ryandotsmith

Are there common patterns or examples of directives that operators should be aware of?

I know the post linked to systemd docs, but I’d enjoy seeing some snippets of directives people are using to achieve this kind of hardening.

There seems to be some formatting issues on the current version of the site.

The GH page is easier to read: https://github.com/zelang-dev/c-asio

Does anyone have an idea of how this is built? I wonder if they are using QUIC with relay servers or something like Tailscale's DERP.

Yes. It is this spirit that got me excited about computers. It's impressive that OpenBSD has remained consistent all these years. One of my all time favorite projects.

There is so much fun programming lore in this video. Informative and entertaining. For example:

- Task manager started as a weekend side project

- Author had an assertion message with his home phone number that made it into an NT beta release

Here's an example of extracting context values in a custom slog handler:

https://github.com/indexsupply/x/blob/main/wslog/slog_test.g...

Agreed!

Used this to voice my lack of support for the tiktok ban (patriot act 2.0). There might be a better site to use, perhaps one that automates the message.

maybe it's not fun for you. it's fun for other people

It's fun to go through the qualifying exams:

https://math.mit.edu/~yyao1/pdf/qualifying_round_2023_test.p...

1. Yes. YouTube has made it much more accessible in recent decades. I talk with my friend who lives a few miles away. We love it.

- KN6LLA

ya. i use them when I need to delete duplicates and there is no pk.

Missing a fun one: ctid

Cork oaks are a beautiful, evergreen oak tree with lovely leaves and a magnificent trunk. They grow well in the warmer parts of California. There are a few places in the state that sell mature specimens. I have 3 on my property and I would highly recommend!

Congrats! I've been following your career for as long as I can remember. You are a big inspiration and I'm excited to see what you do next.

Chain | Senior Security Engineer | FULL-TIME | San Francisco, CA | ONSITE, VISA TRANSFER | https://chain.com

Our mission is to take blockchain technology beyond speculation and nefarious activities. (<- not our official tagline ;) We believe that the cryptographic protocols and the decentralized model of blockchains are revolutionary and we are figuring out how to connect these breakthroughs to real world applications. For more info, see our website: https://chain.com or email me ryan@chain.com

If you are interested in being our first security engineer and building a security team at the company, please drop me a line! We need help shipping our SGX based transaction signing service and doing threat modeling on several public blockchain projects --among other things. Our tech stack is: Go, Rust, Postgres, AWS

I'm the co-founder and cto of the company and I am personally hiring for this role.

Chain.com - San Francisco - ONSITE

We are building a digital asset platform using block chain technology. Our company is well funded by leading VCs (khosla, rre, sv angel) and by our customers (nasdaq and first data to name a few...)

We are looking for systems engineers and security / operations folks. We are a small, friendly, diverse team who values empathy, hard work, and kindness. If you are interested in building critical financial infrastructure, please reach out! I'd love to get a grab a cup of coffee and talk shop.

- Ryan Smith. Chain CTO. ryan@chain.com

I put together balancebadge.com, a simple bitcoind related app. If I didn't use the chain.com API I would have had to run a server with bitcoind (~20GB of data), a server that indexes data from bitcoind (recall that a simple address balance is not exposed in bitcoind), and stores the data in an alternate database (~200GB). There is no way that I would have built balancebadge if I had to setup and maintain 3 servers with 100s of gigabytes of data.

Also, should developers who don't want to run a PostgreSQL server think twice about building web apps? I believe that general purpose software that requires server maintenance and state management should be run as a service. App developers should be focusing on the details of their product –not how to keep general purpose infrastructure alive and well.

edit Full disclosure: I am one of the creators of chain.com

You would really dig l2met.[1] It is a system that creates metrics from k=v log data. https://github.com/ryandotsmith/l2met

Both docker and dockerlite belong to Dotcloud's github organization. Perhaps dockerlite is just a proof of concept.

A while back I gave a talk to a group of aspiring programmers. I shared with them my personal opinions on what makes Heroku great. You can find that list of things here: https://gist.github.com/ryandotsmith/4741242#heroku

I am glad that you noticed. Simplicity is one of my personal values. I hope it is present in my documentation & code.

Allow me to provide some context for the snippet at the bottom of the page. The snippet is more of a thanks to Heroku for my employment. I wouldn't have had any of my insights related to visibility if it weren't for the super interesting problems that we have to solve at Heroku.

If you are interested in running NGINX on Heroku, checkout my buildpack: https://github.com/ryandotsmith/nginx-buildpack

I just tried their failover feature. It is really compelling. They deliver an IP address for the master. This IP doesn't change during or after a failover. I wonder if they can setup replicas in different availability zones.

This is a great set of reading materials. It is great to find out how teams are building in resiliency at the micro level. That being said, I would never actually use this project for building things. IMHO: Libraries > Frameworks.

I found a great use for the mug. https://twitter.com/ryandotsmith/status/98445779173244928

Interesting. Given that I primarily use PostgreSQL, I have not come across this feature in my day-to-day. However, I can imagine building such a thing in PostgreSQL. Perhaps with a system of triggers and dblink [1] one can create a mechanism to achieve a similar result.

1. http://www.postgresql.org/docs/9.1/static/dblink.html

I bet there aren't any biographies on your shelf.

LOL. Like i said, I have not idea what I am doing when it comes to marketing. I made this video after 3 days of relentless hacking.