sehrope

18 ms·

61.
by sehrope 13y ago
Yes they're a really useful feature. You can use them to allow both downloads and uploads. The latter is particularly cool for creating scalable webapps that involve users uploading large content. Rather than having them tie up your
62.
by sehrope 13y ago
> Question about the underlying SaaS product. I'm not understanding how a database client on the cloud can connect to a database server on my own machine? OP and founder of JackDB[1] ( the SaaS product referred to ) here. The majori
63.
by sehrope 13y ago
OP here. Really cool to see people enjoying the write up. It started off as a list of misc AWS topics that I found myself repeatedly explaining to people. It seemed like a good idea to write them down. I'm planning on listing out more
64.
AWS Tips, Tricks, and Techniques(launchbylunch.com)
295 points by sehrope 13y ago|56 comments
65.
by sehrope 13y ago
We use out product, JackDB[1], everyday both for analysis and to develop the product itself further. It's a database client entirely in your web browser and we use it to run queries to analyze stats, research database features, and jus
66.
by sehrope 13y ago
I may be in the minority, but I rather like the rigidity of a fixed schema. Yes, it's a bit more "painful" for initial setup ( you have to actually create the tables ) and yes, it's a bit more work during migrations ( yo
67.
by sehrope 13y ago
If the author is reading please post the EXPLAIN ANALYZE results for these queries. I'd much prefer the raw text psql output to the GUI representation in pgAdmin. More importantly it has the actual numbers for the intermediate steps to
68.
by sehrope 13y ago
> Oh yes, being somewhere other than your house has very clear upsides, but an appropriate location is not always forthcoming. It's not too hard to find one. Unless you're completely anti-social you probably have at least one
69.
by sehrope 13y ago
> Depending on your threat model, they don't even have to be outside the house. If petty burglary is what you are defending against, a disk in a quiet corner of your basement is probably plenty. Being outside of the house protects i
70.
by sehrope 13y ago
Being robbed sucks but when it comes to digital possessions there's no reason it needs to suck this much. > I didn’t really trust file encryption because I thought I might lose files because of it and therefore I never enabled Mac O
71.
My blog's tech stack: Pelican powered, Dokku deployed(launchbylunch.com)
1 points by sehrope 13y ago|0 comments
72.
by sehrope 13y ago
> Use a password archive (e.g. KeePassX) encrypted with one really, REALLY good password you'll memorize (plus a keyfile, should you feel paranoid). One more vote from me for KeepassX with both a long, unique passphrase and a keyfil
73.
by sehrope 13y ago
> and in some cases...externals that were made internal! :) I remember reading about this a while back[1] ( fun read! ). Have you guys noticed a big difference in life expectancy of the repurposed external drives or do they generally mat
74.
Encrypting Docker containers on a Virtual Server(launchbylunch.com)
2 points by sehrope 13y ago|0 comments
75.
by sehrope 13y ago
You're absolutely right about being able to MITM the HTTP piece and replace the content. That's true for any mixed content site. In this case though I disagree that having the HTTPS link to S3 is entirely useless. It's used s
76.
by sehrope 13y ago
The same reason you'd use it for a non-static site; to ensure that visitors to your site are getting your actual site content and not something else( i.e. avoid a MITM ). If you had a purely informational site and it listed phone numbe
77.
by sehrope 13y ago
Nice write up. We have a very similar setup ( Jekyll generated static site + S3 ) for our website[1] and reading through this is kind of nostalgic of getting it set up ( and a friendly reminder to go back and gzip some of CSS files ). The b
78.
by sehrope 13y ago
I'm not sure about Cabot ( first time seeing it is today ) but I've been designing a system that supports this type of monitoring. Shoot me an email ( contact in profile ) if you'd like to be contacted once it's up.
79.
by sehrope 13y ago
I think the GP is referring to web hooks[1]. When an alert gets triggered, rather than sending out an email/sms/smoke-signal you'd do an HTTP POST to a URL. The receiver of the HTTP POST could then add there own custom alerti
80.
by sehrope 13y ago
Not if you respect the TTL on the DNS records. For example for drive.google.com it's 300 seconds: $ dig drive.google.com ; <<>> DiG 9.8.3-P1 <<>> drive.google.com ;; global options: +cmd ;
81.
by sehrope 13y ago
I'm not saying that all licenses have this property. I'm saying it may be possible to create a custom one that does. For example a "standard" software license (proprietary ... not OSS) does not include the right to sub-l
82.
by sehrope 13y ago
> This shell company can not own nothing, it have to own the patent(s) in question. Does it? IANAL but I believe it's possible to license the rights associated with a patent without transferring complete ownership. The shell organi
83.
by sehrope 13y ago
If you have a fixed workload ( i.e. X servers always online ) then take a look at reserved instances. The break even point is about 6 months for the light instances and a bit more for the medium ones. I don't recommend the heavy ones a
84.
Publish your Pelican blog on Github pages via Travis-CI(blog.mathieu-leplatre.info)
1 points by sehrope 13y ago|0 comments
85.
by sehrope 13y ago
This is pretty cool. It's kind of funny how after all the admin interfaces and fancy forms, people always end up wanting to just write their own custom SQL. On the security front, the SQL blacklist definitely has to go. It's a fal
86.
by sehrope 13y ago
I've been trying out Docker recently but haven't tried running persistent services in it yet (only long running programs like apps). From what I've gathered so far, Docker allows you to specify volumes (via -v /host&#x2
87.
How to set up a private PaaS with Dokku on DigitalOcean(launchbylunch.com)
1 points by sehrope 13y ago|0 comments
88.
by sehrope 13y ago
Yes I noticed this as well from (the lack of) my own comment activity. I don't comment that often but I had written something yesterday that has disappeared. On a more general note if anybody has backups and they aren't regularl
89.
by sehrope 13y ago
BofA has a feature called ShopSafe that lets you generate virtual credit card numbers tied to your main card. They got it when they acquired MBNA/FIA Card Services. According to the Wikipedia article[1] a couple of other banks have off
90.
by sehrope 13y ago
Another option is to monitor your accounts yourself. Most credit card companies allow you to setup email/sms alerts for charges (or charge attempts). This gives you an immediate notification if unauthorized charges appear rather then l

More ›