@dee@grafana.social
@dee@grafana.social avatar

dee

@dee@grafana.social

VP, Engineering for #loki, #mimir, #tempo, #pyroscope, and #prometheus at #grafana

ex-Cloudflare (DDoS protection, firewall, WAF, and more). Working in all parts of tech since 1996, self-taught

in professional circles I'm still more boy-mode, but I am a third thing, please respect the pronouns.

#nobot

This profile is from a federated server and may be incomplete. Browse more on the original instance.

dee, to Engineering
@dee@grafana.social avatar

I'm hiring for strong software engineers who care deeply about reliability and performance, and who want to work on big distributed systems.

https://boards.greenhouse.io/grafanalabs/jobs/5140110004

Specifically if you're in Canada or the USA please do apply.

(I'll have other roles for European countries open soon)

#FediHire #sre #engineering

dee, to random
@dee@grafana.social avatar

the HTTP2 rapid reset issue reveals that Go has it's own dependency hell... google.golang.org/grpc declares which version of golang.org/x/net it's using, and so it's not just "update golang.org/x/net" in your application and you're safe, it's also "update GRPC in your application"... and of course this is now "update every module that uses GRPC and refers to an older version" which is now a huge sprawling mess of modules.

it's all fine saying that Go is always backwards compatible and doesn't require older versions to have updated, etc... but the reality of it is that security issues kick you in the teeth hard and the cascade of dependencies require you to update virtually everything anyway. it would be better to embrace "update everything all the time" then to have an illusion of "you only need to update your thing and not worry about other things" as the latter means you have no muscle memory or build tooling ready when you actually need to update all the things.

I like Go a lot, but I don't find the dependency / updates / supportability philosophy that they've taken on to be internally consistent or truly viable long-term, I've always held that they're smarter than I and implicitly this means I'm probably wrong, but as time passes I'm not so sure I'm wrong (I am sure they're smarter than I am though).

dee,
@dee@grafana.social avatar

@ben yup, and I even updated https://github.com/microcosm-cc/bluemonday because it uses x/net for x/net/html, it doesn't do anything with HTTP, just with HTML.

but clearly this dependency hell is bad for people, as I'd already received quite a few requests to patch things as vuln scanners revealed I included an older x/net.

I've bumped mine (even though I didn't have to), just to reduce the noise for people going through this

0xabad1dea, to random

electricians of the internet: bathroom lightswitch in the hallway. why does it happen

dee,
@dee@grafana.social avatar

@0xabad1dea building regulations for safety.

you can have a switch inside the bathroom on a cord or something else that prevents moisture on the switch being a direct conductor, but you can't have a regular switch in a wet space environment or certain distances from water sources.

dee, to grafana
@dee@grafana.social avatar

Grafana Pyroscope just hit 1.0 https://github.com/grafana/pyroscope/releases/tag/v1.0.0

This is open source (AGPL) Continuous Profiling, the fourth pillar of observability. It is stable, performant, and capable of running at scale.

You can also try profiling on Grafana Cloud as we provide it as a SaaS if you don't want to run your own: https://grafana.com/products/cloud/profiles-for-continuous-profiling/ you can try it for free (and if usage is small it's free forever).

#grafana #pyroscope #profiling

robpike, to random
@robpike@hachyderm.io avatar

Does anyone have any technology that works? I am becoming despondent over the state of things. So much technological progress and yet everything seems to be broken (or must be updated, which amounts to the same thing in user experience) all the time.

Sorry.

dee,
@dee@grafana.social avatar

@robpike it does feel like the greater the technological progress, the shorter the entropic cycle for the usefulness of the device/appliance.

we've gone from household tools and appliances whose useful life could be measured in decades to devices that are technologically superior but that due to connectivity and the pace of development actually have a very short life.

TLS changes, wireless protocol changes, security risks creating the need for constant updates, failing components no longer being available, environmental conditions impacting more sensitive components.

the stuff I have that works well tends to be audio things made for recording studios where the tech is made to withstand terrible conditions (have you ever seen a roadie move equipment!) and the technology itself has tactile interfaces that are knobs, buttons and sliders, with simple LEDs for visual feedback. that stuff works for spans of time that has so far outlived many laptops and PCs.

dee, to random
@dee@grafana.social avatar

What is the best "How to secure Windows 11 Pro" guide for engineers and those willing to take a bit of inconvenience to get security to a very high level?

Please boost and share.

What I'm looking for are one or more advanced guides, no BS, reasonings why, instructions.

For engineers in 2023 moving to Windows, how do you harden a dev laptop? (Without the snark "use Linux" or "run it Qubes" thanks, I'm hoping for constructive advice).

Example of one I rate highly is this: https://0ut3r.space/2022/03/06/windows-defender/ by @h03k

I'm looking for more like this... anyone on infosec.exchange you'd recommend @jerry ?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • rosin
  • InstantRegret
  • mdbf
  • ngwrru68w68
  • khanakhh
  • DreamBathrooms
  • Durango
  • magazineikmin
  • thenastyranch
  • everett
  • Youngstown
  • slotface
  • kavyap
  • JUstTest
  • cisconetworking
  • anitta
  • osvaldo12
  • tacticalgear
  • tester
  • GTA5RPClips
  • cubers
  • ethstaker
  • provamag3
  • modclub
  • Leos
  • normalnudes
  • lostlight
  • All magazines
    •