Hacker News: sergsoares

New comment by sergsoares in "I got hacked: My Hetzner server started mining Monero"

sergsoares — Wed, 17 Dec 2025 22:56:04 +0000

Not expose the server IP is one practice (obfuscation) in a list of several options.

But that alone would not solve the problem being a RCE from HTTP, that is why edge proxy provider like Cloudflare[0] and Fastfy[1] proactivily added protections in his WAF products.

Even cloudflare had an outage trying to protect his customers[3].

- [0] https://blog.cloudflare.com/waf-rules-react-vulnerability/ - [1] https://www.fastly.com/blog/fastlys-proactive-protection-cri... - [2] https://blog.cloudflare.com/5-december-2025-outage/

New comment by sergsoares in "Apple has locked my Apple ID, and I have no recourse. A plea for help"

sergsoares — Sat, 13 Dec 2025 19:51:33 +0000

Same doubt here, a disaster even bigger (Maybe in Mac ?)

That is why I prefer OTP all the time, easier to backup and restore.

New comment by sergsoares in "Thoughts on Cloudflare"

sergsoares — Sun, 28 Sep 2025 11:40:35 +0000

Some Cloud functions like lambda support OCI container as a runtime target for example.

I understand that feeling but can be hard a provider that fill all that requirements without a expensive cost.

Integrate with the edge computing is part of the price you pay for all the conveniences like automatic builds, Cron and public reachable endpoints (and some of them almost free).

A minimal VPS with linux is always an alternative.

New comment by sergsoares in "Processes and Threads"

sergsoares — Thu, 25 Sep 2025 11:22:43 +0000

Really great post with that interactive examples and the example of mysql x postgrel too.

I would like read more about that topics with that level of detail.

New comment by sergsoares in "Podman Desktop celebrates 3M downloads"

sergsoares — Thu, 25 Sep 2025 02:56:52 +0000

Using podman for years for local containers development and the last months for hosting my personal services is good to see that.

Congrats to podman team.

New comment by sergsoares in "Building my childhood dream PC"

sergsoares — Fri, 12 Sep 2025 22:34:26 +0000

For me replicate an old P3 1000mhz that I study and played a lot of games.

New comment by sergsoares in "Building my childhood dream PC"

sergsoares — Fri, 12 Sep 2025 22:23:06 +0000

The attention and care to the details of that post are incredible.

New comment by sergsoares in "Rails on SQLite: new ways to cause outages"

sergsoares — Fri, 12 Sep 2025 01:02:14 +0000

Easy and useful, usually the basic is better.

I ever plan do it with sqlite, loading it at memory during app start and flush data to s3 during runtime but it create more corner cases and logic to handle.

New comment by sergsoares in "KDE launches its own distribution"

sergsoares — Thu, 11 Sep 2025 12:59:30 +0000

I understand that disks snapshots with ZFS for example can cover most part of the needed on recovery scenarios.

But immutable OS are helping in progress some sandbox tools and allowing new workflows to manage the OS (virtualized or not).

New comment by sergsoares in "Show HN: Lightweight tool for managing Linux virtual machines"

sergsoares — Sun, 07 Sep 2025 18:18:55 +0000

You can use a localhost Cockpit with SSH Port Forwarding.

> Configure Cockpit to listen only loopback/127.0.0.1[1]:

[Socket]

ListenStream= #This remove 0.0.0.0:9090 bind based on the docs

ListenStream=127.0.0.1:9090

> Execute in your machine a port forward with SSH[2]:

ssh -N -L 9090:127.0.0.1:9090 host@ip

> Then you can open localhost:9090 in your browser securely only using SSH (that is already part of your actual workflow).

[1]: https://cockpit-project.org/guide/latest/listen

[2]: https://coder.com/docs/code-server/guide#port-forwarding-via...