Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Interview with CEO of rsync.net: “no firewalls and no routers”

console.dev

Post reply on HN
Print view View original

281–290 of 343 posts

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#281

Post by 8fingerlouie »

gautamcgoel wrote: post #244

The pricing model doesn't make sense to me. Their prices start at $0.025/GB/month, so renting 1TB of storage for a year would cost $300 - at that price, I could just buy my own disks and run ZFS myself. I kinda hoped they could offer lower prices using economies of scale. I checked the prices for Tarsnap, expecting it to be cheaper - it's actually 10x more expensive! Maybe someone can explain what I'm missing.

> Their prices start at $0.025/GB/month, so renting 1TB of storage for a year would cost $300

I came to the same conclusion. I was aware of rsync.net and tarsnap, and have checked their prices in the past, but for raw storage it's simply not competitive. Some of the other features they offer might make it worth it though if you need those.

Personally i just need a place to dump a backup of my family photo albums and documents. A full backup is around 1TB (deuplicated, somewhat larger raw), and for that there are much cheaper solutions.

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#282

Post by cmckn »

Aeolos wrote: post #7

> "I have a early-2009 “octo” Mac Pro [...]" > > OS: macOS Does this make anyone else a bit uncomfortable? I don't think MacOS is still receiving security updates on that hardware. I'm all for using old hardware for as long as it keeps working, but I would never browse the internet with a vulnerable OS on a vulnerable processor (spectre etc...) Or am I missing something?

I have one of the 2008 Mac Pro’s running the k8s control plane at home. Those things just never die.

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#283

Post by globular-toast »

bigiain wrote: post #203
globular-toast wrote: post #168

Earlier quoted context omitted.

What would you prefer? Having an entire paragraph of text on a single line? Your monitor is the wrong shape.

That's a pretty unhelpful way of thinking about this. Any web designer who doesn't, in 2021, understand and make allowances for 4k/5k ultra wide monitors as well as phone sizes screens in portrait mode - isn't doing their job right. The problem here is not the monitor shape or the user's browser window width, it's the css (and maybe html) and the lack of understanding of how to use it properly (or, more sympathetical…

The designer here did make allowances for "ultrawide" monitors. He stopped the lines of text becoming unreadable by wrapping them at something reasonable.

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#284

Post by StavrosK »

xarope wrote: post #255
stavros wrote: post #197

Earlier quoted context omitted.

Oh yeah? Well I run one where no ports are open. In fact, I haven't even connected it to the network.

Wasn't that the joke about how the original windows NT server got it's C2/ITSEC rating?

I haven't heard that joke!

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#285

Post by iamevn »

wwalexander wrote: post #160
chris1993 wrote: post #153

Earlier quoted context omitted.

Essentially a Chromebook

It’s worth reading the rest of the interview, I find Rob Pike has a very interesting/unique take on the current landscape given his involvement with Plan 9: > Now everything isn't connected, just connected to the cloud, which isn't the same thing. And uniform? Far from it, except in mediocrity. This is 2012 and we're still stitching together little microcomputers with HTTPS and ssh and calling it revolutionary.

If you want to see more on this theme, the Upspin docs[1] are a really interesting read. This 2017 talk[2] that Rob Pike gave on it is also really good.

[1] https://upspin.io/ [2] https://youtu.be/ENLWEfi0Tkg

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#286

Post by [deleted] »

rsync wrote: post #147
secabeen wrote: post #133

Earlier quoted context omitted.

Note that twilio-cli is a totally over-weight, un-necessarily complicated node.js app. If you just want to send SMS from the command line, the curl code is much, much cleaner.

I have not used twilio-cli for anything ... I just write my own scripts with curl - here is my basic 'sms' command: https://0x.co/6K37UZ

[deleted]

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#287

Post by limaoscarjuliet »

Question for rsync:

You said: This might seem odd, but consider: if an rsync.net storage array is a FreeBSD system running only OpenSSH, what would the firewall be ? It would be another FreeBSD system with only port 22 open. That would introduce more failure modes, fragility and complexity without gaining any security.

You seem to suggest the big firewalls do not bring any value to the table. I always thought they had more "intelligence" - dropping sessions based on some bad patterns, guarding against DDoS (to some extent), etc.

Are you saying BSD is as good as these expensive boxes? Does it apply to SSH only or HTTP(s) and some other traffic as well?

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#288

Post by raverbashing »

vidarh wrote: post #155
navaati wrote: post #102

Earlier quoted context omitted.

It’s hilarious that the first "vulnerability" in the example report[0] linked in this page is basically "SSH is accessible". Well… Duh ! [0] https://www.rsync.net/resources/regulatory/PCI_usw-s005_repo... EDIT: It’s marked as "PASS" though, so it’s all fine, just funny.

I once had a someone report responding to ping as a vulnerability. For the public facing firewall. We sent them back a link of prominent servers that respond to ping. Including the web server of the expensive agency that had produced the report. And whose web server had an expired SSL certificate.

Talking about PCI compliance I always remember this: https://serverfault.com/questions/293217/our-security-audito...

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#289

Post by exikyut »

viraptor wrote: post #279
exikyut wrote: post #265

Earlier quoted context omitted.

Such strategies are remarkably effective, and maybe arguably describes all security in a nutshell. Every time I notice an obscure feature in a Google product or service and go "hm, I wonder if that could be exploited", I then always go "...meh, it'll take too long and require too much concentration to figure it out."

No, not at scale. You may be discouraged, but there's someone who will have lots of fun breaking that specific feature. See for example @jonasLyk who spent the last half a year (?) trying to abuse almost only the alternative streams and junction folders in windows.

Wow, this guy is mad

https://twitter.com/jonaslyk

I can't help but picture him as a sysadmin walking away from a bunch of servers that are mysteriously 40% faster than ever before, but then he gets stopped at the door of the datacenter by some unimpressed looking lawyers who glare at him until he puts everything back

Thanks for the reference, and fair point, yeah that's not how it works at scale.

Re: Interview with CEO of rsync.net: “no firewalls and no routers”

#290

Post by oilbagz »

I bought an rsync.net account a few years back when John made it known on HN, and have used it solidly as a backup for my .. wristwatch!

I have a LILYGO that I coded up a time-tracking app, which basically creates an event log whenever I tap it, wherever I go - and when Internet is available, it squirts the log over to some text files that live on rsync.net ..

Pretty neat to be able to do this without much of a desktop or mobile phone in the way, I have to say. I wonder if there are more opportunities for this kind of IoT service out there .. it sure was fun to get this working without REST ..

Post reply on HN