moduspwnens14

8 ms·

31.
by moduspwnens14 8y ago
It may just require an extra step. My understanding of TOTP is that it's the key data (typically a string represented by a QR code) and a time offset that is used to generate the OTP. If the only thing stored on disk is the code encryp
32.
by moduspwnens14 8y ago
Using the secure enclave, you (as a developer) can have it generate a private key you'll never be able to get and then ask it to sign / encrypt (symmetrically) arbitrary things for you. https://developer.apple.com/
33.
by moduspwnens14 9y ago
Cognito doesn't address the same use case. You're seeing Cognito User Pool pricing. Cognito User Pools is basically having AWS host your user / password / details database for an app you're building. It takes care o
34.
by moduspwnens14 9y ago
Additional correction: S3 is consistent after new object puts only if you haven't already asked for that object. Otherwise you may get a stale "no object" response.
35.
by moduspwnens14 9y ago
That may change. S3, for example, is a building block for applications and abstracts away servers completely from the developer. As do the following: * SQS * SNS * DynamoDB * Step Functions * Lambda * API Gateway * CloudWatch Logs * Cognito
36.
by moduspwnens14 9y ago
You can run Python WSGI apps (including Django) using Zappa [1] with a serverless infrastructure. Do you tell Heroku how many servers you need and how big they should be? Are you in charge of making sure you have the right number, or that t
37.
by moduspwnens14 9y ago
Oh man I was looking for something like this. I have a personal project I wanted to make actually look professional but as a freelancer it's tough to justify big bucks for something like that. But this might work!
38.
by moduspwnens14 9y ago
AWS has their own v4 signature method that I always thought was neat. Key benefits: * Secret not included in request * Verifies integrity of the message (since its contents are signed) * Protection against replay attacks It's probably
39.
by moduspwnens14 9y ago
Envoy has a very neat way of solving some interesting modern problems and I'm interested to see what this space looks like in the upcoming few years.
40.
by moduspwnens14 9y ago
I wish I had a more insightful comment, but I'll just say this: I love posts like this where someone applies a theoretical concept in a fun and interesting (even if not practical) way.
41.
by moduspwnens14 9y ago
I just tried to do this last week. The issue I ran into is you can't move dollars between exchanges easily, so to rebalance, you've got to switch to something else. So you're profiting from volatility on one side and then bet
42.
by moduspwnens14 9y ago
It looks really great. The only concern I have (relative to other serverless features) is that it does have a top-end architectural limit (256 ACUs). It's probably not worth fretting over, but it is worth mentioning when comparing to D
43.
by moduspwnens14 9y ago
I used them for a few years without issue. They were always quick to respond to my e-mails. Let's Encrypt and AWS cover my cert needs now.
44.
by moduspwnens14 9y ago
It's supposed to support FIDO U2F devices, but I'm unable to log into my Google or Github accounts like I do in Chrome. I'm not sure if it's on their end or Firefox's. I get that it's an edge case, though. Has
45.
by moduspwnens14 9y ago
It also only provides that read-after-write consistency for new files if you didn't already ask for that new file before writing it. Otherwise you could get a stale "no object" response.
46.
by moduspwnens14 9y ago
I'm glad they're doing this--but I'd also like to see a little granularity. If I'm a big-wig politician, I'd want it as-is, but as a normal techie, I'd like support in the native iOS apps and the ability to con
47.
by moduspwnens14 9y ago
A little odd to see AWS and Microsoft partnering together on something like this, but it's good to see regardless.
48.
by moduspwnens14 9y ago
Personally, I've had the opposite experience. You can set billing alerts that will e-mail you when you cross whatever thresholds you set. On the billing page, it has a line item for each thing that costs money. It's not particular
49.
by moduspwnens14 9y ago
For enabling HTTPS, you can put CloudFront in front of it. That'll make it faster, too, and cost almost nothing. For my static sites, I'm usually doing some form of fancy JavaScript npm / gulp / bower, but then ultimatel
50.
by moduspwnens14 9y ago
> The cloud service didn't take a life on its own - in the very early days there was just EC2 and S3, nothing else Just a minor point of correction: Actually SQS was first. https://aws.amazon.com/blogs/aws/
51.
by moduspwnens14 9y ago
It might already be priced just above what competitors are perceived to be willing to pay. For all we know, its actual value to Google is much higher than what they're paying, but with nobody else able or willing to pay what it's
52.
by moduspwnens14 9y ago
The whole point of a business is to make money, and it does that through sales. Someone seeing themselves as having a business worth pitching to investors for significant chunks of money, yet without a focus on the most critical validating
53.
by moduspwnens14 9y ago
Yep. Honestly I probably would have assumed it's not a protocol issue if both HTTP and HTTPS downloads from S3 behaved the same way. Both of those protocols are on TCP, though, so that would have thrown me off!
54.
by moduspwnens14 9y ago
I don't know if you'd be interested, but I used to have exactly that kind of behavior--almost reflexively checking my phone at the first sense of downtime. I got an Apple Watch when it first came out and it has helped curb that be
55.
by moduspwnens14 9y ago
It's got to be that they're not multi-tenant. I'm with you--I would only bother building for SaaS if the cost of a minimal new customer is insignificant. Then while your competitors are saying, "Give us your phone number
56.
by moduspwnens14 9y ago
Fair enough. You could certainly still do it with Mechanical Turk then, although the delay in response might not meet the requester's unstated requirements.
57.
by moduspwnens14 9y ago
Amazon Rekognition can almost do it. It doesn't seem to detect text, specifically, but it'd be able to detect whether or not a bird is in the image, or similar. That's not what the project is asking for, but it's very cl
58.
by moduspwnens14 9y ago
I don't think so, but I do remember when unattached EIPs were free before they became not-free.
59.
by moduspwnens14 9y ago
I didn't argue they're likely to boost their salaries, or that they receive self gratification from doing so, so I'm not sure how to answer your question.
60.
by moduspwnens14 9y ago
It (by design) includes only people who self-select to share their compensation details. I would expect that to skew high, even if 100% truthful.

More ›