Readit News logoReadit News
RedShift1 commented on Upcoming Changes to Let's Encrypt Certificates   community.letsencrypt.org... · Posted by u/schmuckonwheels
Dylan16807 · 4 days ago
The CA/Browser forum has massive power over the web whether you like it or not, because they make the browsers. And make no mistake, it's the browser representatives that are the most aggressive about tighter security and shorter certificate lives.
RedShift1 · 4 days ago
I have the feeling that this is much more about control than it is about security.
RedShift1 commented on Upcoming Changes to Let's Encrypt Certificates   community.letsencrypt.org... · Posted by u/schmuckonwheels
btown · 4 days ago
The certificate lifetime decrease, to 45 days, was discussed in: https://news.ycombinator.com/item?id=46117126

This isn't LE's decision: a 47 day max was voted on by the CA/Browser Forum.

https://www.digicert.com/blog/tls-certificate-lifetimes-will...

https://cabforum.org/2025/04/11/ballot-sc081v3-introduce-sch...

https://groups.google.com/a/groups.cabforum.org/g/servercert... - public votes of all members, which were unanimously Yes or Abstain.

IMO this is a policy change that can Break the Internet, as many archived/legacy sites on old-school certificates may not be able to afford the upfront tech or ongoing labor to transition from annual to effectively-monthly renewals, and will simply be shut down.

And, per other comments, this will make LE the only viable option to modernize, and thus much more of a central point of failure than before.

But Let's Encrypt is not responsible for this move, and did not vote on the ballot.

RedShift1 · 4 days ago
I have been saying it since the beginning that we are centralizing all the power of the internet to one organization and that this a bad thing, yet I get downvoted every time. One organization is going to have a say on whether or not you can have a website on the internet, how is this objectively a good thing?
RedShift1 commented on Microsoft increases Office 365 and Microsoft 365 license prices   office365itpros.com/2025/... · Posted by u/taubek
jdietrich · 11 days ago
To reiterate a crucial point in this comment, replacing the Office apps is the least of the issues. Enterpise customers rely on 365 for identity management, endpoint protection, business intelligence and a whole bunch of other stuff that the average user pays no attention to. We aren't talking about replacing an office suite, but an entire model of IT infrastructure management.
RedShift1 · 10 days ago
We're back in the mainframe times boys, good luck everyone.
RedShift1 commented on Jepsen: NATS 2.12.1   jepsen.io/analyses/nats-2... · Posted by u/aphyr
KaiserPro · 11 days ago
MQTT doesn't have the same semantics. https://docs.nats.io/nats-concepts/core-nats/reqreply request reply is really useful if you need low latency, but reasonably efficient queuing. (making sure to mark your workers as busy when processing otherwise you get latency spikes. )
RedShift1 · 11 days ago
You can do request/reply with MQTT too, you just have to implement more bits yourself, whilst NATS has a nice API that abstracts that away for you.
RedShift1 commented on Removed rust to gain speed   prisma.io/blog/announcing... · Posted by u/2233
AnotherGoodName · 13 days ago
Honestly database schema management doesn't scale particularly well under any framework and i've seen those issues start to crop up in every org once you have enough devs constantly changing the schema. It happens with ORMs and with raw SQL.

When that happens you really really should look into the much maligned no-sql alternatives. Similarly to the hatred ORMs get, no-sql data stores actually have some huge benefits. Especially at the point where db schema maintenance starts to break down. Ie. Who cares if someone adds a new field to the FB Newsfeed object in development when ultimately it's a key-value store fetched with graphQL queries? The only person it'll affect is the developer who added that field, no one else will even notice the new key value object unless they fetch it. There's no way to make SQL work at all at scale (scale in terms of number of devs messing with the schema) but a key-value store with graphQL works really well there.

Small orgs where you're the senior eng and can keep the schema in check on review? Use an ORM to a traditional db, escape hatch to raw SQL when needed, keep a close eye on any schema changes.

Big orgs where there's a tons of teams wanting to change things at high velocity? I have no idea how to make either SQL or ORMs work in these cases. I do know from experience how to make graphQL and a key-value store work well though and that's where the above issues happen in my experience. It's really not an ORM specific issue. I suggest going down the no-sql route in those cases.

RedShift1 · 12 days ago
NoSQL is even worse, data gets duplicated and then forgotten, so it doesn't get updated correctly, or somebody names a field "mail" and another person names it "email" and so on...

There is zero guarantee that whatever you ask the database for contains anything valid, so your code gets littered with null and undefined checks, and if you ask for example a field "color" what is it going to contain? A hex value? rgb(), rgba(), integer? So you need to check that too.

In my experience NoSQL is even worse, they are literally data dumps (as in garbage dump).

RedShift1 commented on Removed rust to gain speed   prisma.io/blog/announcing... · Posted by u/2233
AnotherGoodName · 13 days ago
Using an ORM and escape hatching to raw SQL is pretty much industry standard practice these days and definitely better than no ORM imho. I have code that's basically a lot of

    result = orm.query({raw sql}, parameters)

It's as optimal as any other raw SQL query. Now that may make some people scream "why use an ORM at all then!!!" but in the meantime;

I have wonderful and trivially configurable db connection state management

I have the ability to do things really simply when i want to; i still can use the ORM magic for quick prototyping or when i know the query is actually trivial object fetching.

The result passing into an object that matches the result of the query is definitely nicer with a good ORM library than every raw SQL library i've used.

RedShift1 · 13 days ago
Every project I've come across that uses an ORM has terrible database design. All columns nullable, missing foreign key indexes, doing things in application code that could easily be done by triggers (fields like created, modified, ...), wrong datatypes (varchar(n) all over the place, just wwwhhhhyyy, floats for money, ...), using sentinel values (this one time, at bandcamp, I came across a datetime field that used a sentinel value and it only worked because of two datetime handling bugs (so two wrongs did make a right) and the server being in the UTC timezone), and the list goes on and on...

I think this happens because ORMs make you treat the database as a dumb datastore and hence the poor schema.

RedShift1 commented on Micron Announces Exit from Crucial Consumer Business   investors.micron.com/news... · Posted by u/simlevesque
RedShift1 · 16 days ago
Their MX500 series SSDs were just king of price, performance and reliability. I even installed them in industrial PCs with intense vibrations and large temperature cycles, they're still chugging along like it's nothing.
RedShift1 commented on Accepting US car standards would risk European lives   etsc.eu/accepting-us-car-... · Posted by u/saubeidl
jeroenhd · 17 days ago
> Every EU politician who tries to subvert car safety should be dismissed and tried for endangering public safety.

The problem is coming from the other side, the Americans are threatening to start a new trade war if the EU doesn't permit their murdermobiles on the European roads.

IMO pedestrian safety should still come above all else, but this is not an initiative coming from some EU representatives who want to own a Cybertruck. Blocking these cars can have impact on the war against Ukraine and the prices of fuel and other import products on the short term.

RedShift1 · 17 days ago
Fuck it. Let the Americans start another trade war then. This nonsense has been going on long enough, if times need to get tough so be it then, start earlier rather than in 5 years when these misery machines are everywhere and the car arms race is in full effect.
RedShift1 commented on Testing shows automotive glassbreakers can't break modern automotive glass   core77.com/posts/138925/T... · Posted by u/surprisetalk
maxglute · 20 days ago
Man there needs to be some sort of amusement park where you try out common emergency safety mechanisms.

I've never broke / pulled a fire alarm, I'm sure I can, but let me.

ALSO EVERY AIRPORT SHOULD HAVE MOCK EMERGENCY AIRPLANE DOORS FOR PEOPLE TO TRY OUT.

RedShift1 · 20 days ago
That is a great idea. Would be fun to play on for the kids too.
RedShift1 commented on Testing shows automotive glassbreakers can't break modern automotive glass   core77.com/posts/138925/T... · Posted by u/surprisetalk
qwertytyyuu · 20 days ago
I think the removal of standard manual doors is the actual crime
RedShift1 · 20 days ago
And we as consumers should also take responsibility and simply not buy these vehicles.

u/RedShift1

KarmaCake day3161March 13, 2020View Original