HN user

cromantin

50 karma
Posts0
Comments25
View on HN
No posts found.

Because there’s finally an image generation that can do people with hands, I’m returning to my project for a day in life screensaver. Me and my wife will add notes to the calendar with what happened today. I will pull maybe some images from my photo library and ask llm to describe them. Then I will feed this into flux and create an image. And then I will put the image into Apple photo library to show on my Apple TV.

I tried this manually and it was a blast with my kids. They’ll love it.

We’re (fx.gl) using it in all our games to create a connection between game account and email. It works great. User click on mail to link. Send email with uniq token. Sever receives email and connection is created.

Some caveats:

1. not everyone has email set up on phone. We provide instructions to send email by hand.

2. We emphasize for user to choose correct email if they using work and personal email. No good solution here if user connect game account to work email. Only letter to support

We've been doing replication for 3+ years with zolando patroni. It works great. We run pg in docker and patroni too. First it was patroni with consul and right now its patroni with kubernes store (it store leader in endpoint). Highly recommend. There are other popular tools for this, it just a preference.

Yes. This is correct way to do logging. Pass an object with request, user, logger and other attributes around as you process it. This is basically "session"

Thou idea is cool it product in itself. As you need a k8s person you would need istio person. It has lots of interconnected components, it own configuration primitives (lots of them) and if any of them misconfugured or wonky (looking at you mixer) you will have to spend days debugging it (mixer produce 10k of unreadable logs a second).

It’s great if you know it’s codebase. Not for general case.

I moved our projects to ts in early 2013. Back then there where no strict null checks (imo main feature of any modern language) and typesystem was in infancy, but still it was totally worth it - our team could reason about code and nothing broke at runtime.

Now ts come long way. If your start any js project - start in on ts. And by god - enable full strict mode.

Patrons is great. Running dockerised Postgres with consul backend for years without a hitch. Haproxy as lb. What that? A replica need reboot. Just reboot. Primary? Just failover to replica and reboot. Undesired reboots recovers in under 10 seconds. During which just primary is not available but replicas are.

Se­cu­rity Keys 9 years ago

Unfortunately parent is right. What you describe is using generated one time passwords. But there is no way (to my knowledge) to incorporate 2nd string into it.

Ex: right now - myPass<boop the yubikey><long password from yubikey followed by linefeed>

with otp - myPass<boop><hashed and signed one time password that no nothing about myPass>

Se­cu­rity Keys 9 years ago

Yes, i am. I would've used one-time passwords but there is no way to incorporate brain-string to it.

I've used it way before there were good solutions for mac. And my main concen was to unlock my machine.

I've would've ditched it if only filevault could be unlocked with it :(

I may ditch this in favor of one-time passwords any way - support on mac is pretty good now and filevault will be secured with 9 symbols string.

Se­cu­rity Keys 9 years ago

I've been using Yubikey as my 2-nd factor password source for years. It's great. I would have even thrown away second factor if yubikey could have unlocked macos FileVault.

What's 2-nd factor password? Well, basically yubikey stores just long text string, and another, shorter string, is stored in my brain. When i login i enter short string, then press yubikey.

To steal my data you don't only need to steal yubikey but also get my part of the password from me.

RancherOS is separate entity from Rancher. It's their attempt at smallest possible OS for running docker. You may use rancher and never use rancher os.

Said that i personally use RancherOS on t2.micro instances without any problems.

In my anecdotal experience with 10 machines and 40 services, half of machines dedicated and half in amazon - i've tried:

k8s - great but for >>10 machines and you need a devops to watch and configure it + every configuration example on site is broken in one way or another. skydns is working for dns. has it's own overlay network.

nomad - great, but doesn't manage dns or network + i didn't get how to save it to file, only upload to nomad. What if it fails? Where cluster config is stored? May be it should be used with Terraform, but i did't like it. Thou for it's purposes it working good. Has concept of long running tasks and can run VM's

helios - i don't remember exactly why but i didn't like it. Something with configuration management. No network or dns.

maestro-ng - this is as raw as it gets. Basically docker compose. I was using it for a while, but it hit it's limits pretty fast. No network or dns.

rancher - after seeing it in action i fell in love. Beautiful UI (you can even view logs and start shell from web ui, and it works great!). Has DNS, manages your overlay network. Store configuration in mysql (i use amazon's rds with MZ). It has it's own perfectly capable scheduler - Cattle. And it can run k8s and mesos if you want it to. I highly recommend OpenVPN package that will connect you to internal overlay network and you will be able to work with services walled from outside world.

I can't wait for the times when i would ask my wife "where are my sneakers?" and in 10 minutes amazon would send me email for buying brand new sneakers with drone delivery in 5 minutes.