WingNews logo WingNews GitHub [2]

npiit's comments

npiit | 5 years ago | on: Licensing changes to Elasticsearch and Kibana

>Personally, I'd rather see a more aggressive AGPL where REST calls are considered linking and trigger virality

That's why I never understood the point of SSPL. Is this exactly what AGPLv3 is supposed to be for?

npiit | 5 years ago | on: An Unlikely Database Migration

There is nothing unconventional in moving from SQL to key-value distributed database. And if it was any other company that submitted this very same post here we wouldn't be talking here right now as it would have never gotten a single upvote. The posts of this company almost always come with their upvotes right after submission (by others) and the founders were surprisingly replying minutes after submission. This is systematic behavior.

npiit | 5 years ago | on: An Unlikely Database Migration

You seem to be confused between zerotrust and encryption. Zerotrust is about auhtentication/authorization at the application level. Also tailscale is as centralized as Cloudflare et al. What happens when tailscale servers go down? Can 2 peers behind NAT still be able to connect to each other? can they synchronize each other's public endpoint and public key?

npiit | 5 years ago | on: An Unlikely Database Migration

zerotrust has nothing to do with p2p, zero-trust is about making sure that this user is authorized to access that application at the resource level not using some decades old segmentation/network level policies. Zerotier also claims to be zerotrust but it's technically not. Cloudflare, Citrix, PulseSecure have zerotrust offerings, but many others sadly just claim to be either by ignorance or dishonesty.

npiit | 5 years ago | on: An Unlikely Database Migration

The post was given like 9 upvotes in the first 5 minutes. I frequently go to "new" and this is a highly suspicious behavior.

npiit | 5 years ago | on: An Unlikely Database Migration

I understand. But given the product features compared to the rest of the industry, Tailscale brings no real value compared to Zero-tier hen it comes to meshes, it's not zerotrust like Cloudflare, Twingate, and many others, it claims to be open source while only the client is and it cannot be used without their closed source control plane where most of the feature are behind paywall, it's way more expensive than reputable offerings like Citrix, Cloudflare and others. Their security is very dubious to me (they can in fact inject their own public keys to connect to clients machines and there is no way but to trust their word that they won't). I mean, what's the innovation compared to the industry in order to get that systemically excessive coverage here?

npiit | 5 years ago | on: Build a tiny certificate authority for your homelab

It's theoretically the same idea at the node level instead of the application level except that the WireGuard curve25519 keys now cannot be verified since they are published by a 3rd party that you have zero control on. This 3rd party can simply connect to your machines anytime by injecting its public keys into your nodes and have complete access into your private network. That's the power of owing your own CA as opposed to letting others injecting peer public keys as if there is nothing to verify.

npiit | 5 years ago | on: Kubernetes is deprecating Docker runtime support

Did anybody make a test to compare CRI-O vs Docker especially when it comes to overall node memory usage for let's say 30-50 containers per node? I guess CRI-O would save a lot of memory but I don't have numbers.

npiit | 5 years ago | on: Materialize Raises a $32M Series B

I think it can be, I know a few other potentially successful examples like CockroachDB and ZeroTier. The BSL license makes the entire project basically FOSS for you and me, but not for the big sharks. Which I guess is much better for the world compared to open-core and of course proprietary SaaS.

npiit | 5 years ago | on: Materialize Raises a $32M Series B

I wonder if BSL becomes the new standard for open source commercial products. It's a good trade-off between freedom and real world business pressure.

npiit | 5 years ago | on: Front: The $1.3B Startup Slackifying Email

I am not sure how an engineering employee with a base salary of 150k would eventually cost 300k and why a customer should pay for that engineer to make 2x his pay for the investors gluing a couple of 3rd party APIs and making a dashboard.
page 1
more