zimbatm

43 ms·

451.
by zimbatm 9y ago
Agreed. One strategy that I have been using quite successfully is to: * create a new AWS account * setup IAM and AWS Org * add 2nd factor on the root account, put the Gemalto in a safe Then add the "legacy" account to the org and
452.
by zimbatm 9y ago
Route53 API rate limits are per account and very low. It sucks not being able to fix the production A record because somebody did a lot of changes on the staging zone.
453.
by zimbatm 9y ago
It's good to see an article talking about this. A lot of organizations could benefit from using more than one account to enforce security (IAM is hard!) and separation of concerns. It doesn't really explain it but to do this, the
454.
by zimbatm 9y ago
Here is how to do it with zero downtime: Each customer has a completely separate data set, except maybe for login information. This makes it a good candidate for sharding. Sharding is also a good idea because eventually one big ticket sale
455.
by zimbatm 9y ago
It reminds me of the list of names that all SaaS companies should reserve project I did a while ago. Maybe I should add "malware" on it :) https://zimbatm.github.io/hostnames-and-usernames-to-reserve...
456.
by zimbatm 9y ago
Or better yet, forward the errors to https://sentry.io/ and let them deal with error grouping.
457.
by zimbatm 9y ago
That's the idea. Use bazel to describe and build the projects incrementally. The more languages are supported the less project-specific build systems have to be learned. Use Nix and nixpkgs to pull external dependencies (and bazel).
458.
by zimbatm 9y ago
It's good to understand the different price dynamics and useful to have some rules of thumbs to avoid long cost calculations. For most startups I would actually advise to start with Heroku, which is even more expensive than AWS (it is
459.
by zimbatm 9y ago
Is it still common to get 12% return on the market? My layman impression is that with ETFs, ~6% is the current average return.
460.
by zimbatm 9y ago
It's the same for weather apps. It would be cool to just get a notification when about to head out: "hey, you might want to take a scarf with you today, it's a bit chilly!"
461.
by zimbatm 9y ago
It seems to be consistent with the explanation that the SMS messaging system has been re-purposed. Old system: send updates via SMS, post replies onto the wall. New system: send 2-factor authentication codes. Now mix both and you get what w
462.
by zimbatm 9y ago
How is this different than Google Analytics? Both companies are tracking users and Google is doing this even more than Facebook.
463.
by zimbatm 9y ago
My only issue is HTTP/2 client and servers only implementing TLS. This makes it unnecessarily hard to reverse-proxy HTTP/2 on a loopback connection where it's reasonable to assume being safe from MITM.
464.
by zimbatm 9y ago
the benchmarks are not very convincing since both the etcd and Go versions have been changed. Go 1.9 has received another round of optimizations that probably also help with performance.
465.
by zimbatm 9y ago
What I would really like to see happening in Oil shell is a way to run a strict subset of the bash language. Ideally with a tool to convert existing scripts in that subset.
466.
by zimbatm 9y ago
Most of the comments here focus on Protobuf but the other half of gRPC is HTTP/2, and HTTP/2 is very complex. Good luck implementing a half-decent HTTP/2 client or server library if your language doesn't support it alrea
467.
by zimbatm 9y ago
It's because they haven't figured out how to keep the same level of experience when scaling past web+worker processes. As soon as you want to split your repo into multiple services the thing falls apart. They should add automatic
468.
by zimbatm 9y ago
Not that simple, there are multiple historically recorded close calls. https://en.wikipedia.org/wiki/List_of_nuclear_close_calls
469.
by zimbatm 9y ago
Now all we need if for websites to automatically hide the cookie warning header when DNT is set.
470.
by zimbatm 9y ago
Here are some more reasons to pick a technology: Familiarity, knowledge transfer is a big drive for technology adoption. The bad bit is when the decision maker leaves the team and the rest are unfamiliar with the tech. I think this applies
471.
by zimbatm 9y ago
Does it restore the passwordless login feature? :p
472.
by zimbatm 9y ago
"Just use a password manager" is actually a simplification for doing proper threat modelling because most people don't bother thinking about it. For each site you have to consider; what is the worst thing that could happen if
473.
by zimbatm 9y ago
Yes that's the only ones that I have found so far. Unfortunately they require virtualization to be enabled within the AWS or GCP VMs. Those have just started to appear and are only available on the most expensive instances.
474.
by zimbatm 9y ago
What I would really like is a Hackintosh VM that I can run in the cloud for the few times that I need test something on macOS. There are hosting companies out there but I'd rather spin up an EC2 instance or equivalent.
475.
by zimbatm 9y ago
Because Linux is a kernel? It's just one piece in an ecosystem. It would make more sense to ask why the Year of Gnome Desktop hasn't happened. And the answer is easy if you compare the budget that Apple or Microsoft has to create
476.
by zimbatm 9y ago
In the GitHub case the handles are public information. Anyone can go to https://github.com/<handle> to verify if it exists. So they trade off usability of a clear error message for no gain at all.
477.
by zimbatm 9y ago
All because IE6 wasn't supporting trailing commas at the time when JSON was written. Shortly after that we discovered that it was a bad idea to eval() JSON so the whole reason for browser compatibility became moot. But who knows, maybe
478.
by zimbatm 9y ago
It has all the important functions like left-pad.
479.
The Meson Build System(mesonbuild.com)
2 points by zimbatm 9y ago|0 comments
480.
by zimbatm 9y ago
That was before NLBs. But yeah, NLBs might be a good choice now.

More ›