31–40 of 106 posts
Earlier quoted context omitted.
But /proc/*/environ is only readable by the user the process is running as and root, so if you can read it, you're already on the other side of the airtight hatchway.
Arbitrary file read vulnerabilities are extremely common.
Earlier quoted context omitted.
Sometimes it's people who feel like posting oldies/perennials/classics, and sometimes it's people running across a thing for the first time. We've had to learn not to crack down on these too heavily because there's always an up-and-coming cohort of new users who've never seen them before, and HN should be a place to run across them. Once a year seems to be an acceptable maximum rate ( https://news.ycombinator.com/new…
Hey dang. I have a question too. Does it really need a 2011 tag? I thought only blog posts and news articles got year tags. 12FA is guidelines website that is mostly timeless. What's the criteria for a year tag?
Earlier quoted context omitted.
Is HN a search engine for xkcd? Honestly people, do you have them indexed somewhere? I'm amazed by your ability to find the appropriate xkcd whenever it's needed. Me, I'd have to spend at least half an hour on Google trying to find it, and then give up or see that someone else already posted it. I love this community.
Some xkcd comics are classics - my gotos are the one about ISO dates ( https://xkcd.com/1179/ ) and password strength ( https://xkcd.com/936/ ). Both of these were found by search Google 'xkcd (dates|passwords)', and having them be the first result. Explain XKCD is great if you know roughly what topic was covered by a comic, but can't quite find the URL. https://www.explainxkcd.com/
Earlier quoted context omitted.
Sometimes it's people who feel like posting oldies/perennials/classics, and sometimes it's people running across a thing for the first time. We've had to learn not to crack down on these too heavily because there's always an up-and-coming cohort of new users who've never seen them before, and HN should be a place to run across them. Once a year seems to be an acceptable maximum rate ( https://news.ycombinator.com/new…
Hey dang. I have a question too. Does it really need a 2011 tag? I thought only blog posts and news articles got year tags. 12FA is guidelines website that is mostly timeless. What's the criteria for a year tag?
One thing that I think could be updated in the 12F approach is the use of env vars for config, especially secrets. I’ve generally found it much better to mount these into the filesystem and read from there. It helps with, for example, secret rotation for long running processes. Relying on process restarts can be ugly in some setups, especially if startup time is expensive.
Is there a standardized/best practice way to do this? Some convention for file names or format?
Earlier quoted context omitted.
Many of us recall with great fondness the first time we read about 12 factor apps. In particular, those of us that had been working on systems like this, but hadn’t codified it with explicit guidelines. It just made sense. The pleasantness of things just working consistently from scratch on a brand new server. Replacing the concept of pet servers with cattle. It’s all related. I’m sure every time this makes the front…
Is HN a search engine for xkcd? Honestly people, do you have them indexed somewhere? I'm amazed by your ability to find the appropriate xkcd whenever it's needed. Me, I'd have to spend at least half an hour on Google trying to find it, and then give up or see that someone else already posted it. I love this community.
Relatedly, I believe it's rare to see an xkcd linked to above 2000.
I'm interested to know what causes submissions like this - content that is years old and posted with no context - to hit the first page on a random day.
One thing that I think could be updated in the 12F approach is the use of env vars for config, especially secrets. I’ve generally found it much better to mount these into the filesystem and read from there. It helps with, for example, secret rotation for long running processes. Relying on process restarts can be ugly in some setups, especially if startup time is expensive.
> I’ve generally found it much better to mount these into the filesystem and read from there. Is there a standardized/best practice way to do this? Some convention for file names or format?
If you use pydantic, it supports a secrets dir with a predefined path.
https://specifications.freedesktop.org/desktop-entry-spec/de...
One thing that I think could be updated in the 12F approach is the use of env vars for config, especially secrets. I’ve generally found it much better to mount these into the filesystem and read from there. It helps with, for example, secret rotation for long running processes. Relying on process restarts can be ugly in some setups, especially if startup time is expensive.
It's the part of 12 factor that makes me giggle a bit; like it how does it get into the environment? Reminds of the "Front fell off" comic sketch. "No, we towed it out of the environment" https://www.youtube.com/watch?v=3m5qxZm_JqM