My advice for running a public-facing API, coming from 11 years of operating the Pushover (@pushover) API:
- Host the API on its own hostname
- Don't be too liberal in what you accept
- Avoid OAuth if you can
- Log a unique id with every request
- Be descriptive in your error responses
- Use prefixed tokens
- Stay on top of failures
Did you ever waste a whole day tearing apart hardware and rewriting your drivers to figure out why your firmware was getting corrupted when transferring it to your hardware device, only to discover it was a broken compiler on the host generating garbage and everything was transferring that garbage just fine all along...
Whenever I break down a shipping box and have to stab all these sealed bags of air, I feel like Joe Pesci in Casino where he stabs that guy in the throat with a pen
I discovered by accident that Thunderbolt 3 magically works in OpenBSD on my X1 Nano.
I plugged in a Thunderbolt NVMe enclosure to check whether it would fall back to USB attachment, but ppb, pci, and nvme devices attached. I verified with an Apple Thunderbolt 2 ethernet device (through a Thunderbolt 2 to 3 adapter) and it also attached as bge0 as expected, and detached properly when unplugging.
My previous tests with Thunderbolt on other OpenBSD laptops only worked when the devices were plugged in at boot time, since the firmware had to setup the device. I'm not sure whether something changed in OpenBSD or the EFI firmware that makes hotplugging work now without a Thunderbolt NHI driver, but I'll take it.
The best kind of drivers are the ones that don't have to be written :)
joshua stein
via
@jcs@jcs.org
-
Aug 06 2023 21:36:40
