Skip to main content



The company I work for is really great, but the CEO is toxic as hell

Just completely and impossibly.

We had an outage and he joined the technical call, and started throwing out ideas and forced the response team to *stop* discussing the issue and *instead* explain why he was wrong.


in reply to silverwizard

yes, provided you add enough sugar, but I doubt it'll taste fantastic.
in reply to þēodrīċ

@þēodrīċ I mean, probably do a very strong tea, as strong as I can get it, and then add a sugar, the problem is finding a good sugar for the yeasts to not sour, while also leaving the flavour dry


The problem with my current employer isn't the lack of technical sophistication, it's that everyone outside of the dev org thinks my skillset is fungible with every other person inside the dev org.

Despite me being hired explicitly outside the dev org's purview because it *isn't*

in reply to Alex P. 👹

@Alex P. 👹 I was hired by someone who knew what they were doing and given Infrastructure and Security as purview, and now everyone says "this person does DevOps" which... hurts every time
in reply to silverwizard

@Alex P. 👹 the real problem is when people
1) tell the dev lead about like, DNS changes or whatever, and then they don't tell me "but it's all engineering"
2) asking me to deal with frontend JS or python code that just... I don't know


Google breaking NewPipe forcing me to properly setup my flows for watching video on Nebula


After the giant DDoS on DynDNS I started multi-hosting my domains and almost everything else. But no one will pay for multi-cloud. And I don't get why we never learned this lesson?


Honestly, the amount of time I spend flummoxing security vendors by saying things like "Oh, we're not using office 365" is very upsetting

It's not that I don't understand that 99% of their clients are using O365, it's how many products and support team fall apart



the booze is on strike

what a fuckin' weekend for the booze to be on strike



Remember
This is the fault of Crowdstike's C level execs

This is not the fault of the scapegoats they will blame this on

This is a failure of time, budget, expertise, and process.

They cut costs by cutting quality

in reply to silverwizard

reuters.com/technology/crowdst…

Honestly, looks like CrowdStrike said some shit would go down because they were contracting. Which uh - good call.

in reply to silverwizard

Every hacker in the world is posting this right now

I am assume it was Ed Zitron's post



Banks are screwing my wife around. Her mom put some money in an account years ago for her, and she's pulling it out to put it somewhere more reliable, but the cheque was listed in both names, and so banks are refusing to deposit it because it's in the name of two people. So she tried to go into the bank with both of them and endorse the cheque in front of bank employees, which even then they are being a pain in the ass about. This is stupid.

But she went in this morning.

CROWDSTRUCK

in reply to silverwizard

@silverwizard *sick electric guitar riff*

I was caught in the middle of an OS update (Windows)
I looked 'round and I knew there was no turning back (Windows)
My mind raced and I thought, what could I do? (Windows)
And I knew there was no help, no help from you (Windows)
Sound of the drums beating in my heart
The thunder of BSOD tore me apart

You've been - crowdstruck

silverwizard reshared this.

in reply to Hypolite Petovan

@Hypolite Petovan crowdstruck is the verb form of "ruined by a vendor"

"CrowdStrike was worse, but SolarWinds was another vendor that crowdstruck everyone"



Ug, I should have paid @404 Media long ago, they are the best reporting I've seen.

But at least I paid them Wednesday and I assume that my subscription will be spent on the spirits needed to get through their next few calls to CrowdStrike.

aacur8 reshared this.



The best part of owning a VR headset is that I can put on the headset, use it for an hour, remember why it sucks, and then move on


using the Serverless Framework to update some lambdas

And all I can think of "Didn't I use a framework so I didn't have to type the same thing a billion times?"



Google fucking hates file folder and file organization.

And holy fuck I hate it, and I worry it's bad for people exploring systems.



My wife is excited about a Fantasy Ball and now I'm looking for resources for customizing N95/p100 masks? Any good cosplay tips?

#cosplay #larp #covidisnotover

in reply to silverwizard

I can highly recommend magnets and lacey fabrics as good ways to decorate or customize respirators, specifically the disposables.

The Dräger 1950 N95 is arguably the best on the US market right now, and it has the most robust structure to handle added decoration without collapsing. The plastic anchors for the headband on each side also allow for hanging/mounting decorations.

For magnets, there are lapel pins and needle minders, but to customize/add on to, look at hijab magnets.

in reply to Texan_Reverend

PS: the Dräger 1950 is what I'm wearing in my profile photo - along with a magnetic lapel pin.

Also, the small size of the 1950 fits the most people

This entry was edited (5 months ago)


My wife just found out I grew my hair out as a joke

21 years ago



We paid a vendor for implementation

Now I'm considering blocking their emails



I hate when people talk about hobby tools as like "if you value your time"

1) fixing is a skill you should hone
2) fixing can be fun
3) hobbies are not something to optimize

Discussing valuing someone's time spent on hobbies in dollars is the worst grindset babble imaginable

in reply to silverwizard

I sell products ready-assembled, and do-it-yourself kits for building the same products. Some of my customers buy the kits because they really like building kits, and that's great.

But others buy the kits because they think they're entitled to the finished product at a lower price, and they begrudge every second of effort they must put into building the kit. Those people really exist and they are the market for tools that purport to save "the value of your time."

in reply to Matthew Skala

@Matthew Skala Yeah, that's valid. If you're doing it to save money - that's fine.

But this is a criticism of the *argument*, not the sale. People can and should sell preassembled things, kits, and more! Not everyone wants to build! But if someone is building on purpose, don't tell them to value their time.



People really bad need to stop recommending Ubuntu as a valid Linux. It's just so... unpleasant.

GNU Too reshared this.


Unknown parent

@The Psychotic Network Ferret So I think you're 100% correct. And I think most fights about houseruling and ignoring rules is when those things cross modular barriers (you can add/remove modules, but ignoring part can be a problem), but D&D doesn't really acknowledge its own modularity
Unknown parent

@The Psychotic Network Ferret I am far from a D&D player - but I tend to be very into the story and how we tell stories, and very into game rules. I think good games tell good stories with good rules. But yeah - I agree about the Say Yes Or Roll The Dice thing.

in reply to silverwizard

I checked lambdaguard and komiser and cloudwatch and cloudtrail - I see no suspicious logins, no resources in strange places, our IDS didn't pick up anything, and all the APAC regions are disabled, and there's nothing in them. So it's not like we were suddenly hacked as far as I can tell.
in reply to silverwizard

once, years ago. I think they sent an email out a few days later saying sorry it was a bug. That obviously doesn't stop the panic.

Can it be translated and tied to a legitimate communication that got hit by a similar bug?

in reply to j_angliss

@j_angliss So they've done three in simplified Chinese so far, all with an English translation. They're about changes to Lambda in various APAC regions.

I don't know why as we have those regions disabled and nothing in use in them - but I definitely freaked the hell out.



I am constantly shocked at how much we've normalized constant attacks and ransoms instead of just... letting people do security.
in reply to silverwizard

@silverwizard Got it, I was more asking about the normalization you also mentioned, but this is good stuff nonetheless.
in reply to Hypolite Petovan

@Hypolite Petovan The normalization is mostly a matter of fighting the process of seeing security as a cost center and underfunding it.

So - the core thing is complexities around risk and access. Part of corporate culture is risk appetite. Corporate culture loves accepting risk, and so security teams kinda don't have a lot of leverage. And that's where the problem is, ya know. I don't know how to fix that.




Google Docs has been randomly deciding to not let me copy/paste. I use Ctrl+C/Ctrl+V and it pops up the popup that tells me I have to use Ctrl+C and Ctrl+V to copy and paste.

This feels like another anti-competitive thing against firefox.

knightly reshared this.

in reply to silverwizard

> Google Docs has been [...] not letting me copy/paste. I use Ctrl+C/Ctrl+V and it [...] tells me I have to use Ctrl+C and Ctrl+V

I've been getting that for months. My solution is to switch to @nextcloud with @collabora as soon as this organization acquires another #SelfHosted server.




You can't scale a single-threaded process by adding more logical CPUs.

Why is this something that confuses people?

in reply to Jonathan Lamothe

@Jonathan Lamothe it doesn't matter if the execution is out of order - the problem is that when you've got a CPU pegged, the second idle CPU doesn't help.
in reply to silverwizard

out of order operation isn't just about changing the order of the operations. It lets you (sometimes) pre-compute the result of future instructions as long as they're not based on the output of the previous ones enabling you to parallelize what would otherwise be a single execution thread. I imagine there's a point of diminishing returns though.
youtube.com/watch?v=jNC9LPc3BI…

Perhaps I'm misunderstanding what you're saying?

in reply to Jonathan Lamothe

@Jonathan Lamothe Yes, it's theoretically possible for there to be value. But it's not going to affect on the scale of "our system is constantly pegged"
in reply to Jonathan Lamothe

all the out-of-order execution occurs inside a single CPU
adding more CPUs won't help speed up a single-threaded program

picture a call center
an attendant is like a CPU
the attendant can pay attention to one customer at a time. the customer may issue multiple requests/instructions, and an attendant with out-of-order operation may be able to look into and satisfy some of the requests before other earlier ones
however, adding more attendants wouldn't help this one customer get faster service, unless the customer started multiple calls (threads or processes), or the attendants could pass customer requests and context on to each other (that's not permitted by the call center design; they can only transfer entire calls)



If you're pentesting someone and you send them a report. Do your best to not have your report elicit a response of "Wut"


The hardest part of security work is when you have 15 urgent tasks and no one willing to prioritize them. And then you end up telling someone "I can't help on the outage, I need to reformat this document"

reshared this

in reply to silverwizard

my friend wrote a really good article about this

grimoire.ca/code/incident-resp…

in reply to Alex P. 👹

@Alex P. 👹 Ooooof I felt that blogpost hard.

Today it was literally "the entire devteam is down, but the CEO doesn't like how a document that's gone through three approvals and been in use for two years looks, so that's higher priority".

So kinda the opposite



Forever Knight (1992) was a better show than Moonlight (2008)

But seriously, they are very similar.

I think I like Moonlight better, but I want a LaCroix show rather than a Nick Knight show.

in reply to silverwizard

You'd think the show that wanted to be a Noir wouldn't be abjected copaganda. At least Forever Knight was boring and obvious about it.


The problem with the Eulogy for DevOps is that the last 20 years has been a series of ways of defining sysadmins away and then having them re-emerge from the muck.

We'll never have DevOps disappear because it'll just be yet another beast.

Sysadmin, DevOps, SRE, Infrastructure Engineer, it's all the same thing, it's just that people need to try to put us in new boxes to try to get around the fact that *making your systems reliable* is a hard and different job.

in reply to silverwizard

I've been at the same place for the past 4 years. My title has changed 3x. I'm still doing essentially the same thing, just on a different level of abstraction.

What makes it even funnier is that you haven't even listed my current job title: Platform Engineer. What will it be in two years? Who knows, it's all based on vibes.

in reply to Aleksandar Todorović

@Aleksandar Todorović I usually look for SRE or Infrastructure these days, but it's a total crapshoot and half the time they offer me "devops" as my job title



Remember kids - to keep your certs you go to conference

This means that conferences can cost a thousand dollars!



Got my Stadia to connect to my Mirage Solo VR

Give me a few more days and I'll be able to run my entire computing life off "things google made, abandoned, and tried to turn into ewaste and I bought for $10"

Anban Govender reshared this.




So inspired by the Hat Dropping With AI dude's movement to drop goods on people from windows, I'm thinking of selling eggs


The two protocols I need better tools for are RSS and IRC

I hate irssi and I don't want a webapp for RSS

in reply to silverwizard

the thing about these protocols is they're both protocols I use over netcat a lot so all the tools feel limiting and weird
Unknown parent

@hotsoup RSS to an IRC room would be great, if I had a good rss

IRC over RSS sounds like a bad enough idea for me to take it seriously



I have invented a drink I call the St Lawrence Crossing

It's absinthe with maple syrup instead of sugar. (See - it's a Canadian Ferry and absinthe is the Green Fairy)

It's tasty

in reply to AN/CRM-114

@AN/CRM-114 lcbo.com/en/dillon-s-absinthe-… I buy this because the LCBO sells it, and getting non-LCBO absinthe is a huge amount of work, So I'm not really the person to give recommendations
in reply to silverwizard

ironically that particular absinthe is also uniquely easy to get not through the LCBO due to the distillery being in southern ontario


Anyone else getting the "You are using a pihole" constant cloudflare "security reviews" suddenly?
in reply to silverwizard

@08956495 More seriously - it feels like it's yet another way we're going to get blocked out of the open web


My brain just thought the words "Etsy but ActivityPub"

Basically just - do ActivityPub, add a shopping cart, and try to manage the bots - so you can have art and craft and so on focused instances with sales inside them. I... have no idea how to make this work non-evilly.

in reply to silverwizard

But ok - if you want to *scale* activitypub with commerce - this means that the question is one of community.

Building a community with a store is really fucking hard. You have all the problems of Ebay, Etsy, and Twitter. This means building spaces like systems for Art, Writing, or whatever. And that means supporting those people. This means figuring out how to discourage advertising and brands, while supporting people who create.

I don't think this is a needle I can personally thread. I should not try.

But someone should. We should try to figure out how to do capitalism without as many siphons in the middle, at least until we can get rid of capitalism.

in reply to silverwizard

This brought to you by me thinking about Etsy and its problems - and how I want to find *creators* first, and then wares, rather than wares first and then creators (at least most of the time)
in reply to silverwizard

Fuck

I just realized that this is literally OnlyFans in a lot of ways. A social network for following creators who can sell things to you easily.

And course that - that immediately got moved toward Sex Work because that's the most tech savvy and mobile group, but I think there's something valuable here.

in reply to silverwizard

Isn’t the hardest part going to be the payment system integration, and accounting? And shipping costs across dozens of possible shipping options? All the little quirks like charge-backs creating credits/debits? Or is your system going to attempt to not middleman dozens of payment systems? In which case you still need to API integrate to lots of different options and still do accounting for every worst case scenario?
in reply to Jay Hannah

@Jay Hannah So in this case we're looking at small vendors - so this means that you're probably looking at:
Shipping is going to be integration with the local postal service
API integration with Stripe/PayPal/whatever is pretty simple
If you want to directly take payments that's PCI DSS and also other stuff

But that's all technical detail. I'm not saying it's nothing, but it's all mostly solved problems with very common answers. But the "build a community based on selling without being a hellhole" is not even slightly solved.



Any #KitchenerWaterloo folk aware of a place I can rent a 10 disk CD ripper? Or similar device? I just want to digitize a bunch of CDs and don't wanna think too hard. And don't wanna pay $100 to get someone else to do it.


@Becky said she wanted to watch classic movies and I had to ask "Casablanca or Mean Girls" and I feel like this kind of distinction would serve very well in a lot of situations.
in reply to silverwizard

Babe wake up new verse of “Hey Nineteen” just dropped