krab

17 ms·

181.
by krab 4y ago
> Cedar has nothing to do with AWS except that it's open sourced by AWS It seems to me it's a tool made in AWS by some team close to AWS IAM. My original comment didn't relate that much to Cedar itself. Rather, I tried to
182.
by krab 4y ago
A lot of places in central/eastern Europe are more expensive than a city like Chicago. The example from Zillow in the sibling thread would be about 3x as expensive in Prague, CZ which has lower salaries in general.
183.
by krab 4y ago
Probably we're looking at the problem from a different point of view. Imagine I'm a new AWS customer that creates their account, starts an Elastic Beanstalk application and tries to automate deployment via CI. The access key will
184.
by krab 4y ago
It seems more akin to the IAM policy simulator to me. You need to know the specific action and context to play with the policy. In the real case I don't know what context the actions carry that I may use for filtering, I don't kno
185.
by krab 4y ago
Oh, thanks a lot!
186.
by krab 4y ago
Hmm, what I had in mind was rather a tool that would generate a new access key (or some other way to correlate the requests) and record and show me in real time what permissions I need and let me play with that and simulate what API calls w
187.
by krab 4y ago
This goes in the right direction. Still it's not 100% reliable (e.g. S3 isn't logged by default to cloudtrail, probably due to volume). Also, not really interactive. I'm talking mostly about ergonomics. Obviously we can solve
188.
by krab 4y ago
> mapping some of the apis to iam as its only 85% 1:1 Yeah. Try to create an Elastic beanstalk app with only EB permissions.
189.
by krab 4y ago
This doesn't cut it. That tool helps if your role/user has a lot of policies that might interact between each other. But you already need to know the exact "actions" and context. On the other hand, I have a tool that cal
190.
by krab 4y ago
For me personally, it would be much more useful if I could play with the policies interactively - issue requests with some tagging (a special access key maybe?) and see what permissions they need, what context they have and which of them ar
191.
by krab 4y ago
Why should the SDK be install-less? IMHO it's enough if the app makes it into the Windows store, Apple store and any Linux format.
192.
by krab 4y ago
It's still easier to bring a cryptography implementation to work there than doing this for all your code, all your libraries AND cryptography.
193.
by krab 4y ago
That's mostly Google's decision. :shrug: Anyway, I see a difference between hiring and laying off vs. not hiring in the first place with regard to disruption in worker's lives.
194.
by krab 4y ago
Hiring many people and firing them shortly after isn't very productive use of human minds. Those people were doing probably something more valuable instead.
195.
by krab 4y ago
These three things aren't mutually exclusive but they go against each other. For example paying people less might impact your ability to improve your money stream. Similarly having fewer people may lead to some missed opportunities.
196.
by krab 4y ago
> Genetic stuff always seemed not easily parallelizable Not really. Processing one sample may take a few hours but if you have hundreds or more samples, it's an obvious axis for independent parallelization. The cool kids use Nextflo
197.
by krab 4y ago
That's a different category of big data. I worked for a big pharma and they were building their big data department with Spark and friends. I was quite surprised that their biggest dataset had something like 200 GB. At the same time, t
198.
by krab 4y ago
If JavaScript is disabled, most of the offending cookies are not loaded. Session cookies are usually fine wrt GDPR.
199.
by krab 4y ago
This is in line with my experience of lower pay offers for embedded SW development compared to business applications.
200.
by krab 4y ago
What does it mean that it's an "Access-restricted-item"? For example TI-81 https://archive.org/details/ti81-calculator
201.
by krab 4y ago
Cloud-init as well. The CLI utility you can use is ssh-import-id. ssh-import-id gh:$USERNAME
202.
by krab 4y ago
Growing carrots in an arid area is wasteful, because you could grow them at a place where water is more abundant. Then, carrots can be transported and they don't need almost any water anymore. Doing the same with taxpayers would be pro
203.
by krab 4y ago
With IPv6, you can have all public IPs (the same as early days of IPv4). However, if you have apps that are tightly coupled and often with strict latency requirements such as Web <-> DB, then it's better to communicate only over
204.
by krab 4y ago
A great one! Better quality here: https://www.youtube.com/watch?v=xzS5xdSeS10
205.
by krab 4y ago
Not really. You actually may have other legal requirements to keep the data but you shouldn't use it for daily business because of GDPR. Imagine banks and long closed accounts. Moreover, technical backup solutions, where only a very li
206.
by krab 4y ago
In the examples, they show S- strings. If I understand it correctly, s"random_function(a)" does what you want. The question is whether you can rely on `a` that you reference being still named `a` in SQL.
207.
by krab 4y ago
Mind blown, thanks! Next time, I'll look for this option! I don't mind hotel check-ins but the car rental process has never, ever been pleasant for me.
208.
by krab 4y ago
They'll lobby for a ban of these chemicals, showing there's a safer alternative. That's a risk for the competitors and their customers.
209.
by krab 4y ago
I worked on a financial product in a startup. The billing and collection features were so closely tied to the product that it would be quite risky to outsource that when you're still trying to find out what your product is exactly. In
210.
by krab 4y ago
Moby is Docker.

More ›