andrewguenther

10 ms·

61.
by andrewguenther 5y ago
So rather than fighting mass data harvesting, Mozilla just wants a piece of the pie and is trying to claim the moral high ground? Mozilla's positioning as a privacy advocate while consistently pushing projects that are antithetical to
62.
by andrewguenther 5y ago
> Our research team believes, given the data found on the host (including credentials and data involving internal endpoints), that an attacker could abuse this vulnerability to bypass tenant boundaries, giving them privileged access to a
63.
by andrewguenther 5y ago
https://twitter.com/colmmacc/status/1481682859324760070 More detail from Colm here.
64.
by andrewguenther 5y ago
Even worse, they got AccessDenied when making that request and then extrapolated that they have access to $everything
65.
by andrewguenther 5y ago
Yeah, I was pretty surprised to read this complaint, but I would say iGraph is actually the weakest of the bunch. Logging and metrics tools at Amazon leave a lot to be desired. They get the job done, but definitely not best in class.
66.
by andrewguenther 5y ago
> Internal tooling is pretty bad (frameworks, pipelines, ....) and the documentation is non-existent, and when it exists , is not very helpful. Surprised to read this. The tooling is what I miss most from Amazon, but I was in AWS the who
67.
by andrewguenther 5y ago
Organization child accounts are not rootless, they're just seeded with a random password
68.
by andrewguenther 5y ago
MFA needs to be forced on by default for all new accounts created with the UI. It is utterly irresponsible for AWS to not do this. People always counter with "you should know better!" But AWS markets itself to college kids. People
69.
by andrewguenther 5y ago
Absolutely! Anecdotally, out of all the teams I interacted with in seven years at AWS across multiple arms of the company, I saw only a handful of bad teams. But like online reviews, the unhappy people are typically the loudest. I'm ha
70.
by andrewguenther 5y ago
Region outages happen, which is why the guidance is to build in multiple regions, but even Amazon sometimes doesn't take their own advice. Sometimes the reason is good, sometimes it isn't.
71.
by andrewguenther 5y ago
Because there's a VP approval step for updating the status page and no repercussions for VPs who don't approve updates in a timely manner. Updating the status page is fully automated on both sides of VP approval. If the status pag
72.
by andrewguenther 5y ago
They aren't meant to be, but shitty teams are shitty. You can also create a COE and assign it to another team. When I was at AWS, I had a few COEs assigned to me by disgruntled teams just trying to make me suffer and I told them to p
73.
by andrewguenther 5y ago
> Yes, VP approval is needed to make any updates on the status dashboard. But that's not as hard as it may seem. AWS executives are extremely operation-obsessed, and when there is an outage of any size are engaged with their service
74.
by andrewguenther 5y ago
There's tons. Google domains, name.com, almost anyone but GoDaddy
75.
by andrewguenther 5y ago
If only it were once a year. Every quarter I get a whole thread spread out over a couple weeks. "Did you see our last email?" "There's still time to save Wikipedia!"
76.
by andrewguenther 5y ago
I get a ton of value out of Wikipedia and I donate annually. Fun fact: If you unsubscribe from the donation email list, you are re-subscribed the next time you donate. It's scummy and infuriating and I hate to think that this kind of c
77.
by andrewguenther 5y ago
I mean, free for as long as the cellular infrastructure exists is still pretty damn good
78.
by andrewguenther 5y ago
You can fix the bug but emit a metric on the original code path to estimate the impact after the fix is made. It wouldn't tell you who sent what to who, but would give you a better idea of impact for an incident report or postmortem.
79.
by andrewguenther 5y ago
> This bug was extraordinarily rare, and because we have no metrics/remote log collection, there was an initial period where we had to spend time adding logging and collecting user-submitted logs to try to track it down. Without tel
80.
by andrewguenther 5y ago
Thanks for pointing this out, I've gone ahead and removed mentions of Cloudflare's pricing from my comment since I can't find an authoritative source for their egress pricing in their docs. The point general point still stand
81.
by andrewguenther 5y ago
The original version of my post called out that you cannot actually see Cloudflare's pricing without an account, that link was the best I could find. Funny to be calling out their competitors for pricing when they won't even publi
82.
by andrewguenther 5y ago
AWS Egress - $0.09/GB Azure Egress - $0.0875/GB GCP Egress - $0.11/GB Alibaba Egress - $0.123 Interesting that no mention is made of the other cloud providers pricing here when AWS isn't even the most expensive egress...
83.
by andrewguenther 5y ago
If AWS is deprecating something, then it's likely that literally no one was using it and the few that might have been were given complimentary consulting to move them off of it.
84.
by andrewguenther 5y ago
Opera Mini used a resource compression proxy. That's not what this patent is for.
85.
by andrewguenther 5y ago
Yep, this is exactly what I was getting at. Shadow is one of many examples of application streaming services which aren't limited to the browser and offer similar hardware (or even flexible hardware) at a lower price point.
86.
by andrewguenther 5y ago
Very different projects than what Blimp was. Blimp was integrated into Chromium's rendering pipeline itself to stream draw commands directly to the client browser.
87.
by andrewguenther 5y ago
I agree they would pay more, but I'm still skeptical of $30-50. As I mentioned in a comment below, why limit it to the browser? If you've got all these resources just offer a full VDI which more typically prices in this ballpark.
88.
by andrewguenther 5y ago
I'm not skeptical at all the people would pay for this. I worked on a cloud browser for seven years, there's a bunch of different market needs for this stuff. But $30-50 feels really high. We got feedback from enterprise customers
89.
by andrewguenther 5y ago
I actually worked on browser isolation products for seven years. No need to be rude. EDIT: Just because the attitude of this comment really grinds my gears: Here's my patent for network-based content rendering which was submitted back
90.
by andrewguenther 5y ago
They actually tried! There was a Chromium project called Blimp for a while which supported browser streaming, but it got shut down after less than a year in development. Had some major dev power behind it too, not sure what happened.

More ›