• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: August 28th, 2023

help-circle
  • Peter F. Hamilton’s books may fit the bill: Futuristic, not hopeless/dystopic, and the main characters tend to make reasonable decisions. Be wrned though that he favours deus ex machina conclusions. Most will suggest Pandora’s Star as a starting point (with good reason, as the Commonwealth Saga is quite expansive), but it does not have to be. I personally read the Night’s Dawn trilogy first. The Salvation trilogy also stands on its own, and for a completely standalone book Great North Road was a good read.

    Adrian Tchaikovsky is another wonderful author! the Children of Time and Final Architecture series were quite enjoyable.

    Redemption Space (Alastair Reynolds) is another series one that I like to recommend. Closer to The Expanse. House of Suns also is a great read by the same author, as are several of his other stories.

    The White Space books by Elizabeth Bear should be on your reading list.

    Vorkosigan Saga (Lois McMaster Bujold) is a bit dated but similar to Vatta’s War in the earlier books. Later on the plot tends to be more along the lines of whodunnit mystery… in space.

    And let’s not forget another scifi favourite, Iain M. Banks! The Culture series are great of course, but I liked The Algebraist the best.







  • The CIS benchmarks for Linux are a good start. There are some off the shelf tools that let you run those, notably linux-bench. Another tool in a similar fashion is lynis. You can also use eBPF tools like callander to examine your workload behaviour and help tighten your seccomp policies.

    Once you’ve established a baseline for your system, you’ll next want to harden your environment. This means network scans, OWASP, etc. As far as off the shelf tools go, OpenVAS is quite popular even in Enterprise environments.

    Finally there’s the continuous security tasks. Continuous package updates, runtime security, log analysis, etc. There are some free tools that cover part of this like Security Onion, but if the price is right a SaaS tool can save you a lot of time.









  • You can’t run vmalert without flags

    Running grep without parameters is also pretty fucking useless.

    500 words in to the over 3,000 word dump, I gave up.

    Claims to have a Unix background, doesn’t RTFM.

    Nobody really uses Kubernetes for day-to-day work, and it shows. Where UNIX concepts like files and pipes exist from OS internals up to interaction by actual people, cloud-native tooling feels like it’s meant for bureaucrats in well-paid jobs.

    Translation: Author does not understand APIs.

    Want an asynchronous, hierarchical, recursive, key-value database? With metadata like modified times and access control built-in? Sounds pretty fancy! Files and directories.

    Ok. Now give me high availability, atomic writes to sets of keys, caching, access control…

    I’m ashamed enough that I can’t really apply to these jobs

    This reads as “I applied to the jobs and got rejected. There’s nothing wrong with me, so the jobs must be broken”.