rshnotsecure

Fascinating documentary on Kubernetes for those who have 50 minutes. Gives more background to the "Container Wars". The filmmakers also have documentaries on the history of Python, Argo, etc.

Some highlights:

- How far behind Kubernetes was at the time of launch. Docker Swarm was significantly more simple to use, and Apache Mesos scheduler could already handle 10,000 nodes (and was being used by Netflix).

- RedHat's early contributions were key, despite having the semi-competing project of OpenShift.

- The decision to Open Source K8S came down to one meeting brief meeting at Google. Many of the senior engineers attended remotely from Seattle, not bothering to fly out because they thought their request to go OS was going to get shutdown.

- Brief part at the end where Kelsey Hightower talks about what he thinks might come after Kubernetes. He mentions, and I thought this was very interesting ... Serverless making a return. It really seemed like Serverless would be "the thing" in 2016-2017 but containers were too powerful. Maybe now with KNative or some future fusing of Container Orchestration + K8S?

[1] https://youtu.be/BE77h7dmoQU

I finished calculating my taxes for 2024. Roughly speaking 20k more than I had already paid was on the line. It looks like the amount I prepaid in 2024 will cover it though.

That being said it was a particularly gut wrenching 2 days going over the numbers / figuring things out as I waited to collect the W2's and other forms.

I can't imagine how dealing with $80 million USD and 75~ people's job would feel.

I recall an article recently about organized crime gangs infiltrating the USPS. I wonder if this is the case here? [1]

[1] https://archive.ph/XBlQJ

In general, the rates of incest are significantly underestimated. I have seen this anecdotally with the individuals myself and friends have dated, along with volunteering for sometime with CPS here in Texas.

It is unreported for obvious reasons, and few realize how easy it is to get away with. Families have lived in close quarters for a long time, and the opportunity is great for sexual gratification with another. Siblings often live in the same room. There are significant power dynamics at play when one sibling is 3 and the other is say 11. Yet there aren't the restraining forces of maturity on the 11 year old.

Sadly, the incest movement was probably set back 20 years due to its association with Satanic Ritual Abuse in the late 1980's and 1990's.

For those looking on help with this, I highly recommend the book "Courage to Heal" by Ellen Bass [1].

A sign of progress is that in the latest editions of the book, it also focuses on men. The early editions only focused on women.

[1] https://www.amazon.com/Courage-Heal-Survivors-Sexual-Anniver...

Certifications would help distinguish you. It can be hard to evaluate the worthiness of foreign educational institutions, but certs, such as those for AWS and GCP can be great.

They often highly reflect what you will actually do on the job (assuming you are going to be a Cloud or DevOps Engineer), show discipline, and prove a high level of knowledge and the ability to gain that knowledge.

Other certs that I think are valuable include the CKA (Certified Kubernetes Administrator), Terraform Associate, and even the newer GitHub Certs. I'm sure others have valuable certs to add. It is always changing.

You Don't Know JS by Kyle Simpson. The PDFs are one of the most starred repos on GitHub: https://github.com/getify/You-Dont-Know-JS

Also more to your question, "The Browser Hacker's Handbook" and "The Web Application Hacker's Handbook" I also think are really helpful in understanding how browsers work. Sadly a not better documented subject.

Visiting the list of APIs on Mozilla's website is also helpful.

https://developer.mozilla.org/en-US/docs/Web/API

Similar incident happened in 2005 in another part of the Pacific. The Captain, whose conduct was mostly well regarded both before and after the incident, ultimately lost his job.

https://en.m.wikipedia.org/wiki/USS_San_Francisco_(SSN-711)#...

Just use hosts.allow for select IP addresses while banning all else via hosts.deny. This is a very low level blocking solution that is native to Linux, very simple, and very secure. I believe it also operates "closer to the metal" and under xinetd, but I could be wrong on this.

The answer seems to be no based on the Google SEO podcast: https://developers.google.com/search/podcasts/search-off-the...

I apologize in advance, but former US Army member with some gripes (well meaning though) against this group:

The ARL has been in somewhat significant trouble in Austin, Texas. There has been quite lukewarm (although not specifically negative) comments from Congress. Nothing has been really produced ... ever ... and this code is nice ... but "meh".

In particular the IG is looking at grossly inflated housing subsidies to several generals who wound up living in 5000~ sq ft housing (and between 5th and 15th street downtown). In return special deals were given to BAH providers in San Antonio for millions of dollars.

Lastly, and I wound up contacting DISA in Ohio about this, ARL would use the .army TLD from the registrar Donuts for a long period in the beginning. Obviously very bad for security, and not even sure how that gTLD got greenlighted in the first place.

This article calls Norway "neutral" during the war. That is a very generous analysis of the situation.

None of the Scandinavian countries have really come to terms with the amount they assisted and gave in to the Nazi regime during WWII.

In the case of Norway, the only legal party in the country was the Nazi Party from 1942-1945 [1]. Sweden was similarly guilty, and would quickly move to pay reparations after the war. Most interestingly, this was arranged by I believe Linus Torvald's uncle (other members of his family have similar high positions in Swedish culture / history).

[1] https://en.wikipedia.org/wiki/Nasjonal_Samling

1979 was also the year Rhodesia ceased to exist as a country. A decade before that, to the west in Namibia, Peter Thiel would attend boarding school while his father supervised the extraction of Uranium from the enormous Rössing Mine for SA's covert nuclear weapons program.

I also want to point out that South Africa is a significant country in the history of computing. Chris Pinkham would spend 4 years their building AWS (albeit on US-hosted machines). I have never figured out why exactly that was done. However Jeff Bezos name is really Jeffrey Preston Jorgensen, with Jorgensen being a very common SA surname.

Really the role of South Africa in the world today is deeply underestimated. Thiel's close confidante Roelof Botha ... the grandson of a former SA Secretary of State as well as Prime Minister ... is one example.

Also the Chinese/SA owner of the LA Times Patrick Soon-Shiong, the invention of organ transplant tech, Evan Spiegel of SnapChat (similar to Elizabeth Holmes he spent a year at 19 doing a genetics internship, but his was in SA instead of Singapore).

Lastly, if anyone has read the sequels to the book "Space Odyssey: 2001", you will remember that South Africa becomes a world power equivalent to the US/USSR. Always found that very interesting and a surprising outlook on the future.

Very realistic. Get involved in setting up data engineering pipelines. Apache AirFlow (Composer), BigQuery, Vertex AI, PySpark, Pandas, etc. Huge demand for these engineers now, most of whom have come out of DevOps.

Hard to imagine running a giant "Beowulf" cluster like this could produce results. Software programs are metastable ("Mythical Man Month" concept), meaning they constantly require maintenance because they are fundamentally entropy decreasing systems. The work to stitch such a system together would be phenomenal considering to simply building a massive data center (which would be simple by comparison ironically).

The "cloud" would be a much better option as it is incredibly powerful and the stability has been encoded into the highly similar hardware. See this classic text, the researcher who originally wrote it was hired by Google [1]

[1] https://barroso.org/publications/IEEEMicro2021.pdf

At the local level, despite Beijing's efforts, there is just very little incentive to report the actual numbers. This adds up, and has a feedback loop as provinces compete to have fewer and fewer cases.

The actual numbers are potentially much higher.

This blog post seems like an intel play designed to whip up anger and passion among the populace on all sides.

It reminds me very much of "The Stanford Review", founded by Peter Thiel, in tonality and content. That is to say, well written, but with a certain level of anger that doesn't seem necessary.

Kevin Ham is a name I haven't heard in a while. It is my opinion, after talking to law enforcement, people in Washington DC, and being brought in for various cyberinvestigations that ICANN has turned into (and one could say against their will) Organized Crime.

How so?

Domain names, especially pre-Bitcoin, were/are a fantastic way to launder money.

It costs $4,000 to set up an ICANN registrar. If I buy 1 million domain names from myself from Country X at $12, and the Registrar is located in Country Y, I have just moved $12 million without filing a single SAR. This is a very attractive way to bypass numerous financial safeguards put in place.

The reverse DNS of the IP address mentioned is: h-68-164-57-219.lsan.ca.dynamic.globalcapacity.com according to SecurityTrails.

The article also gives the following information:

- HOST DETAILS: H-68-164-57-219.LSANCA54.DYNAMIC.COVAD.NET

- IP Address: 68.164.57.219

The IP address is within a /16 block owned by Megapath, a Los Angeles hosting provider.

Nicole Perlroth's book on the cyberweapons arms race was somewhat of a bizarre read.

I'm not sure if it was poor research or a significant bias for/against Israel, but Israel the country is mentioned only once in the 646 page book.

This is a country that invented ICQ/AIM (Mirabilis in 1996), the Firewall (CheckPoint in 1994), and Skype (2003). It has one of the most well regarded cyberwarfare units in the world (Unit 8200).

This is a very large piece of history / persons to be missing from such a technology history, particularly for a journalist who spent 10 years covering the cyber field before writing the book.

That being said, the book's prose was excellent and it read quickly despite the length.

Less than 500 lines was a metric I heard once. As I recall it was from an O'Reilly blog interviewing someone, and the interviewer had to practically drag that definition out of the interviewee. YMMV.

What you describe is part of the AWS "Well Architected Framework". Static files should, as much as possible, be hosted on S3. This takes the pressure off the web/app server, is cheaper, increases resiliency to DDOS attacks, and allows much faster loading, particularly of video files, when one integrates the S3 storage with a CDN (such as CloudFront).

What I would find interesting is anyone running a SaaS project and NOT using S3/object storage for a significant amount of their files.

If am I reading this correctly, it seems one of the patchers was named "James Bond"?

This reminds me of the 1992 candidate for the Vice Presidency. He spent 7 years in a POW camp in Vietnam before becoming Ross Perot's 3rd Party running mate that year (and garnering 19% of the popular vote). Admiral James Bond Stockdale.

[1] https://en.wikipedia.org/wiki/James_Stockdale

What [redacted] is saying, while containing a bit too many Winnie the Pooh pictures, is technically accurate. [redacted] has many connections, mainly through her family, with Chinese intelligence agencies. Yes other countries such as Israel and Saudi Arabia have a sizeable number of agents embedded in Facebook and their contractors such as Accenture and TaskUs, but talking about the People's Republic of China angle has been seriously undocumented.

Since the above statement is my anecdote and doesn't rise to tge proof level of HN (though anecdotes are valuable), let me give some empirical evidence. if you check all the domains and subdomains Facebook's WHOIS records point too, you'll find a little over 2k currently running in Tencent's ASN. FB has tried to run it very quietly, but they've had an accelerator in Tencent's HQ office since 2018. Not clear the purpose, although maybe someone else can chime in.

Google Domains has had, from time to time, many odd complaints made against it.

Thankfully, Google Cloud Platform DNS has started to roll out, and I believe both management AND registration is available with enterprise support and more significant security.

An interesting fact is that JavaScript really has nothing to do with Java. They paid Sun $5 million to license the word "Java", because it was an extremely popular language at the time.

It bothers me that people are not more suspicious of things like this. Setting up a mesh internet grid is not a trivial engineering task. You would need to recruit at least several extremely skilled, extremely expensive network engineers with phenomenal understanding of how antennas work and radio wave propagation. You would have to run operations 24/7. You would need skilled lawyers in local, state, and federal law to fend off the legal challenges. Also you would have to have fierce integrity and honesty to not sell the data to recoup some of your costs.

In addition to all this, you would have to be running an aggressive counterintelligence program internally, because such an operation any intelligence agency would love to be part of, whether you know it or not.

The lack of widespread computer science knowledge in the United States makes it so we all continually fall for what are likely scams or intelligence agency plays.

1. https://thenewstack.io

2. The "reference architectures" page on AWS, GCP, or Azure.

3. ThoughtRadar by ThoughtWorks: https://www.thoughtworks.com/radar

I believe Telegram does this as well. They specifically have mentioned it before on their website.

The journalist Rocco Castoro, ex-Editor in Chief of Vice.com, has been working on a story about this for a while.

Roughly, and I might be misquoting here, what is now known is as follows:

1. The YouTube.com engineering team and internal Google networks are separate from most of the company and maintained by different engineers (for the most part).

2. There seems to be some internal investigation going on at Google as to whether engineers in the Los Angeles Playa Vista office of YouTube (the 440,000 sq feet Howard Hughes hangar from WWII just north of LAX) were accepting bribes.

3. These bribes were coming from ad fraud organized crime groups who were making money by making the YouTube apis and botnet detection algorithms less secure than they could be.

4. Because the YouTube division of Google was posting massive jumps in revenue and profit, the division was never looked into until recently as all was going well.

NOTE: I'm a former PSO Google Engineer (the GCP outside consultants that Google brings on to help customers onboard to GCP), so I am knowledgeable in this area.

Let's use that example of Austin, Texas. That's a bit near the top range you'll get there, but if you say get a Senior Cloud Engineer position with Deloitte, that is a number you can ask for. A little bit near the top of the range, but if you've got 5-7 years experience and the certs very achievable. Maybe a bit more.

Accenture, which has 3 offices in Austin, would for certain teams come close to that.

Consulting companies for better or worse will be the easiest to hit that number with outside of SF.

Note, you'd have to require no sponsorship.

Collating a list of mysteriously murdered CEOs and high ranking engineers since 1998.

The death of this engineer for EarthLink at 18 (while he also studied at MIT) and which allegedly involved a religious cult based in Oregon, is a good place to start.

Only about 2.5% of suicides are jumping to ones death also (although the percentage is double for women, and this number is US suicides in 2018 keep in mind).

https://en.m.wikipedia.org/wiki/Philip_Gale