• 6 Posts
  • 412 Comments
Joined 1 year ago
cake
Cake day: June 29th, 2023

help-circle
  • How do you sell what you did as “it just worked”? Rightaway? You lied to them. You have your coworkers on an unmanaged machine with a foreign OS on the guest WiFi with custom networking. Don’t oversell a workaround as a solution.

    Simplifying the problem to “Windows” seems unfair, given how many problems you found. All of them still require a long-term solution for regular operation.












  • Fake Amazon reviews is a service you can buy to boost your product. Using genAI is an obvious move for these providers. Makes it harder for Amazon to find the fakes, because they can generate more content variety.

    When you run a botnet for such a service, you can’t only put 5 star reviews on your client’s products. You want a variety of usage pattern modifiers to stay below the radar. Putting reviews on semi-random products is one technique.







  • Ultimately, it doesn’t matter what caused you to be blocked from Docker Hub due to rate-limiting. When you’re in that scenario, it’s most cost efficient to buy your way out.

    If you can’t even imagine what would lead up to such a situation, congratulations, because it really sucks.

    Yes, there should be a cache. But sometimes people force pull images on service start, to ensure they get the latest “latest” tag. Every tag floats, not just “latest”. Lots of people don’t pin digests in their OCI references. This almost implies wanting to refresh cached tags regularly. Especially when you start critical services, you might pull their tag in case it drifted.

    Consider you have multiple hosts in your home lab, all running a good couple services, you roll out that new container runtime upgrade to your network, it resets all caches and restarts all services. Some pulls fail. Some of them are for DNS and other critical services. Suddenly your entire network is down, and you can’t even get on the Internet, because your pihole doesn’t start. You can’t recover, because you’re rate-limited.

    I’ve been there a couple of times until I worked on better resilience, but relying on docker.io is still a problem in general. I did pay them for quite some time.

    This is only one scenario where their service bit me. As a developer, it gets even more unpleasant, and I’m not talking commercial.