Alt account of @Badabinski

Just a sweaty nerd interested in software, home automation, emotional issues, and polite discourse about all of the above.

  • 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2024

help-circle




  • Wireguard was written with the explicit goal of having sane, secure defaults. I totally feel you w.r.t. openvpn or ipsec, since it’s easy to do something wrong. Wireguard is much easier because it simply refuses to give you the choice to do things incorrectly.

    w.r.t. the certificate thing, you could set up a reverse proxy and do HSTS to ensure nobody can load up a rogue CA on your devices. HSTS has the issue that SSH has (trust on first use or whatever it’s called), but you just need to make sure nobody is MITM you for that first connecting and then you’ll be good to go. This would let you use a self-signed certificate if you do desired.







  • Nah, the slow hop-hop-hop is like a jog. Mustelids can fucking zoom if they’re in danger or after prey. Like, even dopey-ass domesticated ferrets can get going pretty damn quick when they’ve been hurt or feel threatened. Nobody has posted what species of otter attacked this lady, but river otters can reach speeds of 47 kph (29 mph) on land. Sea otters are slow and fat, but these weren’t sea otters.

    You aren’t outrunning a pack of otters in a sprint. It’s no question that you could outrun them over a long distance, but mustelids are zoomy little fuckers.

    (note that I like mustelids and had 4 ferrets, so please don’t mistake my tone as being sour on them)

    EDIT: holy shit, ferrets can be bred and trained to run at like 22 mph. That’s insane!



  • The other person may have responded with a fair amount of hostility, but they’re absolutely correct. I run Kubernetes clusters hosting millions of containers across hundreds of thousands of VMs at my job, and OOMKills are just a fact of life. Apps will leak memory, and you’re powerless to fix it unless you’re willing to debug the app and fix the leak. It’s better for the container to run out of memory and trigger a cgroup-scoped OOM kill. A system-wide OOM kill will murder the things you love, shit in your hat, and lick your face like David Tennant licked Krysten Ritter.