Readit News logoReadit News
watermelon0 commented on AWS in 2025: Stuff you think you know that's now wrong   lastweekinaws.com/blog/aw... · Posted by u/keithly
mdaniel · 9 days ago
https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-e...

~~I get the impression there are several others, too, but that one is of especial interest to me~~ Wowzers, they really are much better now:

  aws --region us-east-1 ec2 describe-vpc-endpoint-services | jq '.ServiceNames|length'
  459
If you're saying "other services should offer VPC Endpoints," I am 100% on-board. One should never have to traverse the Internet to contact any AWS control plane

watermelon0 · 9 days ago
Those are VPC endpoints, not gateway endpoints.
watermelon0 commented on How I use Tailscale   chameth.com/how-i-use-tai... · Posted by u/aquariusDue
lysp · 20 days ago
Also serve the default website (via IP) from a basically empty self-signed certificate that doesn't give away any domain names or owner details.
watermelon0 · 20 days ago
You don't have to serve any certificates on the default website. Web server would just fail TLS connection, since it doesn't have a certificate for it.

Not sure if this applies to all web servers, but at least Caddy and a few others support this.

watermelon0 commented on EU Eyes Ditching Microsoft Azure for France's OVHcloud   euractiv.com/section/tech... · Posted by u/doener
znpy · 2 months ago
> My point was, financially and logically, it made (makes) no sense.

You don't know, but you proved your customer's point, unwillingly.

The thing is, your logic is flawed because it's (incredibly) shortsighted.

> VMware, Xen, or Hyper-V admin

Those three things essentially do the same thing, yet they're completely different beasts. You have to look for people knowledgeable on that specific product, and you might not find them.

When dealing with AWS EC2 instances? A lot more people with standardized competencies.

For companies it's just great because they can hire from a much larger pool of candidates.

It's great for workers too, because they can pick my skills and go work at another company where I'll be immediately productive, meaning they'll have a much smoother onboarding process (learning the business domain rather than fighting the technology).

watermelon0 · 2 months ago
Same applies for clouds, each is a completely different beast. You have AWS EC2, GCE, Azure VM, and others.

The main difference between cloud vs on-prem/colo/dedicated is that you need SRE/DevOps for the first, and sysadmins for the second.

watermelon0 commented on Apple announces Foundation Models and Containerization frameworks, etc   apple.com/newsroom/2025/0... · Posted by u/thm
tensor · 3 months ago
Apple has had a native hypervisor for some time now. This is probably a baked in clone of something like https://mac.getutm.app/ which provides the stuff on top of the hypervisor.
watermelon0 · 3 months ago
Using a hypervisor means just running a Linux VM, like WSL2 does on Windows. There is nothing native about it.

Native Linux (and Docker) support would be something like WSL1, where Windows kernel implemented Linux syscalls.

watermelon0 commented on Hacker News now runs on top of Common Lisp   lisp-journey.gitlab.io/bl... · Posted by u/Tomte
galaxyLogic · 3 months ago
I think NodeJS apps typically rely on JavaScript event-loop instead of starting new processes all the time.

Spawning new processes for every user is possible but would probabaly be less scalable than even thread-switching.

watermelon0 · 3 months ago
NodeJS apps usually use multiple processes, since JS event loop is limited to a single core. However, this means that you cannot share data and connection pools between them.
watermelon0 commented on SMS 2FA is not just insecure, it's also hostile to mountain people   blog.stillgreenmoss.net/s... · Posted by u/todsacerdoti
fasteo · 4 months ago
>>> I really wish that were illegal. A phone number is a phone number.

European speaking. For completeness:

Financial directive PSD2[1] allows to use an SMS as a 2FA only because there is an KYC already done for that number (anon SIM are no longer allowed in the EU)

Also note that the 2FA is not the OTP code you receive. This code is just a proxy for probing "something you have", with the "something" being the phone number which, again, is linked to a physical person/company.

I have commented this several times, but as of today, SMS is the only 2FA method that can be easily deployed at scale (all demographics, all locations, compatible with all mobile devices)

[1] https://en.wikipedia.org/wiki/Payment_Services_Directive

watermelon0 · 4 months ago
Anon SIM cards are still allowed in some EU countries: https://prepaid-data-sim-card.fandom.com/wiki/Registration_P...
watermelon0 commented on Updated rate limits for unauthenticated requests   github.blog/changelog/202... · Posted by u/xena
watermelon0 · 4 months ago
Time for Mozilla (and other open-source projects) to move repositories to sourcehut/Codeberg or self-hosted Gitlab/Forgejo?

u/watermelon0

KarmaCake day1410May 13, 2018View Original