vegardx

21 ms·

211.
by vegardx 7y ago
It depends on what you mean by reasonable. In some places anything that faster than the non-existing 4G-connection they were promised 5 years ago will be reasonable. These high frequency links might not be suited for bad weather or flock of
212.
by vegardx 7y ago
Wet suits and life jackets are much better options for kids than arm bands. Heck, in many places arm bands are banned completely. I think cost is one of the few reason why arm bands are still used, and perhaps that they are marginally bette
213.
by vegardx 7y ago
Doing this completely undetected is actually harder than you think. Modern browsers check Certificate Transparency lists, and if the certificate is not present in at least two lists then they are simply rejected. In addition to this you hav
214.
by vegardx 7y ago
Smart way to do it, but it will set you back $0.5/month. You can likely do it cheaper with Lambda and API Gateway, but you'll have to invent the secret sauce yourself. I'm always a little surprised when there are short coming
215.
by vegardx 7y ago
Then use a different method of validation, like DNS?
216.
by vegardx 7y ago
Norway, but I would imagine it's the same or same-ish solution given that banks in Scandinavia and Baltics operate more or less the same way.
217.
by vegardx 7y ago
It never ceases to amaze me what the state of online banking is around the world. Here we have something called BankID which comes in two flavors, one that is a physical token that generates TOPT used to log in, either in a combination with
218.
by vegardx 7y ago
Now you just need to configure a Lambda to take care of cache invalidation on CloudFront, based on s3:PutObject events. CloudFront also supports headers like "cache-control: public, max-age=3600, s-maxage=86400", so you can have q
219.
by vegardx 7y ago
Does it really make sense to "minify" everything when you have gzip enabled?
220.
by vegardx 7y ago
I guess you could call all optional technology for dead then, but it's super useful for things like ssh fingerprints (SSHFP), and I imagine they're also useful for things like public keys for IPSec (IPSECKEY) and other types of ce
221.
by vegardx 7y ago
There's no alternative when you have multiple SANs, all of them have to be validated. But since they are free and easy to automate you can just issue a certificate for every domain.
222.
by vegardx 7y ago
I believe clients that don't support name constraints extension won't pass certificate chain verification should the root, intermediate or certificate itself have a name constraint defined.
223.
by vegardx 7y ago
You can always just pipe things over ssh. And now that ssm supports local port forwarding you can easily use netcat to send files back and forth.
224.
by vegardx 7y ago
It has to use an existing system account, yes. You do lose a lot of auditing abilities this way, since you cannot capture the content. For me this is more about establishing a secure way to grant people access to instances, without somethin
225.
by vegardx 7y ago
No, but it requires you to either have some kind of peering, Client VPN Endpoint or a bastion host. I prefer a VPN or bastion host, since you add another layer of authentication in between. With Client VPN Endpoint you can also limit networ
226.
by vegardx 7y ago
You can also use ec2-instance-connect[0] to enable users to generate ephemeral keys that are valid for a few minutes, authenticated with IAM. The benefit is that it's all native after you've pushed your keys using either aws-cli o
227.
by vegardx 7y ago
Things might have changed, but back in the days they usually just flared off hydrogen sulfide because it was hard to deal with and not very profitable. You more or less had to force the oil companies to collect it. So yes - often a byproduc
228.
by vegardx 7y ago
I can't speak for how they do it in Finland, but at least in Norway you can take the paternity leave over a period of 3 years. I think most people take it out in full, but a lot of self-employed people do that in order to keep things r
229.
by vegardx 7y ago
For things like this you can abuse organization accounts. They take a few seconds to bootstrap and now you have a completely independent resource limit for that specific service.
230.
by vegardx 7y ago
I think you're confusing what the default VPC actually is. Most people would consider it anti-pattern. Back in the days the concept of a VPC didn't exist in AWS, so when it was introduced they also introduced the concept of a defa
231.
by vegardx 7y ago
They're looking for a few very specific toys, so that won't really be a problem.
232.
by vegardx 7y ago
I did search and rescue training with dogs in the army and we always had to start things off with a toy to get the dogs "into it", even in "sharp" situations. But once they were started everything was like a game for the
233.
by vegardx 7y ago
Seems more comparable to parameter store, which comes in both a paid and "free" version. Secrets Manager does have some of the same capabilities, but it also extends it to things like short lived credentials.
234.
by vegardx 7y ago
I'd love to see some actual statistics on this. This assumes that people knowingly do something dangerous and are choosing to ignore it because they think someone can just come and save them. I would argue that this is unlikely, unprep
235.
by vegardx 7y ago
I can relate to feeling like it's a creative gift, but the problem is often that it can be hard to communicate your ideas to others. They are often very complex (from the outside point of view) and can be hard to follow (since they are
236.
by vegardx 7y ago
Some people argue that what we're today are calling ADHD should be referred to as emotional impulsiveness. The argument is that lack of emotional control causes all kinds of symptoms, like inattentiveness or irritability (shocker!). Dr
237.
by vegardx 7y ago
I never claimed it was. I said that you feel exhausted after using it.
238.
by vegardx 7y ago
Or you know - don't use TLS at all since all your efforts will be moot anyway. You could always make a self-signed certificate and print the fingerprint on the device itself, but that costs money, for very little gain.
239.
by vegardx 7y ago
It would surprise me if someone was able to sleep while influenced by stimulants. However, being on stimulants is very exhaustive for your body, and it temporarily stops the racing thoughts many people struggle with, even some time after ta
240.
by vegardx 7y ago
Phones are still able to output analog (and digital!) audio using a dongle. Ducking behind accessibility because you don't want to use a dongle seems a little disingenuous.

More ›