HN user

llarsson

1,760 karma

PhD

Senior Cloud Architect and DevOps Expert Engineer at Elastisys

https://www.linkedin.com/in/llarsson

https://elastisys.com/

Posts26
Comments335
View on HN
elastisys.com 4y ago

Using Lens with Compliant Kubernetes

llarsson
3pts0
elastisys.com 4y ago

How to integrate your CI/CD pipeline with Kubernetes and RBAC

llarsson
2pts0
elastisys.com 4y ago

ArgoCD: What, Why, How?

llarsson
2pts0
elastisys.com 4y ago

Access Control via OpenID Connect (OIDC)

llarsson
1pts0
elastisys.com 4y ago

Managed Container Services: KaaS, KPaaS and CaaS Explained and Compared

llarsson
2pts0
elastisys.com 4y ago

NSA and CISA Kubernetes Security Guidance: Summarized and Explained

llarsson
2pts0
elastisys.com 4y ago

Redundancy Across Data Centers with Kubernetes, WireGuard and Rook

llarsson
1pts0
www.cncf.io 4y ago

Why Kubernetes Was Inevitable

llarsson
2pts0
elastisys.com 4y ago

Automatic Multi-Cluster Deployments and Services in Kubernetes

llarsson
2pts2
elastisys.com 5y ago

“But what if we just use encryption?” – Practical GDPR for CTOs

llarsson
2pts0
www.cncf.io 5y ago

Cloud-agnostic third party managed Kubernetes services – unexploited opportunity

llarsson
1pts0
elastisys.com 5y ago

Arvos: Vulnerability Management Done Right

llarsson
3pts0
elastisys.com 5y ago

Evaluation of Cloud Native Message Queues (Kafka, NATS Streaming, RabbitMQ)

llarsson
7pts1
elastisys.com 5y ago

How to install and configure the Kube-Prometheus monitoring stack with Jsonnet

llarsson
3pts0
thenewstack.io 5y ago

Governance, Risk and Compliance with Kubernetes

llarsson
4pts0
elastisys.com 5y ago

Kubespray Support for UpCloud

llarsson
3pts1
elastisys.com 5y ago

Compliant Kubernetes Network Policy Dashboards: Defend Against Data Breaches

llarsson
3pts0
www.famouscampaigns.com 5y ago

Ad campaign against weak passwords: common passwords in Sweden are “shit”

llarsson
1pts0
www.cncf.io 5y ago

CTO Headaches: Top cloud-to-cloud migration woes (and how to solve them)

llarsson
66pts30
elastisys.com 5y ago

Elastisys Announces General Availability of Compliant Kubernetes as Open Source

llarsson
5pts0
news.ycombinator.com 5y ago

Ask HN: Is Microsoft preferable, from a privacy point of view, to Google?

llarsson
51pts26
elastisys.com 5y ago

What Amazon’s GDPR lawsuit means for your business

llarsson
4pts1
elastisys.com 7y ago

Geo-Distributed WordPress with Kubernetes and TiDB (with Repo, Terraform+Helm)

llarsson
6pts2
elastisys.com 7y ago

Critical Kubernetes security flaw (CVE-2018-1002105) in plain English

llarsson
7pts0
elastisys.com 8y ago

On setting up highly available Kubernetes clusters

llarsson
2pts0
www.linkedin.com 10y ago

Scalable WordPress Architecture

llarsson
1pts0

The ability to sandbox Google Play Services (if you need it, but realistically, you probably do) and to simply not assign it more permissions than it absolutely needs is awesome. I run it with very restricted permissions, where it by default requests every single permission it can. In stock Android, it has all those, and you can't limit it. Just that is worth it for me.

Because it's been trained on decades of StackOverflow and forum posts. And because while some command line tools go in and out of fashion, quite a lot are very stable, so their use will show up all the time in the training material.

Since it's all statistics under the LLM hood, both of those cause proven CLI tools to have strong signals as being the right answer.

A question because I'm not using speech-to-text, but find it intriguing (especially since it's now possible to do locally and for free).

How have your computing habits changed as a result of having this? When do you typically use this instead of typing on the keyboard?

Attention is all you need, as the transformative paper (pun definitely intended) put it.

Unfortunately, you're only getting attention in 3 second chunks.

Microsoft Edit 1 year ago

Telling people to use nano would of course have been next to impossible. Much easier to rewrite a DOS-era editor in Rust, naturally.

It is interesting that this relates exactly to everything that goes as "cloud native" these days, without really mentioning the fact that due to Kubernetes and the Cloud Native Computing Foundation's huge landscape of open source software that targets specifically Kubernetes, you can have a comprehensive platform on "any" infrastructure. On-premise, private cloud, public clouds that are in the EC2/S3 era of services (VMs and object storage)... it doesn't matter. You can literally run the same database that powers YouTube, it's freely available and operates great on Kubernetes.

Yes, the problem is that someone has to manage it all (full disclosure: I work for Elastisys, a company exactly in the space of fully-managed application platforms on top of the infra operated by others).

But the fact that smaller cloud providers haven't had the money to invest in their capabilities to offer managed services to the same degree as the enormous hyperscalers isn't exactly impossible to overcome. In fact, it's never been more possible. Other comments here show that very well, too. And that the particular choice of identity management services is perhaps not the best for showing where the hyperscaler options shine.

That's right, and it's also why you see Kubernetes distributions popping up.

That way, someone has already done all the configuration of various plugins and components for you. For instance, the major clouds that all let you easily start with their Kubernetes services and that they integrate well with the logging and monitoring systems, IAM, server/node provisioning, etc.

Or ones that are not tied to any particular cloud provider, and perhaps focused on security (full disclosure: I work for Elastisys, who makes exactly that) or ease of use.

I'm sure we will see more and more such efforts in this space, exactly because cobbling together something yourself from scratch (basically just a control loop runner, as you said) is neither very appealing when you think about ongoing maintenance, nor very cost-effective for businesses to spend engineering time on.

As writing advice, it went from very understandable and approachable to stuff like:

"You can get this property by stapling HKDF onto your protocol (once for key derivation, again for commitment). See also: PASETO v3 and v4, or Version 2 of the AWS Encryption SDK.

It may be tempting to build a committing AEAD scheme out of, e.g., AES-CTR and HMAC, but take care that you don’t introduce canonicalization risks in your MAC."

I would almost suggest breaking stuff like this into two articles, one which is very technical and correct, and one that conveys the high-level message. The high-level one can link to the technically correct one whenever the urge would come to explain something more fully.

Can't do it myself, but I've heard that people listen to typical traditional "video game music" for this purpose. Fast, upbeat, and never something you need to focus on, but rather, it just helps you keep up the concentration.

...if you're the type of person who can listen to music while working, that is.

In tons of enterprise and just general office settings, you'll be given a CSV file, rather than a database dump. Heck, even scientific lab equipment will output CSV for you. It's basically the lowest common denominator for all kinds of tabular data.

So anything that makes using CSV files easier with your product is likely going to be a welcome change for a lot of people.

Realistically, your database engine can probably ingest the CSV file in a simple import statement, so you're likely 98% done already with this. :)

The point of Kubernetes was to make "run this software on a cloud" trivially compatible across clouds. No specialized code that is needed for load balancers, storage, networking... you should be able to take your containerized application and the set of YAML files that describes what you want to do, and they work on "any" cloud.

As long as you don't rely on implementation details like a specific Ingress Controller that needs special annotations, this is exactly what Kubernetes does, and the reason why you have Helm Charts that don't need to take into consideration which the underlying cloud is.

Going back to what we had before, you had to be very aware of exactly which cloud provider you'd use. And since AWS had about 80+% of the market then, that meant that instructions for how to run things on Google's cloud were not very good, if they existed at all.

The fact that they resorted to writing crap these days with AI is what is making them lose relevance, not that they have been in the business for a long time, and have thousands upon thousands of articles.

CNET used to, perhaps not be cool, but it certainly was a place you'd go get tech news from every once in a while. Just imagine they were huge enough to buy download.com, back then, even! For a while, they were essentially *the* place you'd go for downloads of various shareware stuff.

Now, it's a ghost town of a site with AI-written junk.

If their romantic significant others are fine being number two in this way, and it's all consensual, then they should do it and move their lives the way they want to.

I would personally not be OK with this setup with a romantic partner (neither as one who would see a friend as my number one or if the romantic partner did with someone else), but that's obviously not supposed to limit them in any way, since I'm not part of their equation.

All relationships could do well with clear boundaries, understanding, and a ton of communication to continuously maintain that as relationships evolve.

Forgetful Browsing 3 years ago

Semantic difference.

Brave takes away ads from pages.

Then, it shows other ads in other ways:

https://brave.com/brave-rewards/ https://brave.com/brave-ads/ad-formats/

So while the statement that it "replaces ads with their own ads" is technically false (the ads are not injected into the web sites in place of the blocked ones), it's still a sloppy but mostly correct way of pointing out that the business incentive behind Brave's ad blocking means that the goal isn't abolish ads as a concept altogether. The point is still to show ads if companies want to pay for it.

The status quo was "months ahead of time", but their startup idea was to cater to "last-minute" types of travelers, and challenge that status quo.

Have a sudden urge to have a nicely planned and well-put together weekend in a new cool place? Too much of a hassle to deal with yourself, maybe, but a whole lot nicer if you can just see what someone has packaged for you.

Cool idea, and would love to take it for a spin!

Feedback: the MongoDB dependency is annoying, from an enterprise (self-hosting) perspective. Due to their licencing, you can't have a managed service provider host it for you (unless that provider is Mongo itself). I have not looked into what data you store, but I can't imagine it's that schema-less at this point, so perhaps it could be possible to store in an SQL database instead? Or in PostgreSQL via its JSON support?

In this case, I would recommend that you get an employer-specific GitHub account, so you can compartmentalize it that way. A bit of a hassle, yes, but then, you're definitely not tying yourself in git history to that employer for your entire career.