• 14 Posts
  • 1.31K Comments
Joined 2 年前
cake
Cake day: 2023年8月11日

help-circle











  • Another step up is the confidential computing project. Requires hardware that supports it though, which sucks, but takes the virtual hardware concept and adds multi key memory encryption on top.

    Remember though security without a threat model is just paranoia, so what level of hoops and investment you need really depends on what your threats actually look like.

    I personally love containers and Macsec. It limits most of my concerns. I want to mess with confidential containers next, which is to say lightweight VMs in containers with memory encryption set, but thats all future to me. The irony is that I then I have to figure out attestation better for those machines since from the host they are black boxes.


  • Worth paying for. Honestly guys selhost for yourself and family contribute to project you depend on, and pay for everything else you don’t have the time to do that too.

    Its free as in freedom, not free as in beer. Their still FOSS even so this isn’t even a rug pull imho. The worst thing is it requires an account which hurts the privacy aspect of that. One the few times something like Meta mask actually makes sense… Maybe some way to get an token generated and sent for use rather than a blanket account






  • Can be more efficient, but it’s not always. You can scale those services more too. Do you need all 16 running on idle? Lazy load then as needed. Also does it really need a whole 500mb? Why? If its just a cache made that’s better handles with another shared service (redis, etc). If it’s software, why? A full “fat” Suse Base Container image uncompressed is 94.8mb and not all of that will be loaded in RAM. Going down to a micro at 23mb. All this and now you can deploy it on the shared infra, no separate OS, Management/security/logging/networking solution.


  • Honestly probably got the project to more maintainable state. Probably didn’t need the rewrite to do it in a new lang to do it (the real killer hear it sounds like).

    Those monoliths suck on the operations side, and even worse when it’s a corpse holding up the foundation to other projects that actually need it to change. Need to scale? good luck that decades old pizza box we call a server isn’t supported anymore. Oh of course we can spend millions virtualizing dead hardware to keep it running the same.