Got a phone interview for a backend dev job in an opsec company.

Interviewer:
This is a very serious and prestigious position, we take care of the most important bits of code.

*Proceeds to talk introductory nonsense*

Interviewer:
Do you know what a DNS is?

Me:
Yes, of course! DNS stands for Domain Name System.... Blah blah blah... I explain about the servers, about hosts file, about DNS spoofing and everything else possible on this topic.

Interviewer:
See, I was patient with you - letting you finish. I'm not sure what you're talking about and where you got it from, but a DNS is that line in the browser where you type the site's name.

He didn't ask any more questions, just told me that they'll get back to me. I asked not to do that.

Three weeks later I got an email claiming that I'm not qualified.

Fear this.

Nothing to say here...

devRant has had a huge impact on my life. My poops are significantly longer and now my legs fall asleep because of it.

Hello guys. So after I posted the rant about me blocking Google and Facebook through my hosts file, some people commented with the idea of creating a gitlab page with more privacy tips etc.

Well, that is turning into a project (actual website) that I initially started alone but @ewpratten joined the 'team' as frontender!

He'll be doing the front end and I'll be doing the backend :).

I think this will be my first ever (active) collab so I'm pretty excited =D.

Being the only dev on a project

Thanks @dfox. Interview time.

First rant from a phone without Google services.

Put shitloads of Google/fb etc domains in the hosts file so my phone cant reach those either.

Root firewall blocks everything except for devrant, a download manager, fdroid and firefox focus.

As for my phone, I'm Google free!

Currently shitting, thanks for being there devRant.

I really appreciate devs that aren't complete assholes when you admit ignorance and embrace failure. Be a teacher, not an asshole!

Oddly enough, it's comforting to hear other devs mumble "mother fucker" or "what the fuck, you stupid piece of ass" when working on things.

It means I'm not alone and we can all suffer together 🤗

Pushing to Prod without testing and having zero problems

So the new mass surveillance law will be going into effect from the 1st of January.

Of course, since I'm very keen on my security/privacy, I'm going to implement some precautions.

- A few vps's connecting to tor, i2p and VPN provider so that I can always use a secure connection.

- Setup anti tracker/ads/etc etc shit on the VPS's. Probably through DnsMasq and the hosts file.

- Use Tor browser by default. I've tried this for a while now and damn, the tor network has become way faster than only even a year ago! Some pages literally only take a few seconds to load.

- Wipe my laptop, encrypt the harddrive and at least put QubesOS on it together with probably a few other systems.

- Ungoogle my new phone, use it with VPN by default.

- Get rid of all non encrypted communication services. I think that only leaves me with a few account removals because I haven't chatted unencrypted for nearly a fucking year now.

If anyone has any more ideas, please share!

A legitimate warning from my university's curriculum app

I don't use Google/Facebook for privacy reasons (and their sub-services etc). Haven't used them for ages but noticed that google still loads a lot of domains like analytics etc. This goes for facebook as well.

I now blocked a lot of google/facebook domains through my hosts file.

It's funny to see the amount of DNS requests to those fb/google connected domains nearly go to zero and also the fact that I literally can't load google/facebook anymore!

At this point when I'm asked what I'm doing, my reply is just "computer stuff"

Holy fuck, this is starting to work!

Problem: I am highly anti google/facebook/few others and I'd rather null route those DNS requests.
The problem is that the pihole only can blacklist domains or wildcard domains but not words. So if Google would come up with a new name for some of their domains, I'd be fucked because I can't filter out the word Google through the pihole.

Today I fucking found the solution (still a work in progress but a PoC is nearly working):
Compiled a program which can monitor DNS queries/requests and logs them to a file.
Have a php (yes I write most of my cli tools in php) script tailing the log file and gathering the requested domains from it.
Then I can see if the domain contains the substring which I don't like (google as word for example) and echo it to the end of my hosts file with 0.0.0.0 in front of it if that's the case.

Holy fuck this seems to be working! 😍

The deadline got pushed up... To the end of the week.

Share your most useful terminal aliases and functions.

alias gs='git status'
alias gcm='git commit -m'
alias push='git push'
alias pull='git pull'
alias hosts='sudo nano /etc/hosts'
alias glog='git log --graph --oneline --decorate -n 10 --color'
alias mykey='cat ~/.ssh/id_rsa.pub | xclip -sel clip'

function mkcd () {
mkdir -p -- "$1" && cd -P -- "$1"
}

As well as one for each major project (lets say 1+ weeks of dev time) to immediately cd to it from anywhere. How about you guys?

Always looking to improve my terminal commands, so am curious what everyone else uses for shortcuts.

When you show the senior developer your clever solution to a problem and they come back with "you can also do XYZ" and his solution is much more elegant. Appreciate your superiors kids.

Waking up, feeling like I have a cold I sit down at my computer and see that my biggest client has asked for a minor change. I haven't had my coffee yet, but I can do what they're asking for in a minute. The site is *gone*. Just a permissions error. Have they been hacked?! Why hasn't the client called me?! The files are there and no changes have been made. It doesn't come up on any browser. 10 panicked minutes later I check it on my phone. It comes up. Wait a minute ... While editing /etc/hosts yesterday I'd accidentally uncommented a line for this site that I'd foolishly left in there. One character later my false alarm is solved. I'm getting my damned coffee now.

Experience that made me feel like a dev badass?

Users requested the ability to 'send' information from one application to another. Couple of our senior devs started out saying it would be impossible (there is no way to pass objects across a machine's memory boundary), then entertained the idea of utilizing the various messaging frameworks such as Microsoft's ServiceBus and RabbitMQ, but came up with a plan to use 2 WebAPI services (one messenger, one receiver) along with a homegrown messaging API (the clients would 'poll' the services looking for message) because ServiceBus, RabbitMQ, etc might not be able to scale to our needs. Their initial estimates were about 6 months development for the two services, hardware requirement for two servers, MSSQL server licenses, and padded an additional 6 months for client modifications. Very...very proud of their detailed planning.

I thought ...hmmm...I've done memory maps and created simple TCP/IP hosts that could send messages back and forth between other apps (non-UI), WPF couldn't be that much different.

In an afternoon, I came up with this (see attached), and showed the boss. Guess which solution we're going with.

The two devs are still kinda pissed at me. One still likes say as I walk in the room "our hero returns"....frack him.

"We can refactor that later"

There goes my Sunday 😏

This is going to be a long rant, coz this is the only way to vent out my frustration against our tech head.

Yesterday, while our fucking twat tech head was playing around in company aws account, he terminated the production server. By mistake, apparently. Coz he doesn't know shit about server management. But that egoist ass won't admit and fucked the production server.

And then ran away. We developers sprang into action. Updated dns to point to staging server, setup virtual hosts, env files, point to prod database, force flush dns cache. All systems were up and running in 30 mins. And since it was staging server, it had lot of untested features and codes, and we spent rest of the day fixing the bugs.

And that tech head, who ran away hiding his tail between his legs, after he fucked the server, came back after systems were up. And started cracking jokes, that "so many features got released in 1 day" . "We cut server cost by shutting down 1 server."

We were struggling and working in full throttle to make the services running again. And that fuckity fucker was cracking jokes.

And I don't even know what excuse he gave to ceo for the downtime. I am pretty sure he would have made up some crappy excuse to hide his fucking mistake. That ass never admits his mistake. I am thinking to go to ceo today and tell the real story and get that faggot head fired or at least a strict warning.

Printers.

If you get the "What's your greatest weakness" question make sure to answer "honesty". That way when they say "I don't think honesty is a weakness", you say, "I don't care what you think."

Switching between Vim and atom, ":wq" sometimes finds itself in my scripts 😅

3 rants for the price of 1, isn't that a great deal!

1. HP, you braindead fucking morons!!!

So recently I disassembled this HP laptop of mine to unfuck it at the hardware level. Some issues with the hinge that I had to solve. So I had to disassemble not only the bottom of the laptop but also the display panel itself. Turns out that HP - being the certified enganeers they are - made the following fuckups, with probably many more that I didn't even notice yet.

- They used fucking glue to ensure that the bottom of the display frame stays connected to the panel. Cheap solution to what should've been "MAKE A FUCKING DECENT FRAME?!" but a royal pain in the ass to disassemble. Luckily I was careful and didn't damage the panel, but the chance of that happening was most certainly nonzero.
- They connected the ribbon cables for the keyboard in such a way that you have to reach all the way into the spacing between the keyboard and the motherboard to connect the bloody things. And some extra spacing on the ribbon cables to enable servicing with some room for actually connecting the bloody things easily.. as Carlos Mantos would say it - M-m-M, nonoNO!!!
- Oh and let's not forget an old flaw that I noticed ages ago in this turd. The CPU goes straight to 70°C during boot-up but turning on the fan.. again, M-m-M, nonoNO!!! Let's just get the bloody thing to overheat, freeze completely and force the user to power cycle the machine, right? That's gonna be a great way to make them satisfied, RIGHT?! NO MOTHERFUCKERS, AND I WILL DISCONNECT THE DATA LINES OF THIS FUCKING THING TO MAKE IT SPIN ALL THE TIME, AS IT SHOULD!!! Certified fucking braindead abominations of engineers!!!

Oh and not only that, this laptop is outperformed by a Raspberry Pi 3B in performance, thermals, price and product quality.. A FUCKING SINGLE BOARD COMPUTER!!! Isn't that a great joke. Someone here mentioned earlier that HP and Acer seem to have been competing for a long time to make the shittiest products possible, and boy they fucking do. If there's anything that makes both of those shitcompanies remarkable, that'd be it.

2. If I want to conduct a pentest, I don't want to have to relearn the bloody tool!

Recently I did a Burp Suite test to see how the devRant web app logs in, but due to my Burp Suite being the community edition, I couldn't save it. Fucking amazing, thanks PortSwigger! And I couldn't recreate the results anymore due to what I think is a change in the web app. But I'll get back to that later.

So I fired up bettercap (which works at lower network layers and can conduct ARP poisoning and DNS cache poisoning) with the intent to ARP poison my phone and get the results straight from the devRant Android app. I haven't used this tool since around 2017 due to the fact that I kinda lost interest in offensive security. When I fired it up again a few days ago in my PTbox (which is a VM somewhere else on the network) and today again in my newly recovered HP laptop, I noticed that both hosts now have an updated version of bettercap, in which the options completely changed. It's now got different command-line switches and some interactive mode. Needless to say, I have no idea how to use this bloody thing anymore and don't feel like learning it all over again for a single test. Maybe this is why users often dislike changes to the UI, and why some sysadmins refrain from updating their servers? When you have users of any kind, you should at all times honor their installations, give them time to change their individual configurations - tell them that they should! - in other words give them a grace time, and allow for backwards compatibility for as long as feasible.

3. devRant web app!!

As mentioned earlier I tried to scrape the web app's login flow with Burp Suite but every time that I try to log in with its proxy enabled, it doesn't open the login form but instead just makes a GET request to /feed/top/month?login=1 without ever allowing me to actually log in. This happens in both Chromium and Firefox, in Windows and Arch Linux. Clearly this is a change to the web app, and a very undesirable one. Especially considering that the login flow for the API isn't documented anywhere as far as I know.

So, can this update to the web app be rolled back, merged back to an older version of that login flow or can I at least know how I'm supposed to log in to this API in order to be able to start developing my own client?

*throws up in mouth a little*

My boss when:

Conversation regarding passwords:

Me: "It should be longer than that"
Other dev: "That's what she said"

*taking note of the inappropriate-ness*

Me: "We need to get a room for us"
PM: "That's what she said"
Me: "Come on Ryan!"
Other dev: "That's what she said"
Sales Lady: "This will never end!"
Me: "That's what she said!"

Office dies for a minute. Michael Scott would be proud.

!dev

Dear Airbnb Hosts,

The extra cleaning fee isn't just extra profit for you. I will gladly pick up after myself, before I leave. That said, if you expect me to deep clean your flat, consider leaving equipment to do so. If you send me a shitty email because I didn't buy a broom, mop, bucket and kitchen rags to stock your investment property, I'll tell you about where you can stick that noise.

Sincerely,
Fuck you

There is too much I want to learn and not enough time 😭

Fuck fuck fuck CNET.

1 o'clock at night. Clicked a link to CNET and the fucking shit started to play a random fucking video in their sidebar with volume amplified to 200%. I'm blocking this shit via hosts right now.

A client obsessed with *security* won’t give us access to the server that hosts the website we built.

Code release involves building templates, compressing the changed files into a zip folder, and emailing them to the client with instructions on where the changed files go

My family hosts an 100 mile (160km) run once every year for ultra-runners. 11 hours in the first runner has done 105 km. And I'm sitting at this checkpoint logging their times and working on a project. But rain started pouring down and this not so waterproof tent has just become the worst developing workplace I have ever been in because the umbrella ain't big enough for me and the laptop. So I'm soaked and won't be relieved for another 8 hours. The things you do for family.

That feeling when you are reading open-source code and actually understand it

I've done it

Sorry for being late, stuffs came inbetween!

I have done a few privacy rants/posts before but why not another one. @tahnik did one a few days ago so I thought I'd do a new one myself based on his rant.

So, online privacy. Some people say it's entirely dead, that's bullshit. It's up to an individual, though, how far they want to go as for protecting it.

I personally want to retain as much control over my data as possible (this seems to be a weird thing these days for unknown reasons...). That's why I spend quite some time/effort to take precautions, read myself into how to protect my data more and so on.

'Everyone should have the choice of what services they use' - fully agreed, no doubt about that.

I just find one thing problematic. Some services/companies handle data in a way or have certain business models which takes the control which some people want/have over their data away when you communicate with someone using that service.

Some people (like me) don't want anything to do with google but even when I want to email my best fucking friend, I lose the control over that email data since he uses gmail.

So, when someone chooses to use gmail and I *HAVE* to email them, my choice is gone.

TO BE VERY CLEAR: I'm not blaming that on the users, I'm blaming that on the company/service.

Then for example, google analytics. It's a very good/powerful when you're solely looking at its functions.
I just don't want to be part of their data collection as I don't want to get any data into the google engine.

There's a solution for that: installing an addon in order to opt out.

I'm sorry, WHAT?! --> I <-- have to install an addon in order to opt out of something that is happening on my own motherfucking computer?! What the actual fuck, I don't call that a fucking solution. I'll use Privacy Badger + hosts files to block that instead.

Google vs 'privacy' friendly search engines - I don't trust DDG completely because their backend is closed/not available to the public but I'd rather use them then a search engine which is known to be integrated into PRISM/other surveillance engines by default.

I don't mind the existence of certain services, as long as they don't integrated you with data hungry companies/mass surveillance without you even using their services.

Now lets see how fast the comment section explodes!

**Web Host Rant**

I can't believe how saturated the market is. I also can't believe how many Web hosts do not know a thing about development. You would think you'd want to read up on development practices before going into the business since developers are your customers.

Not to mention that a lot of hosting services are resellers of resellers of resellers. It's to the point where a 15 year old with their mom's credit card can start doing Web hosting. The problem is... they don't know how to answer actually development questions... they won't be in a conference call with you while you do deployments.

It infuriated me to the point where I've started my own hosting company. Completely managed and using the most advanced technologies aimed towards developers. Not only that but an advanced managment package that will teach proper deployment procedures and be there to hold your hand when you do deploy.

Oh and did I mention git will be available to even shared hosting? Oh and did I also mention that we are currently setting up put own git server?

*tries to SSH into my laptop to see how that third kernel compilation attempt went*
… From my Windows box.

Windows: aah nope.

"Oh God maybe the bloody HP thing overheated again"
*takes laptop from beneath the desk indent*
… Logs in perfectly. What the hell... Maybe it's SSH service went down?

$ systemctl status sshd
> active (running)

Well.. okay. Can I log in from my phone?

*fires up Termux*
*logs in just fine*

What the fuck... Literally just now I added the laptop's ECDSA key into the WSL known_hosts by trying to log into it, so it can't be blocked by that shitty firewall (come to think of it, did I disable that featureful piece of junk yet? A NAT router * takes care of that shit just fine Redmond certified mofos).. so what is it again.. yet another one of those fucking WanBLowS features?!!

condor@desktop $ nc -vz 192.168.10.30 22
Connection to 192.168.10.30 22 port [tcp/ssh] succeeded!

ARE YOU FUCKING FOR REAL?!

Fucking Heisen-feature-infested piece of garbage!!! Good for gaming and that's fucking it!

Edit: (*) this assumes that your internal network doesn't have any untrusted hosts. Public networks or home networks from regular users that don't audit their hosts all the time might very well need a firewall to be present on the host itself as well.

Ok, I'm adding devrant.com, reddit.com and youtube.com to my hosts file for the next weeks

Damn procrastination

PS: If I answer or ++ any of your comments, it means I failed. You devs can hold me accountable for that, thank you!

I can't believe how quickly this community has grown! Absolutely amazing to see so many like-minded people I can relate to 😊. Before devRant I had (I shit you not) 1 fellow dev that I could talk to.. Now I have a ton 😄

I recently started using mac as my dev OS and I am pretty impressed 😷

Honestly, I'm quitting my job because I didn't get arrays.

You think pointers are hard?

Naming things is hard.

Babies get 100+ points.

💡 I just need to make a baby and I'll have my stress ball!

Baby firstBorn = new Baby("Tommy");
firstBorn.setAppearance = "adorable";

😅

Over-ear > In-ear

When I go to hell, I will be fixing Ubuntu driver issues for all of eternity.

.. for the first time I permanently lost access to one of my GPG keys that were actually in use. No revocation certificates, nothing in the keychains on any of my hosts... Keychain flash drive that got stolen had a copy of both, my fileserver used to have a copy of that flash drive until I deleted it to make room for a filesystem migration, and my laptop used to have one.. until I decommisioned it and shredded its hard drive to be deployed somewhere else...

fuck

I can't sign my git commits anymore, and I can't revoke the key either.

(╯°□°）╯︵ ┻━┻

Switching to light theme unexpectedly

God damn fucking Windows bullshit.

Why is the fuck does Microsoft HATE its users?

Latest updates, and no fuck Windows 11, completely BREAKS all of my WSL environments.

Home directories are gone, or the environments are corrupt and won't even run.

99% of the issues these dense shit-fucks cause are because they RaNdOmLy reboot for their dumbass updates instead of scheduling them with the end user. During these rebots, do you thing they wait for everything to shut down?

HELL NO!

They just shut that shit down like they fucking own it. Editors? Gone. Browsers? Gone. WSL Consoles? Gone. Docker containers? Gone. IEdge? Hey, we have great news, we made IE your default browser again! BTW, your upgrade to Windows 11 is free until we force you to upgrade!

I'm so fed up with it.....so fucking tired of it...

The only reason why I even use WSL these days is to ssh into my Linux devices or run some quick dev tests in containers. Why not use PuTTY for SSH? Because it fucking SUCKS that's why.

I'm feeling so many emotions right now over bullshit that shouldn't even be happening. I'm literally at the point that I'm just going to install Linux on this device and just create a Windows VM on one of my hosts so I can still do "work" things that involve leadership.

Setting junior devs free for the first time

In a family with multiple IT people, we rock-paper-scissors to see who has to fix what 😄

"Where is the internet located?"

When this year started I didn't have much knowledge of server side programming as web developer, only thing I knew was html/css. But this year I got started with:

- PHP
- Framework Phalcon (PHP)
- Javascript (jQuery, NodeJS, react)
- SASS (I can't without it anymore)
- Virtual Hosts (local development)
- Command Line stuff either in macOs and linux ubuntu

This is a huge deal for me because I always got laughed at I only wrote CSS and couldn't write anything else.

So knowledge-wise it was the most productive year ever.

Also, devRant helps me get through the day lately. Thank you for being a part of it!

It's a satisfying moment when you actually get work done on a personal project. It's comforting knowing I am capable of not being a lazy shit all the time. Gotta keep this up.

I've been on devRant for an hour since getting in bed.. this can't be a nightly ritual 😐

My devGoals for 2019 are:

- Move DNS blocking from hosts file to a PiHole (or similar) at home

- Implement a full HAL for some smol microcontroller in C

- Create better automation templates for testing, building & deployment for our Angular projects

- Get rid of crippling depression

- Force my boss away from firebase and google tools in general

- Spread the love for CraftCMS

- Spread more love in general (with protection of course) 😄

I only use super old mechanical keyboards at home... anyone else? 😄

cPanel - keeping shitty hosts in business since 1996

The day I fit this into my code is the day I can die:

double penetration;

When you stay up late doing a personal project the night before a workday -- knowing damn well you're going to be too tired to do anything the next day -- and have no one to blame but yourself 😁

21:30, sysadmin, chatting with my colleagues, when one posts a screenshot of a message he just received from a dev :
"Hello, sorry for bothering you this late but we have a demo tomorrow morning and the app is completely stalled. It fails with the message 'cannot write to <file>, no space left on device'"

I say "I bet that they somehow managed to make their DB grow uncontrollably".

Colleague asks which server hosts the app, Dev answers "one of ours", then adds after a few seconds "wait, do you need the IP of the server? Dev2 should be able to provide it", before finally adding "we use a scheme in <other project> DB actually".

Finally, Dev2 declares that the bug is solved: "There was a loop that caused a DB view to grow constantly and it filled the filesystem".

Me: "Called it".

They cleaned the view: 41GB freed.

My CS degree finally came in!!! 😁

* Colleague asks how to make a alias for IP address
* Open up notepad++ w/ admin rights and load C:\Windows\System32\Drivers\etc\hosts in
* add a new entry to map IP to the alias
* hit sequence [ENTER][ESC]:wq[ENTER]
* wonder why is notepad window still there... Did it freeze again?

... happens to me all the time :(

"Your job isn't that hard, I can do it any day."

*receives email about project*

*turns around*

PM: "Hey I just sent you an email about a project"

No. Fucking. Shit.

We are now competing for points in the office. Good job devRant!

So my host of choice decided to migrate an old site to a new set of IPs without warning yesterday, down side to a VPS I guess.

Now this wouldn’t be an issue if it wasn’t on a dedicated IP you wankers.

DNS won’t resolve to new location yet and Virtual hosts contained the old IPs and for some fuck of a reason the httpd file is auto generated 😡so updating it will be lost on reboot.

Like What the flying fuck you imbeciles, this site has been up and running for 5+ years on this IP.
I barely do any maintenance for t as it’s just an old horse sitting on the web but fuck you don’t need to fuck with it or atleast give some fucking warning before you go drop it offline 😡

My non-tech friend asked how much Linux is

~ Stop procrastinating; the linux guide ~

# /etc/hosts
127.0.0.1 facebook.com
127.0.0.1 youtube.com
127.0.0.1 netflix.com
# 127.0.0.1 devrant.com

Team leads be like

looking at my uncle's webpage because he wants to switch hosts.
The logo has a white background, we want to change that.
Uncle: "It's not supposed to look like this"
Me: "the jpg file type is not transparent, you have to make something like a png."
U: *pulls up word* "hmm... I don't have that font on this laptop..."
M: *slowly loses sanity*

Sorry no work getting done tonight.. Game of Thrones and Silicon Valley have my attention

Back when I migrated my file server to a VM, I used robocopy to copy everything over (and caused quite a few fuckups before it'd behave halfway decent.. or so I thought). Now I tried to add my desktop's SSH key to the authorized_keys on said server but it wouldn't accept my key after that. After a bit of digging I've found that my entire home directory (where the file server hosts its mirror of my D: drive) had everything set to 777, and that's why the key isn't accepted. Great permission mode, isn't it? Much secure, very wow! Thank you so much robocopy!!!

So tired that I literally sat down to take a shit on a toilet that had the seat over down...

I no longer have to share a desk after today!!! No more greasy hands touching my mouse!

git blame

Surprise Skype calls be like

My act of kindness today was posting the solution to an issue that an entire thread was having. No one could figure out why their code wasn't working properly. I stumbled upon it after hours of fiddling(I had the same issue) and now we can be at peace. Don't be that guy that doesn't share knowledge. Now I can go back to being selfish till tomorrow 😄

Closing and opening the IDE fixed this problem...

"You're a programmer?!"
"So, I have this app idea and I think it will be revolutionary!! I HAVE GREAT ideas for what it will look like - light blue here and white everywhere else. it's like facebook but different ..."
"It's really going to express my creativity as a person. I've poured my heart and soul into this idea. ITS GREAT RIGHT?!?!"

Did a bunch more cowboy coding today as I call it (coding in vi on production). Gather 'round kiddies, uncle Logan's got a story fer ya…

First things first, disclaimer: I'm no sysadmin. I respect sysadmins and the work they do, but I'm the first to admit my strengths definitely lie more in writing programs rather than running servers.

Anyhow, I recently inherited someone else's codebase (the story of my profession career, but I digress) and let me tell you this thing has amateur hour written all over it. It's written in PHP and JavaScript by a self-taught programmer who apparently discovered procedural programming and decided there was nothing left to learn and stopped there (no disrespect to self-taught programmers).

I could rant for days about the various problems this codebase has, but today I have a very specific story to tell. A story about errors and logs.

And it all started when I noticed the disk space on our server was gradually decreasing.

So today I logged onto our API server (Ubuntu running Apache/PHP) and did a df -h to check the disk space, and was surprised to see that it had noticeably decreased since the last time I'd checked when everything was running smoothly. But seeing as this server does not store any persistent customer data (we have a separate db server) and purely hosts the stateless API, it should NOT be consuming disk space over time at all.

The only thing I could think of was the logs, but the logs were very quiet, just the odd benign message that was fully expected. Just to be sure I did an ls -Sh to check the size of the logs, and while some of them were a little big, nothing over a few megs. Nothing to account for gigabytes of disk space gradually disappearing.

What could it be? I wondered.

cd ../..
du . | sort --sort=numeric

What's this? 2671132 K in some log folder buried in the api source code? I cd into it and it turns out there are separate PHP log files in there, split up by customer, so that each customer of ours (we have 120) has their own respective error log! (Why??)

Armed with this newfound piece of (still rather unbelievable) evidence I perform a mad scramble to search the codebase for where this extra logging is happening and sure enough I find a custom PHP error handler that is capturing (most) errors and redirecting them to these individualized log files.

Conveniently enough, not ALL errors were being absorbed though, so I still knew the main error_log was working (and any time I explicitly error_logged it would go there, so I was none the wiser that this other error-catching was even happening).

Needless to say I removed the code as quickly as I found it, tail -f'd the error_log and to my dismay it was being absolutely flooded with syntax errors, runtime PHP exceptions, warnings galore, and all sorts of other things.

My jaw almost hit the floor. I've been with this company for 6 months and had no idea these errors were even happening!

The sad thing was how easy to fix all the errors ended up being. Most of them were "undefined index" errors that could have been completely avoided with a simple isset() check, but instead ended up throwing an exception, nullifying any code that came after it.

Anyway kids, the moral of the story is don't split up your log files. It makes absolutely no sense and can end up obscuring easily fixable bugs for half a year or more!

Happy coding.

My lunch consists of smashing food in my mouth and watching YouTube videos. Sad but Satisfying.

Inspired by @Linux 's rant

Most of my impressive work gets done within the last hour of the workday.

My old job was almost perfect. I was a systems engineer for a research network. My duties were to configure, build, install, secure, manage and repair Linux hosts used for research on projects so advanced/cutting edge that I could spend days just listening to researchers explaining them and I honestly loved it! I understood less than half of the projects but just seeing how motivated and excited the researchers are made the job my favourite. Unfortunately I had to leave and get a job closer to my house because having a 2 hour (one way) commute for two years was killing me :-/ relocation wasn't an option and still isn't but I'd be lying to myself if I tried to say I wouldn't go back as soon as I could.

IDE warnings

You call it procrastinating, I call it thinking.

If you're going to host a Women in Tech Breakfast, there needs to be more than one samovar of coffee (even if it's being constantly refilled). Clearly the hosts have no experience in distributed computing.

I just created these folders. I own you computer. Obey me and let me in.

You know you need sleep when you wave your hand under a paper towel dispenser and it's not automatic.

This is my bottom drawer. That's +150 packets of honey from the cafe downstairs. I've been slowly collecting them since I started working here. I'm leaving soon and thinking about leaving them so the next dev can have a pleasant surprise 😂

Sent this to my Web dev friend that said "Yeah... I'm leaving it instead of fixing it"

When they send you a high priority email, every email.

Confession: I love coding but I like doing other things more (music, enjoying nature, etc.)

I wrote a node + vue web app that consumes bing api and lets you block specific hosts with a click, and I have some thoughts I need to post somewhere.

My main motivation for this it is that the search results I've been getting with the big search engines are lacking a lot of quality. The SEO situation right now is very complex but the bottom line is that there is a lot of white hat SEO abuse.

Commercial companies are fucking up the internet very hard. Search results have become way too profit oriented thus unneutral. Personal blogs are becoming very rare. Information is losing quality and sites are losing identity. The internet is consollidating.

So, I decided to write something to help me give this situation the middle finger.

I wrote this because I consider the ability to block specific sites a basic universal right. If you were ripped off by a website or you just don't like it, then you should be able to block said site from your search results. It's not rocket science.

Google used to have this feature integrated but they removed it in 2013. They also had an extension that did this client side, but they removed it in 2018 too. We're years past the time where Google forgot their "Don't be evil" motto.

AFAIK, the only search engine on earth that lets you block sites is millionshort.com, but if you block too many sites, the performance degrades. And the company that runs it is a for profit too.

There is a third party extension that blocks sites called uBlacklist. The problem is that it only works on google. I wrote my app so as to escape google's tracking clutches, ads and their annoying products showing up in between my results.

But aside uBlacklist does the same thing as my app, including the limitation that this isn't an actual search engine, it's just filtering search results after they are generated.

This is far from ideal because filter results before the results are generated would be much more preferred.

But developing a search engine is prohibitively expensive to both index and rank pages for a single person. Which is sad, but can't do much about it.

I'm also thinking of implementing the ability promote certain sites, the opposite to blocking, so these promoted sites would get more priority within the results.

I guess I would have to move the promoted sites between all pages I fetched to the first page/s, but client side.

But this is suboptimal compared to having actual access to the rank algorithm, where you could promote sites in a smarter way, but again, I can't build a search engine by myself.

I'm using mongo to cache the results, so with a click of a button I can retrieve the results of a previous query without hitting bing. So far a couple of queries don't seem to bring much performance or space issues.

On using bing: bing is basically the only realiable API option I could find that was hobby cost worthy. Most microsoft products are usually my last choice.

Bing is giving me a 7 day free trial of their search API until I register a CC. They offer a free tier, but I'm not sure if that's only for these 7 days. Otherwise, I'm gonna need to pay like 5$.

Paying or not, having to use a CC to use this software I wrote sucks balls.

So far the usage of this app has resulted in me becoming more critical of sites and finding sites of better quality. I think overall it helps me to become a better programmer, all the while having better protection of my privacy.

One not upside is that I'm the only one curating myself, whereas I could benefit from other people that I trust own block/promote lists.

I will git push it somewhere at some point, but it does require some more work:
I would want to add a docker-compose script to make it easy to start, and I didn't write any tests unfortunately (I did use eslint for both apps, though).
The performance is not excellent (the app has not experienced blocks so far, but it does make the coolers spin after a bit) because the algorithms I wrote were very POC.
But it took me some time to write it, and I need to catch some breath.

There are other more open efforts that seem to be more ethical, but they are usually hard to use or just incomplete.

commoncrawl.org is a free index of the web. one problem I found is that it doesn't seem to index everything (for example, it doesn't seem to index the blog of a friend I know that has been writing for years and is indexed by google).

it also requires knowledge on reading warc files, which will surely require some time investment to learn.

it also seems kinda slow for responses,

it is also generated only once a month, and I would still have little idea on how to implement a pagerank algorithm, let alone code it.

I feel like half of my life is setting up dev environments

Ever spend hours debugging and your coworker mutters "... It's probably XYZ" and they are right? 😵

"The old developer wrote that, not me"

I just noticed that my desktop still has a DVD-RW in it that I never used.. which led me to think, I've got here like 5 DVD-RW's as well as 5 CD-RW's, but I never use them. Are there still any uses for them? Long-term backup storage for example? I've heard somewhere that data rot can happen over the course of a few years.. but would it really be a problem? I mean I've had these for over a year already and they look healthy to me. That said, they've never been used and just sat on the top of my desk in their enclosures all the time.

FWIW, I'm having 10TB of storage (as well as some other smaller stuff here and there.. maybe 500GB or so) in various hosts and 3 mirrors, so the need for backups is already fulfilled.. it's merely a curiosity of mine as in "ah, I still have these things huh".. so yeah.

I think that I've bought these DVD's for something like €6 for 5 pieces in a local store that doesn't specialize in this sort of thing, so I'm fairly certain that I could get them for cheaper elsewhere.. think the likes of AliExpress etc. Would they be a viable technology to maybe still invest in over hard drives for long-term storage purposes, considering that the cost of a hard drive these days is only €50 for 1TB? But I guess that tapes would be better for this purpose, no?

Complains about sitting all day.
Proceeds to roll around in an office chair to get around.

"My printer is broken, fix it"

*Designs front-end sends it to my boss*
Boss: Looks good. No changes needed.
*Hosts the design*
Boss: Ah, well these icons need to be different maybe and this font is too boring, try something else.
*Cries internally*

Google suggestions kill me

Everyone is posting awesome setups and I'm over here with a laptop lol

I hate having to reverse engineer an application you built, just to understand it. All because you haven't worked on it in months.

The difference of 5 letters can be significant using "this" or "self" instead of "localhost" (added in /etc/hosts) looks much nicer and is faster to type.

"There are only two hard things in Computer Science: cache invalidation, naming things, and off-by-one errors."

The other dev and I met with the PM to discuss some naming issues in one of our applications. Out of the 5 minutes we were together, the PM suggested 4 new features and a complete restructure of a module.

@localhost my current work setup 👍

In training and the other dev is pointing out active bugs to the client

Don't you love transferring server hosts and paying for a dedicated IP only to get given an IP that is already in use and forward it using the incorrect port .-.

*Deep breathing*

I don't know why this is funny

Wtf man, you are using fucking Ubuntu for 5 months and I really have to tell you how to edit fucking /etc/hosts? Fuck you... I should be the fucking boss...

I was playing kitchen with my niece today and we were baking a cake. After she put it in the toy oven, without thinking, I spat out:

"How long do you think it will build for?"

I've never seen such a confused look 😂

*get task assigned to me*

*complete task*

*get new task changing everything I did in the previous task*

Me: "Why is this getting completely changed? It meets the specs you sent."

PM: "Well, they took a while to approve the concept so I assumed it would be the same as the one on their current site. But now they want something different. Just change it."

ARE YOU FUCKING KIDDING ME. WHAT IN THE ACTUAL FUCK IS THE POINT OF SENDING FOR APPROVAL IF YOU ARE NOT GOING TO WAIT FOR THE APPROVAL?!

The Sys Admin limited everyone's access on an application through the admin panel. He forgot I have access to the database and I now have full access 😂

Me:
* Builds Project and Hosts it *
* thinking * : * ' I don't really need to push to Master, I'll just push it to the deployed branch *

Me: * tests project from host *

Me: * sees a bug, fixes it and rebuilds the project, hosts it and pushes code to deployed branch *

4Hrs Later:

Colleague: Dude did you see the Typos you made? Fix them!

Me: In my defence, I wrote this at 4am in the morning, did not sleep for 2 days.

Colleague: Don't Care, fix it.

Me: *Creates Hotfix Branch from Master*
* INSTALLS DEPENDANCIES AND FINDS OUT A NEW VERSION IS OUT AND UPDATES THAT AS WELL *
* Runs Project and finds out it's not the hosted version. *
* Merges Deployed Brunch to Hotfix Brunch and this happens *

Error Message: Unexpected token

620 Merge Conflicts

🤦🏽‍♂️🤦🏽‍♂️🤦🏽‍♂️

deploying success

A becomes B
B becomes C
C becomes A
D becomes B
E becomes A

Now add real hostnames... Make this list longer (roughly 15-18)

Add resource calculation, migration of VMs, organizing new hardware, removing and rebuilding hosts, etc.

I think my brain is permanently damaged and cannot be repaired.

Hardware migration finally over tomorrow.

I really won't miss the fuckton of Excel lists, constant speaking mistakes, having sore fingers from mutilating the desk calculator etc.

I'm too tired to be happy. But... It's over.

Who the fuck still hosts their shit on SourceForge? Pull the cobweb outta your ass and move to a git-based hoster!

Just finished setting up PiHole on my RaspberryPi.... no more adblock extensions with shitty performance... no more custom hosts files... and network level adblocking for all devices...
FUCK YEAH

oh, and I added so many lists that it now blocks about 350k domains (ads and malware)

Today was a good day.. time to hibernate...

So now Microsoft is suddenly deciding devices that "weren't" compatible are now perfectly compatible with Windows 11, and they're rolling this out in bunches at a time.

I still get "This device can not support Windows 11" but my coworkers are starting to see "Upgrade NOW!" and it's honestly gotten a bit sour seeing as I may be next. They're bypassing those who're editing the registry to stop this, too.

If I have to start diving into the deep ends of Windows and find out what IP Windows gets it's updates just to slap it into my HOSTS file, we're already in the apocalypse.

This upgrade is not bad for common people, but upon seeing that the Start menu GUI and taskbar got butchered horribly (I place my taskbar on top of the screen, Windows 11 doesn't allow for that) I myself absolutely want as much distance between me and that shit as possible.

In college, I've been hearing my fellow classmates having issues with Windows 11 left and right, including with how hard it is to get another browser to even work, to the Windows Store not even downloading Microsoft's own apps, to endless update loops, to the infamous "Update of Death"

Keep in mind, they got computers with better specs than mine, and they're having a worse experience. A lot of them just got refunds to the very last issue I just mentioned, all within August, day of purchase to day of return.

Microsoft, I am begging you for mercy, I'm so close to just getting up, finding out where you are, and blocking you from my network at all network and device levels.

Client contacts our company that his site is down, we do some investigating and the only way we can access the site is on a mobile phone. From the office computers the site never loads and times out. Since we don't host the site and I've never logged into it before I don't have a lot of details so I suggest they contact whoever hosts their site. This is where things get weird.

Client tells me that the site is hosted on someone's home server. I tell him that this is quite strange in 2018 and rather unlikely and ask if he was ever given access to the site to log in or if he has access to his domain registration, GoDaddy.

He says he doesn't understand any of this and would rather I just contact his current developer and figure it out with him. We agree that he needs to get access to his site so we are going to migrate it once I get access to it.

I email his current developer letting him know the client has put me in contact with him to troubleshoot the issues with the site. I ask him some standard questions like: where is the site hosted? Can you access it from a computer? Do you have some security measures in place to block certain IP ranges? Can you give me from access to get the files? Will you send me a backup of the site for me to load up on my server?

*2days pass*

Other dev: Tell me the account number and I'll transfer the domain.

Me: I'll have to get back to you on that once I talk to the client and set up his GoDaddy account since we believe the business owner should own their domain, not their developers. In the meantime you didn't answer any of the questions I asked. Transferring the domain won't get the site on my server so I still need the files.

*3 days pass*

OD: You are trying the wrong domain. The correct domain is [redacted].com I'll have my daughter send you the files when she gets in town. We will transfer the domain to you, the client will forget to pay and the site will go down and it'll be your fault.

Me: I appreciate your advice, but the client will own their domain. I'm trying to get the site online and you have no answered any of my questions. It's been a week now and you have not transferred the domain, you have not provided a copy of the site, you have not told me where the site is hosted. The client and I are both getting impatient at this point when will we receive a backup of the site and the transfer of the domain?

OD: Go fuck yourself, tell the client they can sue me.

If the client is that terrible, wouldn't you want to hand them off to anyone willing to take them? I have never understood why developers and agencies try to hold clients hostage by keeping their domain or website and refusing access. From what I can tell this is a freelance developer without a real company so a legal battle likely isn't going to go well since the domain is worthless to him as the copyright to the name is owned by the client. This isn't the first time we've had to help clients through this sort of thing.

I'm reading (deciphering) the clients notes for modifications to their app and explaining to my PM what they want. At one point, he stopped me and said "How the fuck are you doing that? I don't understand how you can make those connections. Brilliant." 😂

VsCode.

I have been on a journey with editors, all the way back to using edit.exe in Windows 95, to notepad, MS FrontPage, Adobe Dreamweaver, PHPDesigner, vim, nano, then out to Eclipse, Atom, Brackets, notepad++, back to Atom, then VsCode.

And by far, vsCode has given me the most productivity and customisation of them all to not care about what project I open, what language it's written in, or what frameworks are working behind it. I can switch with workspaces and everything is setup to go, yes it's a pain in the ass to setup, but it's a ducking dream to just open and jump in.

Now being able to use VsCode for Salesforce has dropped any requirement for me to keep eclipse around.

Hell yes! Anyone else at CodeMash???

When you're the only one in the office that codes in C++ and you get this email -- legacy project code here we come.

I get more notice of stackoverflow being down from devRant than stackoverflow itself 😄

open hosts file:
151.101.1.69 devrant.io
(Stackoverflow)

Working on a legacy app and couldn't find in the DB, fields for description, status, title, and assigned user.

I found them.

They were in the fields: User1, User2, User3, and User4.

How the hell does that happen?

Regression Testing is important

PM on the phone with a client: "Your email is down? Who hosts it? You know, it would be a company like MailChimp."

What office shenanigans do you guys do?

Anyone know of any hosts NOT running on amazon/silicon valley/microsoft cloud?

I'm specifically looking for a host thats setup for or works well with python.

I'm about done with censorship and noplatforming. As a moderate that for a very long time was left of center, these practices are never justified.

Work in the morning and here we are devRant, we have to quit doing this to ourselves. We need to take a break. I'm sorry, but you have consumed my life. The chuckles, feed refreshes, and +1s will be but treasured moments I have with you. Wait.. Who am I kidding? I need you! Don't leave, I'll stay with you forever.

I installed an ad blocker, less than three months ago, on my phone.

Experience has been great, but then I decided to check how many hosts it has blocked.

More than 100,000 queries blocked. All ads.

Seriously, what the hell? Why so many ads on the internet?

About slightly more than a year ago I started volunteering at the local general students committee. They desperately searched for someone playing the role of both political head of division as well as the system administrator, for around half a year before I took the job.

When I started the data center was mostly abandoned with most of the computational power and resources just laying around unused. They already ran some kvm-hosts with around 6 virtual machines, including a cloud service, internally used shared storage, a user directory and also 10 workstations and a WiFi-Network. Everything except one virtual machine ran on GNU/Linux-systems and was built on open source technology. The administration was done through shared passwords, bash-scripts and instructions in an extensive MediaWiki instance.

My introduction into this whole eco-system was basically this:
"Ever did something with linux before? Here you have the logins - have fun. Oh, and please don't break stuff. Thank you!"

Since I had only managed a small personal server before and learned stuff about networking, it-sec and administration only from courses in university I quickly shaped a small team eager to build great things which would bring in the knowledge necessary to create something awesome. We had a lot of fun diving into modern technologies, discussing the future of this infrastructure and simply try out and fail hard while implementing those ideas.

Today, a year and a half later, we look at around 40 virtual machines spiced with a lot of magic. We host several internal and external services like cloud, chat, ticket-system, websites, blog, notepad, DNS, DHCP, VPN, firewall, confluence, freifunk (free network mesh), ubuntu mirror etc. Everything is managed through a central puppet-configuration infrastructure. Changes in configuration are deployed in minutes across all servers. We utilize docker for application deployment and gitlab for code management. We provide incremental, distributed backups, a central database and a distributed network across the campus. We created a desktop workstation environment based on Ubuntu Server for deployment on bare-metal machines through the foreman project. Almost everything free and open source.

The whole system now is easily configurable, allows updating, maintenance and deployment of old and new services. We reached our main goal for this year which was the creation of a documented environment which is maintainable by one administrator.

Although we did this in our free-time without any payment it was a great year with a lot of experience which pays off now.

Lesson Learned: Don't ever be so ambitious that you are no longer realistic about your abilities. I remember when I started out, I would give unbelievably short TTC estimates for medium/hard tasks that would undoubtedly take some time.

Tried working with ear plugs instead of music last week. I think I might be ditching music 😏

Question

What server monitoring do you use, both for statistics and security?

--------------------
tl;dr ends here

Ideally I would like to have one clean dashboard that shows me all the nodes I have, proxmox already offers a great range of stats - but it is a page per container etc. so not ideal, I thought of having datadoghq, but their per host pricing is huge, since I have more than 5 hosts to track.

The worst infinite loop of all.

while(hasPoopOnTP( )){
if(goodEnough( )){
break; //it's never good enough
}
ass.wipe( );
}

Brain power has been depleted after a long bug fix. I'm useless for the rest of the day.

The "sys admin" is upgrading my PC to Windows 10. He says "It's incontestable and must be done."

😃🔫

!rant
How to self host a website?
Seriously, through many guides out there, I was never been able to see my site (hosted on a raspberrypi with nginx) outside the local network. I always tried to link my router to no-ip without success outside my localhost, the port 80 is already open for the raspberrypi. I live in Italy, can it be that the local ISPs obstacle the creation of such homemade website hosts?

I hate only a handful of things in this world. Including: stepping in water with socks on, when the toilet paper rips, and business people.

I hope devRant doesn't ever get trends like imgur, tumbler, and all the other platforms that I hate 😅

Hey @dfox and @trogus, I finally listened to your podthing today, and it was great. Andy Hunt is such an entertaining speaker and you both kept up well as hosts. I'm loving the quick fire questions; I feel like you can learn a lot about a person by how they answer those! Looking forward to S01E02.

So at our company, we use Google Sheets to for to coordinate everything, from designs to bug reporting to localization decisions, etc... Except for roadmaps, we use Trello for that. I found this very unintuitive and disorganized. Google Sheets GUI, as you all know, was not tailored for development project coordination. It is a spreadsheet creation tool. Pages of document are loosely connected to each other and you often have to keep a link to each of them because each Google Sheets document is isolated from each other by design. Not to mention the constant requests for permission for each document, wasting everybody's time.

I brought up the suggestion to the CEO that we should migrate everything to GitHub because everybody already needed a Github account to pull the latest version of our codebase even if they're not developers themselves. Gihub interface is easier to navigate, there's an Issues tab for bug report, a Wiki tab for designs and a Projects tab for roadmaps, eliminating the need for a separate Trello account. All tabs are organized within each project. This is how I've seen people coordinated with each other on open-source projects, it's a proven, battle-tested model of coordination between different roles in a software project.

The CEO shot down the proposal immediately, reason cited: The design team is not familiar with using the Github website because they've never thought of Github as a website for any role other than developers.

Fast-forward to a recent meeting where the person operating the computer connected to the big TV is struggling to scroll down a 600+ row long spreadsheet trying to find one of the open bugs. At that point, the CEO asked if there's anyway to hide resolved bugs. I immediately brought up Github and received support from our tester (vocal support anyway, other devs might have felt the same but were afraid to speak up). As you all know, Github by default only shows open issues by default, reducing the clutter that would be generated by past closed issues. This is the most obvious solution to the CEO's problem. But this CEO still stubbornly rejected the proposal.

2 lessons to take away from this story:

- Developer seems to be the only role in a development team that is willing to learn new tools for their work. Everybody else just tries to stretch the limit of the tools they already knew even if it meant fitting a square peg into a round hole. Well, I can't speak for testers, out of 2 testers I interacted with, one I never asked her opinion about Github, and the other one was the guy mentioned above. But I do know a pixel artist in the same company having a similar condition. She tries to make pixel arts using Photoshop. Didn't get to talk to her about this because we're not on the same project, but if we were, I'd suggest her use Aseprite, or (at least Pixelorama if the company doesn't want to spend for Aseprite's price tag) for the purpose of drawing pixel arts. Not sure how willing she would be at learning new tools, though.

- Github and other git hosts have a bit of a branding problem. Their names - Github, BitBucket, GitLab, etc... - are evocative of a tool exclusively used by developers, yet their websites have these features that are supposed to be used by different roles other than developers. Issues tabs are used by testers as well as developers. Wiki tabs are used by designers alongside developers. Projects and Insights tabs are used by project managers/product owners. Discussion tabs are used by every roles. Artists can even submit new assets through Pull Requests tabs if the Art Directors know how to use the site interface (Art Directors' job is literally just code review, but for artistic assets). These websites are more than just git hosts. They are straight-up Jira replacement with git hosting as a bonus feature. How can we get that through the head of non-developers so that we don't have to keep 4+ accounts for different websites for the same project?

I get some error when deleting an azure service so I put a support ticket asking for help. Just as I am about to close my computer for the day I receive an email saying:

"Product team will disable the account xxxxx from backend".

The xxxxx is our subscription number. The subscription that hosts not only that service but also production servers and databases, storage accounts containing backups, etc.

I replied to the email so hopefully disaster is avoided otherwise tomorrow wont be a happy day.

So been working with Linux for almost 10 years now, so am not new with this. But yesterday, a friend had difficulties accessing Wikipedia and their sister sites so I tried to help him out, you know, the usual way. Ping, Direct IP, DNS, and proxies/VPN, checking his /etc/hosts, but to no avail. Decided to download TeamViewer and install it so that I can help him out remotely. Went afk for 30min for dinner and when I came back, TeamViewer installation .Deb installer literally uninstalled every single software from my Kubuntu machine, from Spotify and slowly even my file manager and terminal was uninstalled. When it was over, even my grub was uninstalled.

Had anyone faced the same issue before?

Boss of the company I'm working in flew in from Morroco to Paris to discuss what to do about GDPR (yeah today). One of the sysadmin was fired last month and the other barely knows anything. Since I work on system administration as an intern I was expecting some serious work. The meeting with the tech team went on for two hours (which I didn't attend). At the end of it, I went to the only guy in the office who speaks English and asked him, "Hey, so what are we doing about GDPR?".
He replies, "Well, the boss just decided that we're not going to tell the auditors about our offices in two other countries (which is outside Europe and hosts most of the servers)".

Old unused military satellite to make international calls free. Local tv station to leak episodes. 4500 hosts zombie net with autoreplicant bots that scans for vulnerability to populate the net to do distributed denial of service attacks. Jumper on the neighborhood cabin to redirect the school's call for being absent, an older friend pretended to be my father.

😹 thanks @dfox

I'm a fullstack engineer, this period there is literally nothing to do, we are a 1000+ employees company.
I got so bored I toke over the database of our production server two times in a week, exploiting dumb vulnerabilities I discovered out of boredom, of course I reported everything.

The funny thing is that they just don't care, no one took action or is willing to fix it and they actually insulted me because I set a query in sleep for 8 minutes exploiting one of the vulnerabilities.

I work for a great company that hosts (in this very server) most italian citizens informations C: free to take for everyone c:

New twist on an old favorite.

Background:
- TeamA provides a service internal to the company.
- That service is made accessible to a cloud environment, also has a requirement to be made available to machines on the local network so you can develop against it.
- Company is too cheap/stupid to get a s2s vpn to their cloud provider.
- Company also only hosts production in the cloud, so all other dev is done locally, or on production non-similar infra, local dev is podman.
- They accomplish service connectivity by use of an inordinately complicated edge gateway/router/firewall/message translator/ouija board/julienne fry maker, also controlled by said service team.

Scenario:
Me: "Hey, we're cool with signing requests using an x509 cert. That said, doing so requires different code than connecting to an unsecured endpoint. Please make this service accessible to developer machines and lower environments on the internal network so we can, you know, develop."
TeamA: "The service should be accessible to [cloud ip range]"
Me: "Yes, that's a production range. We need to be able to test the signing code without testing in production"
TeamA: "Can you mock the data?"
Me: "The code we are testing is relating to auth, not business logic"
TeamA: "What are you trying to do?"
Me: "We are trying to test the code that uses the x509 you provide to connect to the service"
TeamA: "Can you deploy to the cloud"
Me: "Again, no, the cloud is only production per policy, all lower environments are in the local data center"
TeamA: "can you try connecting to the gateway?"
Me: "Yes, we have, it's not accessible, it only has public DNS, and only allows [cloud ip range]"
TeamA: "it work when we try it"
Me: "Can you please supply repro steps so we can adjust our process"
TeamA: "Yes, log into the gateway and try issuing the call from there"
Me: (╯°□°)╯︵ ┻━┻

tl;dr: Works on my server

Our support department got this the other day. We host their email and only provide support for that lol

p.s. thanks @nblackburn for catching me forgetting to attach my image 😅

Reading through old post-it notes and found a TODO that says "fix code" with no indication of a project it refers to lol

Our "Sys admin" knows nothing. 9/10 I do his job for him because he either doesn't know how or doesn't want to learn. I write all of the scripts HE should be writing. He manages Linux servers but doesn't know how to navigate the command line (even on windows) without using a 1. 2. 3. guide to what he needs done. Am I crazy or is the "Sys Admin" title giving him too much credit?

Client: Can you have a look at this website template for me?
Me: Sure, what's the address?
Client: You'll need to modify your hosts file to see it...
Me: 😡😷

Good Morning Devs. Funny thing... Why was I dreaming about subnetting 😂. I literally remember in the dream about telling someone to count zeros. I woke up like 🤔🤔. Zeros...zeros. Was I just explaining to someone how to figure the total IP addresses and Hosts....🤭🤦‍♂️🤦‍♂️

Ya feel me?

I hate when meeting hosts ask who joined after every beep when the meeting just started on the phone. Just wait 2-3 minutes then ask who is on the line.

Estimating time before consulting the dev on the task he/she will be working on is like pouring the milk in before the cereal. CRINGE.

Coworker#1: Our client's website is broken, there are 504 errors everywhere, and their customers aren't able to register accounts.
Coworker#2: Our machine that hosts everything won't start up.

How is your Friday going?

//rant

So i ordered myself a web server and am trying to get access to phpmyadmin.
I got generated username and password for the phpmyadmin login.
So i created mysql databases and database users, outside the interface, but that's fucking it, i need to create tables as well, can't do that without the interface, cuz NO ACCESS!

Fucking piece of shit service provider, they had one thing to do and they can't even fucking do it right. How dare they call themselves web hosts at all...

It's probably a badly configured config file but i can't access the file myself to start sorting this shit out, so i got to wait at least 12 hours till work hours to be able to contact with them and sort this shit out.

"When an engineer builds a building, it's very well built, but it's so ugly that the people tear it down. When an architect builds a building, it's very beautiful, but it falls down" - difference between systems engineer and systems architect

You must combine both, but the latter (beauty) is less important.

These fucking bugs 😭

Just logged into clients hosting account with host gator. I'm greeted with masses of adverts and up sells.

Few mins later I login to clients go daddy account. Yet more adverts and overly invasive up sells.

I hate bulk cheap hosts like this :/

Cannot wait to logout.

Small chaotic startup that never grew up (15 years atm).
Hosts/maintains a number of apps/sites for various customers.

At some point, someone decides that a CMS would be usefull to maintain the content across all products. Forgoing all sense, reason and the very notion of "additional maintenance and dev" it is decided that one should be built in-house.

Fast forward a number of years.

Ops performs routine maintenance on prod-servers. A java-patch accidently knocks out one of the pillars a 3rd party lib the CMS uses for storing images. CMS basically burst in to flames causing a.... significant incident.

Enter yours truly to fix the mess.
Spend a few days replacing the affected 3rd party lib. Run tests on CMS in test and staging environments. Apply java-patch. All seems fine.

When speaking to frontenders and app-devs, a significant hurdle present itself:
All test/staging instances of all websites/apps/etc ALL USE PRODUCTION CMS. Hardcoded. No way around.

There is -no- way to properly test and verify the functionality of any changes made to the home-brewed CMS.
My patch did indeed work in the end.

But did the company learn anything? Did they listen to my reasoning, pleading or even anguished screams for sanity?

No.

Torn between Down voting reposts and letting them slide because OP is new 🤔

Fuck who ever put the `hosts` file in that path WHICH IS IMPOSSIBLE TO REMEMBER!

and then fuck who put the httpd-vhosts.conf in a totally different path that is impossible to remember!

Version 0.0.3.4 seems promising

Recruiters with no clue (a recurring theme it seems).

Got an e-mail this morning via LinkedIn proposing a position in Zurich (Switzerland) doing customization of an application according to business needs, configuration of interfaces, gathering of requirements, 2nd level support etc.

DID YOU READ ANYTHING MY LINKEDIN SAYS? I work in storage support (doing mostly troubleshooting of FC/iSCSI issues between storage and hosts), and live in Amsterdam, and while I would like to pivot to a SW dev job, this seems to be way over my grade of experience, plus I have no desire to go living in Switzerland.

Arsehole!

Don't use keywords as variable names, you're going to have a bad time.

Service status pages that poorly reflect actual service status are so annoying. Ex. GitHub is having a lot of latency issues with processing updates and like 5 people in my office noticed it while their status page still says everything is fine.

This isn't to explicitly call out GitHub since many service status pages behave like this, but it definitely shows a general weakness in these health checks. I've seen similar issues with tons of services, web hosts, etc. Monitoring is definitely hard but will hopefully keep getting better.

I know it's not our nature, but go outside and enjoy the beautiful day today! (as long as its nice where you are).

When Tracy puts another goddamn sandwich in the printer

A casualty of Windows Update wrecking my machine was the hosts file with the dev domains I added to make my life easier.

It's trivial to add them back as I encounter them, but that's just another little waste of time that Microsoft would be billed for if the world functioned like it should.

The installer is bouncing between 6 seconds and 10 seconds. It's been 20 and I'm starting to think neither is right.

Today, I used NAT in a way I never before thought of as a solution to a problem - Exposing a service listening only on an internal address, to the internet, to a selected list of hosts.

For some reason, it made me a little sick in my mouth. It feels... Ugly, to solve this as such. But I was only copying this solution from a different server of the same client, so no reason to implement it differently and thus complicate future administration...

Is it normal to use DNAT like this?

Phone interview tomorrow! Hopefully things go well 😅

Every programmer should read:

My SO always wants to do fun stuff but I just want to sit in my room and program by myself sometimes...

How I imagine hell