nijave

26 ms·

451.
by nijave 10mo ago
Super charged search on page would also be nice Agents (like a research agent) could also be interesting
452.
by nijave 11mo ago
It's a proxy for amount. More data = more risk Data tends to be valued based on volume/amount; enterprises have more data and with it comes more risk. As a result, they vet vendors more rigorously to control the risk. Vetting vend
453.
by nijave 11mo ago
You can use keyring/keychain with credential_process although it's only a minor shift in security from "being able to read from the fs" to "being able to execute a binary"
454.
by nijave 11mo ago
I kind of like it but I always found it kind of clunky how it's ultimately just generating JSON/HCL anyway. For instance, you can't data source then use code to transform and send it to a resource since it has to transpile fi
455.
by nijave 11mo ago
It helps with memory but they're harder to search/index
456.
by nijave 11mo ago
That may be true for enterprise customers but there's still a big market of midsize companies without such stringent vendor requirements.
457.
by nijave 11mo ago
We offer a notetaker specifically for 1-1s https://www.15five.com/blog/ai-meeting-assistant Also shout-out to Attendee which is OSS for building meeting bots https://github.com/attendee-labs/attend
458.
by nijave 11mo ago
It is. Just wanted to point out these flows are also possible on CI. In my other comment, I think it's more fair to differentiate long lived vs short lived secrets
459.
by nijave 11mo ago
CircleCI and I believe GHA support injecting signed JWTs you can use to bootstrap identity be it an IAM role or some other platform where you can trust an OIDC issuer
460.
by nijave 11mo ago
While good in theory, in practice secrets are used to validate those privileges have been assigned. Even in schemes like metadata servers, you still use a secret. Pedantically I'd say maybe it's more fair to say they shouldn'
461.
by nijave 11mo ago
In Ohio (USA) primary/secondary education funding hasn't outpaced inflation based on this data from 2009-2024 https://education.ohio.gov/Topics/Finance-and-Funding/Overvi...
462.
by nijave 11mo ago
The shrinkflation of higher ed?
463.
by nijave 11mo ago
Shout-out to ProtonDB for the fix when things don't work out of the box
464.
by nijave 11mo ago
Strong vibe coding feel coming from the project but code seemed decent based on cursory look
465.
by nijave 11mo ago
I've gotten a few refunds from them before. Not always and usually they come with stipulations to mitigate the risk of the mistake happening again
466.
by nijave 11mo ago
I've always been under the impression billing is async and you really need it to be synchronous unless cost caps work as a soft limit. You can transfer from S3 on a single instance usually as fast as the instances NIC--100Gbps+ You&#x2
467.
by nijave 11mo ago
Bots can also cause a DoS/DDoS. We use the feature to restrict certain AI scraper tools by user agent that adversly impact performance (they have a tendency to hammer "export all the data" endpoints much more than regular use
468.
by nijave 11mo ago
We had better uptime with AWS WAF in us-east-1 than we've had in the last 1.5 years of Cloudflare. I do like the flat cost of Cloudflare and feature set better but they have quite a few outages compared to other large vendors--especial
469.
by nijave 11mo ago
Quite surprising a single bad config file brought down their entire global network across multiple products
470.
by nijave 11mo ago
I think that really depends on feature usage. You can use Argo/Cloudflare tunnels to route to private backends that are normally unroutable. In such a setup, it might be quite difficult to remove Cloudflare since then you have no edge
471.
by nijave 11mo ago
For our SaaS, the uptime probably isn't much different but the cost definitely is. If any of your stack has usage based billing, things can get very expensive quickly.
472.
by nijave 11mo ago
I see something similar with AI generated code where it tries much too hard to handle all the exceptions and ends up swallowing or obfuscating them instead of making things more reliable. Claude seems particularly bad unless you prompt it t
473.
by nijave 11mo ago
Threat actors (DDoS) and AI scraping already threw a wrench in decentralization. It's become quite difficult to host anything even marginally popular without robust infrastructure that can eat a lot of traffic
474.
by nijave 11mo ago
>What happens if, say, someone else adds that same CNAME to their own network? Cloudflare network carries identity with traffic. If someone else adds the CNAME, they need an identity in the Zero Trust account that controls the tunnel. If
475.
by nijave 11mo ago
True, those are also a foot gun--especially for AWS services where you'd want to, instead, switch to VPC Endpoints above a trivial amount of traffic (I think the endpoint interface is like $2/mon so has a small cost)
476.
by nijave 11mo ago
We didn't benchmark--we used APM data in Datadog to compare setups before and after migration I believe the article is talking about I/O aggregate operations vs I/O average per second. I'm talking strictly about the &quo
477.
by nijave 1y ago
RDS PG stripes multiple gp3 volumes so that's why RDS throughput is higher than gp3 I think 80k IOPs on gp3 is a newer release so presumably AWS hasn't updated RDS from the old max of 64k. iirc it took a while before gp3 and io2 w
478.
by nijave 1y ago
RDS stripes multiple gp3 volumes. Docs are saying 4Gi/s per instance is the max for gp3 if I'm looking at the right table
479.
by nijave 1y ago
We've seen better results and lower costs in a 1 writer, 1-2 reader setup on Aurora PG 14. The main advantages are 1) you don't re-pay for storage for each instance--you pay for cluster storage instead of per-instance storage &amp
480.
by nijave 1y ago
fwiw we haven't seen issues manually doing manual failovers for maintenance using the same/similar procedure described in the article. I imagine there is something more nuanced here and it's hard to draw too many conclusions

More ›