HackerTrans
TopNewTrendsCommentsPastAskShowJobs

aecay

no profile record

comments

aecay
·3 वर्ष पहले·discuss
And the fact that determining the true lat/long of one's location was best done by using mapquest.com (ah memories...). Unscrambled GPS for civilians didn't come along for another couple years.
aecay
·4 वर्ष पहले·discuss
This is a fantastic explanation.
aecay
·5 वर्ष पहले·discuss
The UK also gives people 6ish weeks (5 weeks to take when you want, plus 8 fixed bank holidays). I grew up in the US and am American more than I am anything else. I've lived in the UK for a relatively short time (6 years, under 20% of my life) -- but that's been my entire professional career. It's cultural differences like this that lead me to believe that America will never feel like "home" again -- I now can't imagine living somewhere where 6 weeks of vacation time seems like it's far outside the norm.
aecay
·5 वर्ष पहले·discuss
At $WORK, there's a process for automatically scanning docker images for packages that have CVEs against them. Any docker image that includes glibc instantly shoots to the top of the charts, mostly because of a boatload of high or critical severity CVEs relating to bugs in asm-implemented functions on platforms like ARM, POWER9, etc. Everything in our company runs on x86, but the CVE scanning tool is dumb, so a switch to alpine was heavily encouraged.

This broke teams that rely on python and on node, but the docker image guidelines come from a team whose ideal language is now go (and most of whose legacy code is in java), so they are not really sensitive to those concerns. Ironically we tried to move to distroless as implemented by google[1], but that's based on debian which includes glibc, so the un-nuanced CVE checker freaks out again. That effort was quietly dropped.

(I'm not actually disputing the proposition that alpine is better for security under certain circumstances, but I think a lot of "the push" comes from what might uncharitably be described as cargo culting, or with more insight as interpretations that make sense in one context [everything is a static binary, little to no reliance on traditional userland tools] being unquestioningly extended to other contexts.)

[1] https://github.com/GoogleContainerTools/distroless