ports are there for a reason. The fact that they are used with anti-end-user intent doesn't make them (or any protocol that runs on them) inherently bad. Yet one thing that makes a protocol better than another one, given set of requirements, is efficiency.
By the way, if I were to switch my DoT server from 853/TCP to 443/TCP, the port wouldn't be a problem anymore. Per your standards, now DoT would be better than DoH, wouldn't it? Same results, smaller payloads.
s/mechanism/hack/g
DoT is a protocol explicitly designed for it's purpose.
If brickhead sysadmins block DoT it's their problem, and if you have to work around that then it is, in fact, a hack (or a "workaround", doesn't matter).
It's not that DoT or DoH are superior to one another, it's that DoT is "DNS in TLS", and DoH is "DNS in HTTP in TLS", doesn't that raise a red flag for you?
I bought Kubernetes Up & Running a year ago, I was disappointed to see it is a very over-the-top view, without getting into details.
I skimmed over Kubernetes in Action a couple months ago. Nothing really catched my eye either.
The last one I read was Kubernetes Security by Liz Rize. Either there's not that much to securing Kubernetes or the book is very introductory too.
The only parts of K8s I don't know a lot about are storage (haven't got past the NFS driver yet), CRDs and distributions like OpenShift. But in the same way I'm lacking storage expertise outside of Kubernetes.
I learnt about CoreDNS because Kubernetes uses it for service discovery, and once I read about it's "chaining plugins" philosophy I wanted to try it out.
And it was so refreshing coming from Dnsmasq that I fell in love with it.