uponcoffee's comments

uponcoffee | 5 years ago | on: Show HN: Bunkerized-Nginx – Nginx Docker image secure by default

The linked repo. I mostly agree with you that most of this should be in containers; I should have been more clear to what part of your comment I was addressing.

In regards to docker worldview, this project currently doesn't follow best practices.

And while I agree mostly with this statement:

> Surely all the complexity should be inside the container

The caveat being that complexity should be split up into separate concerns. Otherwise there's little difference between the host and container aside from an extra layer of abstraction.

For example, this repo should probably be split into several containers: cert management should probably be its own container, which a shared volume for certs); php should be rolled into its own container, and php files should reside there; logging shouldn't be handled at the container level; firewall concerns (namely fail2ban) probably should be handled at by the host, or in a container with appropriate permissions; etc

uponcoffee | 5 years ago | on: Show HN: Bunkerized-Nginx – Nginx Docker image secure by default

It violates a lot of principles of using containers. There's no separation of concerns here, builds aren't reproducible, it hijacks logging for its own setup, appears to allow RCE of php files on another host in the event it is compromised (does it make sense to store/bundle php files in this container if it's not meant to handle php?)... Etc

uponcoffee | 5 years ago | on: Proton 5.13: A Massive Update

There are many different ways that ruling could go, some of which could decide the google vs oracle by itself while not universally ruling on wether APIs can be copyrighted.

uponcoffee | 5 years ago | on: Proton 5.13: A Massive Update

To add to some good answers...

Succinctly, it's easier and cheaper to port games wholesale than it is to: build out yet another platform for developers to target, on board them, and on board consumers to this new console.

What steam has that consoles don't, are is massive preexisting library. The problem is it mainly targets windows. Their options for bringing this to the console market are either pay for windows licenses (which on top of hardware, would make them more expensive than the alternatives), or port in wholesale. Most console games get a pc (windows) port eventually.

So if they can get proton to a mature point, they'll be the defacto winner of the console wars.

uponcoffee | 5 years ago | on: Uninstall Nano Defender

There's plenty of people that simply won't know ownership has changed because they just consume the published extension. They're clearly maintaining two sets of code, one for github and one for publishing extensions; nefarious is a strong word, it is at least suspect.

As far as an NDA goes, that's signaling to the current open-source maintainer that something nefarious is afoot. How would an NDA work? The maintainer hands other their GH account for the new party to commit under? The extension suddenly goes closed source? The maintainer doesn't acknowledge the community at all and rubber stamps anything the new party wants to commit the repository?

It'd be far easier to publicly take over maintaince, do good for a month or so, then silently publish the malware. That was probably the best route here; the maintainer was going to donate most of the monry they received back to the Turkish developers if they did a good job) and they'd have passed the transitory wave of scrutiny from seasoned devs like gorhill.

uponcoffee | 5 years ago | on: Cloudflare One

Gateway is significantly more than a dns provider. It's more like a configurable intercepting proxy where dns is a small facet. The beauty of this is that it's like magic, it just works. No distribution of self-signed certs to all devices necessary because cloudflare already handles tls termination.

Tailscale is ergonomic tunnel management//authentication. Which in itself is a great product, but it's not nearly as granular. Being able to restrict access based on identity provider, individual, etc is a must for a corporate solution.

One of Tailscale's selling points is the data isn't routed through their servers, just between peers. That's the opposite of Cloudflare; their value proposition is centralized granular control, no plumbing, just plug'n play.

uponcoffee | 5 years ago | on: Tables: Tracking work for teams

Appears so, I wasn't aware of air table until reading the other comments. Pretty much seals the grave on this one. Low effort clone from a company notorious for no customer support and killing services vs the original that specializes in this... easy choice

uponcoffee | 5 years ago | on: Tables: Tracking work for teams

The otherside of that coin is feature creep. Docs/sheets so their job fine, so aside from minor updates//fixes they don't need to substantially change; given their user based substantial redesigns should be their own product and if they prove to be substantially better then they can migrate away from the old docs/sheets

uponcoffee | 5 years ago | on: Tables: Tracking work for teams

It seems to be UI/UX for creating//editing//managing databases and interacting with them for non-programmers.

Paraphrasing the video: Like sheets, but with structured data (columns define data types with relationships) and complex actions/triggers via bots.

Per your original comment, given Google's track record with customer performance//services being dead on arrival, I can imagine few here are interested in learning//migrating their workflow just to be locked out or migrating away not long after.

https://killedbygoogle.com/

I'd link to the myriad of hn//twitter//medium posts used to get customer support through bad press, but I'm on mobile, I'll leave that as an exercise to the user.

uponcoffee | 5 years ago | on: How to Design, Build and Test Small Liquid-Fuel Rocket Engines (1967)

Simulation and validation is a touch improved, when I did this in college we used Ansys supplemented with data from NASA's CEA (Chemical Equilibrium and Applications) utility for validation. Once you get the work flow figured out it's not terrible.

Simulating cooling channels//ablation for larger scale rockets is a major PTA though.

uponcoffee | 6 years ago | on: CDC declined to test new coronavirus patient for days, California hospital says

That's the point, having a trained - equipped army at the ready costs money. One could save money by dissolving the army when it's not needed, but clearly you can't respond the same when it's suddenly needed.

The point was that the cost of saving money is effectiveness.

Clearly, this isn't always the case, there is a difference between bloat/overpricing/unnecessary spending vs cut backs that hinder operation ability.

uponcoffee | 6 years ago | on: Nebraska farmers vote overwhelmingly for Right to Repair

Tight coupling to binary blobs and proprietary HALs + vendor specific OS changes etc make maintenance a chore - everyone in the chain has to be on board for it to happen.

They are incentized not to, new phones means profit for carriers and new hardware means profit for chip makers.

Maintaining old products costs money, not maintaining products saves money, planned obsolescence prints money

uponcoffee | 6 years ago | on: Cname cloaking, a disguise of third-party trackers

That's usually easy to opt out of and if bootstrapping fails (e.g. Outbound dns query for DoH provider fails//direct connection by IP is blocked) it falls back to the network/OS defined resolvers.

Even still filtering based on SNI will work for a long time yet. Yes, ESNI is on track to becoming to a standard but support for legacy devices/browsers means it to will rely on network tests for support - so it can also be disabled.

uponcoffee | 6 years ago | on: Deepfakes: MIT brings Nixon's Apollo disaster speech to life

> States have been lying to us since time immemorial, and they don't need fancy video evidence to do it.

True, but now they'll be able to drive any narrative with as much A/V 'evidence' as they want. Lies by omission or one sided reporting are dangerous in their own right, but challenging that is different from challenging fake evidence.

It's hard to say "It wasn't me" if you're on tape/film. You'd have to have experts argue over validity but the public doesn't have the attention span or trust to follow that. Deepfakes have the potential to be extremely damning/damaging to public image/reputation in a way that biased reporting never did.

uponcoffee | 6 years ago | on: New Catalyst Efficiently Produces Hydrogen from Seawater

I think you misunderstand the cited article on water vapor.

The water cycle is self regulating, unlike other green house gases.

>> "However, water vapor does not control the Earth’s temperature, but is instead controlled by the temperature. This is because the temperature of the surrounding atmosphere limits the maximum amount of water vapor the atmosphere can contain."

The other non condensing gases, largely from man made sources, contribute to global warming and elevate the amount of water that can be vaporized per unit volume of air.

Cutting down on emissions by replacing oil based vehicles with electric/hydrogen fuel cell powered vehicles absolutely helps the environment. Cutting emission sources makes job of scrubbing the atmosphere of the green houses gases already present more achievable.

page 2