yeukhon

104 ms·

1. 961.▲
   by yeukhon 10y ago

   Netflix Engineering team amazes me a lot. They literally took all the available apis, and build their own platform despite some of the features are already in the AWS offerings. I suppose they did it mainly because the native service isn&#x
2. 962.▲
   by yeukhon 10y ago

   Which version?
3. 963.▲
   by yeukhon 10y ago

   I remember writing a dumb parser for robots.txt. I have to agree, robots.txt is simplistic but so non-standard. I wonder why search engines can't just say NO to this. Does search engines today still honor robots.txt? Here's my sha
4. 964.▲
   by yeukhon 10y ago

   I have to read it backward. Ansible is now part of RedHat. CentOS doesn't have Python 3, and some key Ansible developers have strong opinion on Ansible not supporting Python 3 in the near future. Am I reading it right?
5. 965.▲
   by yeukhon 10y ago

   Python 2 is not there. If you run on AWS, either have a task to download and install Python 2, or in your EC2's user data to install Python 2 (this is necessary for Ansible users).
6. 966.▲
   by yeukhon 10y ago

   I hope this isn't like The Social Network which is mixed with a lot of fictions.
7. 967.▲
   by yeukhon 10y ago

   I believe for AWS,. If attacker gains your key and generated a STS session key, it used to you can't revoke them (that is revoking me does not revoke the key I generate from STS)z i don't know if they fixed it or not, I did a test
8. 968.▲
   by yeukhon 10y ago

   Yes. AWS actually does scan on a regular basis. They have caught some before any harms done. I don't know how often though.
9. 969.▲
   by yeukhon 10y ago

   This is the one of the worst kind of business decision one can make. But I am not theirCTO and CEO. While not the same as Vagrant being replaced (and then revived because the alternate project was a burden), feels the same shitty decision I
10. 970.▲
    by yeukhon 10y ago

    > 8. Greater flexibility leads to greater attack surface I think this is critical. The fact that there aren't many battle-tested frameworks out there writing your own functions can introduce security bugs. But from my experience, mo
11. 971.▲
    by yeukhon 10y ago

    Yes, the strategy for big client is to lock them in for long engagement (like a 3-YR term). Throw in some nice support package, longer trial period, whatever. Since big customers often take months to fully use a product (6-12 months is very
12. 972.▲
    by yeukhon 10y ago

    Big clients tend to be very slow at signing contracts because their legals would examine every word and will keep asking you to revise the contract. Furtheremore, real big clients tend to be slow at adopting the techology they just bought,
13. 973.▲
    by yeukhon 10y ago

    He talks about his motivation in this speech: https://youtu.be/ChxeCKyafVU "How to Tell a Story", I recommend watch it.
14. 974.▲
    by yeukhon 10y ago

    I don't think Uber can go IPO any time soon. The financial of Uber is very bad. Bank is happy to manage the IPO, but the stock will probably be very unstable or fail to single digit if Uber continues to lose that much of money. If a co
15. 975.▲
    by yeukhon 10y ago

    I would ask whether the investigation will ever end or just die hoping the noise is gone.
16. 976.▲
    by yeukhon 10y ago

    I don't think there's a public dataset for this, but would be a fun project for someone to crawl and figure out a number. My best offer is here Yahoo. Just before and after the announcement of acquisition, there was a bleeding of
17. 977.▲
    by yeukhon 10y ago

    Chaos could be opportunity for some, indeed. But usually outsiders will be brought in to stabilize the situation (company surgical doctors) and there will be little room to grow except those remain absolute loyal to the real boss (in this c
18. 978.▲
    by yeukhon 10y ago

    I actually don't even know how to see replies on someone else's thread. The UI is quite confusing TBH. > A social network needs to be social, feel social, and make you feel like you have friends who want to listen to your drive
19. 979.▲
    by yeukhon 10y ago

    Anyone use AWS's CodeCommit as a mirror for your GitHub repository?
20. 980.▲
    by yeukhon 10y ago

    Okay, I was reading it as defending why container would solve what OpenStack was set out to solve, which is the proposition I read from the OP I was replying to. Of course, I would advise against running a private cloud unless there is a de
21. 981.▲
    by yeukhon 10y ago

    I'd add unicode to this. Now the only string type is unicode in Python 3. I think [1] and [2] are good places, not sure if there's an absolutely easy-to-navigate summary from 2-3. [1]: https://docs.python.org/3&#x2
22. 982.▲
    by yeukhon 10y ago

    > if I can build an app that runs "unmodified" on any OpenStack-based infrastructure, that has a possibility to save me potential time and money from having to port apps to/from/between AWS, Azure, Google Cloud, et al
23. 983.▲
    by yeukhon 10y ago

    OpenStack is a platform for creating an Infrastructure as a Service (IaaS). So it's running on some physical machines, and manages your physical machines to slice into VMs. There you get to manage / create networks, storage, etc.
24. 984.▲
    by yeukhon 10y ago

    Yeah, but that was supposed to be Redhat, since Redhat is the largest sponsor behind Openstack.
25. 985.▲
    by yeukhon 10y ago

    I second this many times. The APIs were so inconsistent. I had to go through many hooks just to get the data I wanted. Openstack is nice, but Openstack community tried to create an open AWS. The problem is, everything gets so modular and to
26. 986.▲
    by yeukhon 10y ago

    I agree and I am no saint either. My thought is don't let a bully win. Sure he may go home with an early retirement or just hide behind desk teaching who knows. But his reputation deserves to be punished. Perhaps no one would remember
27. 987.▲
    by yeukhon 10y ago

    I totally understand the institutional and establisment power in place and how many folks out there are on the same boat as this said JHU professor. But this is why we need to blow at every chance we have. We know how policy change takes ti
28. 988.▲
    by yeukhon 10y ago

    Whistleblower. Announce it annonymously, or just do it. Seriously, we can't get bullied like this. If we let this go, we will repeat the fraud research Harvard scientists did after getting paid by the sugar industry and hundreds of oth
29. 989.▲
    by yeukhon 10y ago

    Because, cynical as this may sound to some people, that's what government does, in the name of national security. The argument that we keep zero-days exploits secret is basically security by obfuscation. That will only last until anoth
30. 990.▲
    by yeukhon 10y ago

    Thank you!