Hacker Timesnew | past | comments | ask | show | jobs | submit | philprx's commentslogin

that's roughly 1/45th probable downtime window = 2.22% downtime probability (yeah, it's a figure not a real proba ;-) )

compared to say, roughly 1/365 probable downtime window for a 398 days cert lifetime = 0.25% downtime probability

let's pray you don't need to rotate when it's down...

Dan Geer famously said: "Dependency is the root cause of risk"...

PS: even stricter shortlived durations in some context:

Internal/Private 1 – 7 days Corporate VPNs, Internal apps

Ephemeral 5 mins – 1 hour Docker containers, CI/CD runners


That's only if you delay renewal until the last day of the lifetime of the certificate. If you renew at day 30 you'd only get in trouble if there's more than two weeks of downtime.


You’re supposed to renew your cert way in advance of the expiration time. For 47-day certs the general expectation is that you renew them monthly, so in the worst case you’d need more than two weeks of CA outage before anything went wrong.


Trust is down ;-)


Strudel.cc ?


You're advocating for going the way of dystopian china?

Gee... Those who trade privacy for security will get neither (and deserve none?)


China is the only country that has internet sovereignty, quite essential for national sovereignty


wooohooo... it had been a long long time since I last entered VMS command in a terminal !

Thank you sooo much for making this happen! very happy here


I didn't find the GitHub project for bufstream... Any clue?


Ack, pardon me. That should be fixed now!


Found this on their website https://github.com/bufbuild/buf


They seem to have pivoted from protobuf tools to kafka alternatives. I don't think bufstream is OSS (yet). Or at least, they have very much de-emphasized their original offering on their site.


Nope! We're still heavily investing in scaling Protobuf. In fact, our data quality guarantees built into Bufstream are powered by Protobuf! This is simply an extension of what we do...Connect RPC, Buf CLI, etc.

Don't read too much into the website :)


Good to know. Good proto tooling is still high value :)


I don't think bufstream itself is open source but there's https://github.com/bufbuild/bufstream-demo which may be close to what you want (but is also unlicensed, bizarrely)


That's correct. Bufstream is not open source, but we do have a demo that you can try. I've asked the team to include a proper LICENSE file as well. Thanks for catching that!


Given the uptake of FastAPI and FastHTML, is there any plans for these on top of Flask?


If you know a good Open-Source one, feel free to add it via PL


Passion, focus.... Just like tech.


What are other equipments similar to this one but different?

There seems to have many GPS location trackers on the market, are they all based on the same hardware?


Paid content click bait


I can access it for free, it's Medium you probably read too many articles there. Use private navigation.


It says "This post is for paid subscribers."


Odd! Works for me. Try https://archive.ph/jLoq7


Even there you only see the first 3 points. Under the 4th headline it says the rest is for paid subscribers only. And the article states that it has 8 sections at the beginning.


Section 4 to 8 are only accessible to paid subscribers, even with your link.


Scroll to the bottom of that link.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: