4 ms·

>"using a JavaScript tool to build a site then having a GitHub Action push the files up to an S3 bucket with a cloudfront distribution in front of it." Why wou

by FpUser 5y ago

>"using a JavaScript tool to build a site then having a GitHub Action push the files up to an S3 bucket with a cloudfront distribution in front of it." Why would I want to introduce so many a dependencies when I can have zero? Yes in this case old tech is superior. Sure if (and that is a big if) your blog is super popular you might want to "cloudflare" but that's about it.

jameshart 5y ago
As Douglas Adams once said: “ I've come up with a set of rules that describe our reactions to technologies: 1. Anything that is in the world when you’re born is normal and ordinary and is just a natural part of the way the world works. 2. Anything that's invented between when you’re fifteen and thirty-five is new and exciting and revolutionary and you can probably get a career in it. 3. Anything invented after you're thirty-five is against the natural order of things.” Only when applied to Linux, this amounts to: Anything that was copied from UNIX is normal and ordinary and just part of the way the world works. Anything that is included in a standard Ubuntu distribution is exciting and revolutionary. Anything else is a ‘dependency’.
- jonahx 5y ago
  > Anything that was copied from UNIX is normal and ordinary and just part of the way the world works. > Anything that is included in a standard Ubuntu distribution is exciting and revolutionary. > Anything else is a ‘dependency’. The picture you're painting of pure back-in-my-day-sonny! bias, while not totally wrong, is also not quite accurate. These different technologies have different installed bases, different probabilities of security vulns, different probabilities of still being maintained in 10 years, etc.
  - jameshart 5y ago
    Yes! The probability of a security vulnerability in the Apache install whose httpd.conf you had to write, running on a VPS you have to patch yourself, versus the probability of a security vulnerability in S3/CloudFront are indeed vastly different. These are the kinds of trade offs we make.
    - FpUser 5y ago
      1) I do not use Apache. 2) As for probability - I had zero security incidents on my personal website / blog in 15 years. And I did not spend my life patching things. Just few minutes every once in a while. Keep this FUD for uninformed.
      - dgb23 5y ago
        Even if you did use Apache it’s FUD. It’s a very robust, well understood and documented technology.
  - jen20 5y ago
    If there is a security vulnerability in S3 or CloudFront, it will be patched pretty damn quickly. If there is a security vulnerability in a static site generator, that is unlikely to present to the internet, as the generator is not running on a public-facing server. Hugo is now 8 years old, Jekyll is now 13 years old. Both are actively maintained, and given the inability of most people to string together a shell script that is both portable and correct, are likely better solutions than said shell script.
- FpUser 5y ago
  >"As Douglas Adams once said:" Sure doc. You are free to follow and waste your time and money. I do not get a kick out of using half of the world resources for writing glorified "hello world". And let all those intermediaries control what you do in a process. Adams Douglas was magnificent. Your attempt to use his words in this particular context however is anything but...

by FpUser 5y ago

jameshart 5y ago

As Douglas Adams once said: “ I've come up with a set of rules that describe our reactions to technologies: 1. Anything that is in the world when you’re born is normal and ordinary and is just a natural part of the way the world works. 2. Anything that's invented between when you’re fifteen and thirty-five is new and exciting and revolutionary and you can probably get a career in it. 3. Anything invented after you're thirty-five is against the natural order of things.” Only when applied to Linux, this amounts to: Anything that was copied from UNIX is normal and ordinary and just part of the way the world works. Anything that is included in a standard Ubuntu distribution is exciting and revolutionary. Anything else is a ‘dependency’.

jonahx 5y ago
> Anything that was copied from UNIX is normal and ordinary and just part of the way the world works. > Anything that is included in a standard Ubuntu distribution is exciting and revolutionary. > Anything else is a ‘dependency’. The picture you're painting of pure back-in-my-day-sonny! bias, while not totally wrong, is also not quite accurate. These different technologies have different installed bases, different probabilities of security vulns, different probabilities of still being maintained in 10 years, etc.
- jameshart 5y ago
  Yes! The probability of a security vulnerability in the Apache install whose httpd.conf you had to write, running on a VPS you have to patch yourself, versus the probability of a security vulnerability in S3/CloudFront are indeed vastly different. These are the kinds of trade offs we make.
  - FpUser 5y ago
    1) I do not use Apache. 2) As for probability - I had zero security incidents on my personal website / blog in 15 years. And I did not spend my life patching things. Just few minutes every once in a while. Keep this FUD for uninformed.
    - dgb23 5y ago
      Even if you did use Apache it’s FUD. It’s a very robust, well understood and documented technology.
- jen20 5y ago
  If there is a security vulnerability in S3 or CloudFront, it will be patched pretty damn quickly. If there is a security vulnerability in a static site generator, that is unlikely to present to the internet, as the generator is not running on a public-facing server. Hugo is now 8 years old, Jekyll is now 13 years old. Both are actively maintained, and given the inability of most people to string together a shell script that is both portable and correct, are likely better solutions than said shell script.
FpUser 5y ago
>"As Douglas Adams once said:" Sure doc. You are free to follow and waste your time and money. I do not get a kick out of using half of the world resources for writing glorified "hello world". And let all those intermediaries control what you do in a process. Adams Douglas was magnificent. Your attempt to use his words in this particular context however is anything but...