HNHacker News
TopNewBestAskShowJobs

xorgar831

303 karma · joined December 2, 2012

submissionscomments
xorgar831··on Technology Giants Settle Hiring Suit
https://www.hightechemployeelawsuit.com/

Though I think the deadline has passed... you had to register to be part of it.

Update: oh, I take that back, you have until 4/26/2014 it says.

xorgar831··on Confessions of a Full Stack DevOp
DevOps is really the traditional Unix admin role, however the operator role has now be renamed sysadmin in most companies.
xorgar831··on Akamai release source to their custom secure_malloc for OpenSSL
It would have to be the Affero GPL actually, since they just run it on their servers and don't distribute the software.
xorgar831··on Use after free bug in OpenSSL
Cool, thx!
xorgar831··on Use after free bug in OpenSSL
It seems like someone should start a Sourceforge for security project; a place that tracks and does high quality static analysis of open source projects, and makes the reports readily available.
xorgar831··on DigitalOcean not destroying droplets securely, data is completely recoverable
How did you solve the original performance problem with scrubbing by default?
xorgar831··on Ding.io
I use Harvest now, their OSX app actually tracks when I'm idle for too long and will prompt me to roll back the amount of time I've been idle. It doesn't remind me to turn on the timer though when I forget. ;-)
xorgar831··on Twitter SVP Chris Fry Breaks Down How His Engineering Org Works
Their monitoring dev team alone is 22 [1], and they specifically mention decomposition of services as you say.

[1] https://blog.twitter.com/2013/observability-at-twitter

xorgar831··on DigitalHax – Allows you to recover data from "Destroyed" Digital Ocean VM
Well that just made my brain explode. This is going to make it that much harder to argue that public clouds take security seriously. I'd love to see an example of what data they think is fine to leak, since that seems to be their performance strategy.
xorgar831··on AK47 assault rifle inventor Kalashnikov dies at 94
Valid point, there's no relation between guns and killing, Rwanda clearly proves this.
xorgar831··on AK47 assault rifle inventor Kalashnikov dies at 94
Demonstration by Indiana Jones of how determination is really the only difference between the two: http://www.youtube.com/watch?v=4DzcOCyHDqc
xorgar831··on AK47 assault rifle inventor Kalashnikov dies at 94
Exactly.

Also, the impact of the Manhattan Project on Richard Feynman: http://www.youtube.com/watch?v=_ah7f-1M2Sg

"I simply didn't think"

xorgar831··on AK47 assault rifle inventor Kalashnikov dies at 94
Just like napalm, mustard gas and nuclear weapons, yep, no volition there either. Just can't figure out why people misuses weapons to harm others... such a mystery.
xorgar831··on Millions of Target shoppers face new debit card limits
I still don't get how they had the mag stripe, the PCI compliance [1] documentation is pretty clear about that:

Sensitive data on the magnetic stripe or chip must never be stored. Only the PAN, expiration date, service code, or cardholder name may be stored, and merchants must use technical precautions for safe storage (see back of this fact sheet for a summary)

[1] https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storag...

xorgar831··on Apache Kafka 0.8.0 released
How does that compare to RabbitMQ's disk backed store?
xorgar831··on How We Deploy 300 Times a Day
http://12factor.net/config

> The twelve-factor app stores config in environment variables (often shortened to env vars or env). Env vars are easy to change between deploys without changing any code; unlike config files, there is little chance of them being checked into the code repo accidentally; and unlike custom config files, or other config mechanisms such as Java System Properties, they are a language- and OS-agnostic standard

This is just silly... you have to store your configs somewhere, and setting env vars is not OS agnostic.

Assuming you're not using something like Zookeeper, you do want track your config files in your revision control, just separate from the app. Implement an override system so your app loads the env specific settings from a standard override location (e.g. Java /opt/overrides/myapp.properties). If you use env vars or property files doesn't matter as much as being consistent and that you're not creating more complexity to just to make things simple.

xorgar831··on Pencil
> Marketing is not an excuse for incorrect claims.

You must be new to planet earth. ;-)

xorgar831··on HostDB
What would be more interesting is a modern framework and standard around querying inventory information. Something that's min implementation requirement is simple enough for consumer products to implement, and scales up to enterprises. And of course supports handling legacy/current discovery methods as well.

Seems like the main issue would be there's only limited case where inventory systems are currently needed, and the existing systems aren't completely broken just yet. But you can imagine at some point, being able to track and manage all of the devices in your home will be a big issue, and there may be an incentive for companies that produce enterprise and consumer goods to not have to develop and maintain duplicate standards. At that point it seems like it would drive some more innovation here.

In the meantime, my preference is to query data in real time form its source (e.g. AWS, VMware), vs. syncing data to a CMDB like database. Unmanaged physical inventory of course still requires a CMDB like database.

xorgar831··on Marelle: logic programming for devops
Rackspace recently mentioned having tens of thousands of hosts managed with Ansible actually, and it works fine over SSH. Here's some slides on issues they ran into and resolved: http://prezi.com/tyasc3-vj_id/ansible-turbo/

Though one of the core technology decisions behind Ansible is that you don't need much to get it running. You can scale things up as needed, such as fireball mode. And you can boot strap that process using Ansible. You don't even need DNS.

Hosts can register back with Ansible on start up, this works today with their AWX product and cloud-init's phone home feature. Also your inventory of hosts can simply be queried from sources, such as AWS's inventory list, so in that case you can't have a host that's unaccounted for.

xorgar831··on From a Model S owner in Tennessee
A gas tank is on the bottom as well, though I guess it doesn't run the entire length of the car either.
xorgar831··on Marelle: logic programming for devops
You do know where the author of Ansible came from right? ;-)

Ansible keeps the task and orchestration layer simple so you stay focused on the problem you're solving vs. focusing some complexity of the tool itself, like a hierarchical data model.

If you need complex logic, use the programming language of your choice and write a module, it's simple and your code can be as complex as you need.

If you need more complex data structures, then simply have Ansible query it from a real database or other datasource, with as complex a data structure as you need.

But at the layer you're expressing what needs to be done, it should be simple and easy to read.

xorgar831··on Show HN: Review healthcare.gov plan prices in 1 click rather than 16
I got the same for 94906. Made me think it was a joke site actually. ;-)
xorgar831··on Users complain their Dell 6430u laptops smell like cat piss
Rose water for a long time smelled like a cleaning product to me, Turkish Delight and Rose Lassi I thought had chemicals in them as a result. ;-)
xorgar831··on False detection on file tcpip.sys
Probably because the risk low, and it would require a good deal of work to maintain such a database. You'd have to keep it updated after every patch, a system may get a different version of the patch based on what is installed on the OS etc.
xorgar831··on Zookal starts "world first" delivery-by-drone service in Sydney
If only there was some other way to transfer information, I just can't think of any... oh well.
xorgar831··on A selection of proposed German words
We find it lustig actually.
xorgar831··on The New AWS Command-Line Interface
I wonder if the fish shell could autocomplete the commands; it has a feature to generate autocompleation settings from man pages.
xorgar831··on Introduction to AWS OpsWorks
After having used Chef on a project, I've found it to be really a clueless train-wreck of a product that they got their buddies in the USA NW to use. The basis of their approach is that they have no clue what you're doing, because every one's environment is different, so they just leave it up to you how you want to do everything. Yet the whole value in such a product is enforcing good factorization, implementation and maintainability. If you let something like this lose on your Fortune 500 you're just going to have a pile of flakey, inconstant and convoluted and unmaintainable DSL crap doing all sorts of random stuff... and that's being kind to the product IMO.
xorgar831··on zPerfmon – Zynga’s Server Performance Analysis Tool is Now Open
yea, blurry illegible screen shots.
xorgar831··on Der Spiegel says US bugged EU offices in Washington
A spy organization caught spying, shocking.
← PreviousPage 4 of 6Next →