Viewing profile — willsher

Whether software based access control is sufficient depends on the workload and where in the stack the workload runs. I agree though, hardware virtualisation based is more secure a…

They are, or should be, entirely self contained such that whatever segregation is employed - be it hardware via a VM or in kernel with apparmor or SELinux provides sufficient segre…

There is a value that transcends money. Value to society as a whole. Sure people need to live and have basic needs met, but to transcend finance is perhaps a necessity. One can mak…

Humanities - history, geography, politics, religion and partially are economics, are our legacy; what we are and therefore what we can become. They are arts not sciences. Oral and …

It seems the nature of this and VR that they come to boom for a while and then bust, having stagnated. They then wait for the next alignment of underpinning technology, knowledge a…

My understanding from my Solaris days was that CPU load is the number of processes queued for CPU time over the given period. It doesn't related to usage directly at all. (Other th…

I though of seven. Is there any significance to the number one Kubernetes?

That's part of the point of doing it to me. They can, hopefully, use the data in a useful way. Sure, they may make it private and paid for the data set they have, but I also have a…

There are still a few gotchas on the low level stuff, especially networking, but also other areas that involve kernel drivers more directly. The security around the containers stil…

From research around the Internet, D3 is generally seen as safe ( http://www.mayoclinic.org/drugs-supplements/vitamin-d/safety... is pretty typical on the safety information) Perso…

Config management, as it currently stands with Puppet/Chef etc./ ideally has no place _in_ containers iff the issue of how applications are deployed there can be solved in a suitab…

That's a fair point, but the alternative of always compiling the packages at the point in time negates that, at the risk of regressions and other 'new version' bugs, but that may b…

Which version of X library can be introspected via which binary is linked, rather than which package is installed - inspecting the actuality rather that an meta-data wrapper in the…

There is also pkgsrc, which from memory can be build to be separate from the underlaying OS. FreeBSD's ports is similar. Slackware's packaging is based off simple tar files. It doe…