louwrentius

Quiet quit aka : do the actual amount of work you are are paid for and don't let yourself get ripped off due to 'pressures'.

The chassis is not connected to ground, tbh. Not really.

All that output needs to be checked, thus why making mistakes faster doesn't seem valuable. How do we determine mistakes are made in the first place. Is it determined by people?

That word 'some' does quite a bit of heavy lifting.

Because there is a ton of work that people tend to perform that falls out the scope of that 'some'. And a lot of work requires alignment with other people, and so on. LLMs don't have agency, despite people hyping 'agents'.

LLM by their nature can't really replace people. Companies found this out from experience, as they fired and rehired people multiple times, you've seen the articles.

About the - humans aren't accurate either - 'argument'. Why replace people with something objectively worse and more unpredictable?

Thank you

I haven’t found a solution for a single DC power supply I can connect to the systems. Maybe I have to solder something together myself.

Thanks for sharing. I’m running a lack rack for 15 years, would have been fitting

I've played this game so much on a Laser (Dutch computer brand) 286 with VGA monochrome screen, in the early '90s.

I'm going against the grain but I read: we have a cultural/policy issue and we 'fix' it with tools.

I think what you hear is never the whole story, there is much more going on.

Nothing happened to the Nerds. They are all showing their true colours.

They may have shared a love for technology, what they also shared is a deep immaturity.

The immaturity of a person not wanting to acknowledge and cary any responsibility for other people, for the consequences of their work, for any kind of accountability. Just play with their toys without any concern for the external world.

'I'm just here playing with tech and code'. Sure! but that stuff you're building is being weaponised by other (the venn diagram unfortunately overlaps) tech bro's so men can film women with their glasses in public like the little sick creeps they are. Or steal all their data. You can't pretend you are not responsible and complicit.

They want "what's theirs" and anything in their way - including people - have to comply or be destroyed.

Author: I've had multiple HN hits and the Pi4 (on residential gigabit fiber) never got any significant load.

Smart Glasses are for creepy men who want to make pictures of women without their consent in secret. I hope these glasses will be banned.

  Lawmaker Cifrová Ostrihoňová said that, from a gender-based violence perspective, it is "simply unacceptable for any woman to worry about being filmed in public secretly and then worry about those images being shared online.”

I'm so sad that there's no backstory to this huge throve of old computers.

Where are all these machines from? Who owned them, and why? Why were they all there in storage, in a hangar. Would have been even more interesting.

I would not use containers in the first place as this adds added complexity and overhead in the first place.

I wasn't talking about an office environment. I'm talking server-to-server communication. Like all the internal infrastructure to support a web application. Maybe I should have been more explicit about that.

How a new device bootstraps on the network without DNS? Depends, on the device, but a physical server doesn't need DNS, only PXE boot / TFTP / HTTP as usual and maybe a proxy to access an update server if you don't run one yourself.

Whatever does the canonical management is the piece that when it breaks everything breaks.

That is absolutely true. I believe that a solution where you provision a text file with an updated ip address or /etc/hosts file is inherently simpler, less risky and easier to recover from, although I admit I don't explicitly state this in the article.

You don't need to setup one cert for 127.0.0.1 as stated by the parent comment.

It's interesting as I really address all these things in the article. Not explicitly PTR and SRV, MX records, but these aren't essential within your internal infrastructure. No need to look at MX records if I can just straight up point at the SMTP server(s).

And I explicitly argue within the section about egress filtering that allowing systems access to public DNS is a security risk.

Why would some form of service discovery be required? No need to discover things if you can push said information in configuration updates using tools like Ansible, pyinfra, and so on?

I do state in the article that in the examples DNS isn't the root-cause, but the blast radius is very significant. Regardless of the topic of external/internal services, isn't it remarkable that a group of very smart and well-paid people create such circular dependancies?

Yet, I'm not arguing for Facebook or similar size companies to ditch DNS internally. I'm making the argument for much smaller organisations to pause and think where their own risks lie and if it would make sense to cut out DNS to reduce risk. Whatever process you used as an organisation to update DNS in a safe manner, you still use with the alternative solution, that doesn't change.

That said, even an broken update to /etc/hosts is probably easier and faster to recover from than a broken DNS service that everything is tied to and due to TTL caching, can take much longer to resolve.

Tell me please what the problem is exactly

Why is that madness and not amazing? Isn’t the simplicity beautiful? Managing /etc/hosts with a tool like Ansible?

Certs support ip addresses? However, /etc/hosts would solve the issue probably, unless I’m missing something

Proposed solution: update the inventory and run your Ansible playbook/role agains your infrastructure (or subset). I don’t see the issue, to be frank.

Serious response: how is templating out /etc/hosts with Ansible not 10x simpler than setting up an additional service that only introduces additional risk?

- note I was talking about internal infrastructure, not public services

- DNS load balancing is not that important for internal services in most Cases? Would only use it if alternatives won’t work.

- the virtual host issue is really adressed by /etc/hosts, I thought that was obvious, I now regret not explicitly adressing it.

Maybe I’m missing something but because of this kind of risk, an old fashioned virtual machine feels like a more robust security boundary.

I agree, but Capitalism is inherently an unequal system, one group of people own the capital and the rest doesn't. And nobody talks about where that initial capital came from (large-scale theft, wage theft, slavery, and so on).

That means this inherent inequality gives one group tremendous power over the other.

What we really need is a system that doesn't automatically promote psychopaths and sociopaths to the top, the more ruthless, the more money you make, despite the human cost. We need a system that doesn't value money/capital as much, but other outcomes.

And we especially don't need Billionaire Philanthropists. Pay the damn taxes. Yet, this is the site for the Temporary Embarrassed Billionaires, so I know how this will go over...