HN user

henridf

1,151 karma
Posts127
Comments23
View on HN
github.com 6y ago

ZNG: Structured log format with in-line schemas

henridf
2pts0
www.theguardian.com 6y ago

Amsterdam to embrace 'doughnut' model to mend post-coronavirus economy

henridf
2pts0
www.sciencemag.org 6y ago

Scientists have turned the structure of the coronavirus into music

henridf
1pts0
epiconlineorchestra.com 6y ago

The Epic Online Orchestra

henridf
65pts14
www.nytimes.com 6y ago

European Experts Ready Smartphone Technology to Help Stop Coronavirus

henridf
2pts1
www.pepp-pt.org 6y ago

Pan-European Privacy-Preserving Proximity Tracing

henridf
7pts0
www.bloomberg.com 6y ago

Palantir in Talks with Germany, France for Virus-Fighting Tool

henridf
3pts0
blog.merigoux.ovh 6y ago

A mathematical formulation of the tax code?

henridf
1pts0
www.dactiv.llc 6y ago

Osquery and Zeek: Correlate network connections with community ID in Osquery

henridf
2pts0
www.theguardian.com 6y ago

Dutch supreme court upholds landmark ruling demanding climate action

henridf
27pts0
marginalrevolution.com 6y ago

Income Share Agreements

henridf
3pts0
oxide.computer 6y ago

Oxide Computer Company

henridf
6pts1
cilium.io 6y ago

Hubble – Network, Service, and Security Observability for Kubernetes

henridf
2pts0
en.wikipedia.org 7y ago

Solar Fuel

henridf
1pts0
themargins.substack.com 7y ago

Taboola, Outbrain and the Chum Supply Chain: The Dark Underbelly of Ad-Tech

henridf
2pts0
crawshaw.io 7y ago

Go 1.13: xerrors

henridf
157pts145
github.com 7y ago

ZetaSQL – Analyzer Framework for SQL

henridf
3pts0
delta.io 7y ago

Delta Lake

henridf
25pts3
medium.com 7y ago

Tablecloth: A new standard library for OCaml and ReasonML

henridf
4pts0
www.elastic.co 7y ago

New cluster coordination layer in Elasticsearch

henridf
2pts0
github.com 7y ago

Open Distro for Elasticsearch (By AWS)

henridf
5pts1
medium.com 7y ago

Chronicle: Can I Get the Backstory?

henridf
4pts0
www.ft.com 7y ago

Mondelez sues Zurich in test for cyber hack insurance

henridf
3pts1
nil.csail.mit.edu 7y ago

Go's memory model [pdf]

henridf
4pts1
github.com 7y ago

Loki: like Prometheus, but for logs

henridf
5pts0
arxiv.org 7y ago

Serverless Computing: One Step Forward, Two Steps Back

henridf
4pts0
blog.dshr.org 7y ago

Cryptocurrency Collapse

henridf
1pts0
medium.com 7y ago

A Closer Look at Go (golang) Type System

henridf
2pts0
arxiv.org 7y ago

What's in a GitHub Star?

henridf
1pts0
medium.com 7y ago

Making Prometheus more awesome with Thanos

henridf
3pts0

Prometheus is a (rare) recent example of a significant, thriving open-source project that is community-based. Not quite as broad in scope as something like Elasticsearch though.

We ran into a number of issues with Helm when deploying - failures leading us to have to rollback, with rollbacks then failing, requiring manual changes to unblock.

I think that for third-party packages and related templating (which seems like the original use-case) it works well, but I would be wary of using it for high-res deploys of our own stuff.

Minikube is working great for us. Makes it easy to run something that's pretty close to a production stack on a dev machine.

Typically with locally-built (dev) images rather than those from the registry that CI writes to, but other than that the k8s manifests are the same.

Looks like a nice tool, and it's great to see syscalls getting more attention.

I don't fully get the argument for why on-host filtering is undesirable. Of course naively filtering for curl-originated connections isn't a solid detection scheme for rootkit-installs! That's just a naive filter, which a naive user could mis-use in a centralized way or in a distributed way.

As for event correlation (#2 of the pros), it can be done on-host too. And back-testing (#3) of new rules is indeed a highly valuable feature! But you certainly don't have to log everything centrally to get that capability. E.g. in the case of Falco, you can capture trace files and re-run any number of rules/filters on them.

I do agree with the point on rules being exposed to an attacker.

[Disclaimer: author of the initial version of Sysdig Falco]

Another scenario:

US Citizen living and working abroad buys a house for X in local currency. Later sells same house for the same amount X in local currency. That local currency has appreciated by 20% against USD in the timeframe. And the IRS computes capital gains in USD, not in local currency.

Net result: the seller owes IRS "capital gains" taxes on 20% of the value of a house that was bought and sold for the same price.

The Juttle query language allows the expression of dataflow graphs and UDFs which can not (in general) be done natively in ES.

As far as the scaling issue goes, this was designed to run on premise rather than as a SaaS service (unlike bigpanda?).

Disclaimer on last paragraph: as per @demmer's comment below, Jut's plans have changed, so it may no longer be valid or relevant.

Indeed storage choices are plenty. That said, if you want to be able to do the kind of optimizations that are described in the article, then the set of candidates gets a bit smaller.