HN user

aluskuiuc

53 karma
Posts0
Comments25
View on HN
No posts found.
The Password Game 3 years ago

I may have had that one; there was southeast asian writing on a sign and it was Malaysia.

I have a usb-c monitor connection, and of course the usb-c charger - so any third device requires unplugging one of those. In my case that's a usb-c yubikey. That dongle gives me an hdmi port I can't use (HDMI on the 13" pro can't drive a 34" monitor) and a usb-a port I can't use (I was good and got usb-c perpherals!).

It's decidedly inferior in its lack of hubs. If you don't have enough USB-C ports, you're SOL (and given I have a 2-port macbook pro, I feel this acutely).

Also, if the stock doesn't perform well, Amazon will grant you more to keep you in the expected band; but it won't take any away if you are making "more than you should".

Amazon has a target compensation for you for your first 4 years, with a cash signing bonus making up for the lack of stock in the first two years, so it evens out.

Of course the 5/15/40/40 model only applies to your signing; all further yearly stock grants are over the next 2 years from grant time.

I'm surprised the author didn't consider using DynamoDB Streams to replicate to a PGSQL database for the relational queries while keeping the primary key-value lookups on DDB.

There used to be - unsure if now - some very specific teams (like 2-3 in the whole company) that had to drive in for very specific issues. Basically if you need to get inside the cage in the datacenter where there are credit card numbers.

Amazon generally has a pretty strong remote work culture - I can even get my ipad onto the VPN and SSH around to get my work done.

I was an intern in the WinFS team in 2004 - seriously nobody knew what it actually was even inside the team.

The best I could say was that it was a way for lots of applications writing their own complex datastores (like outlook) to share an OS-level platform so that it could be exposed to other applications with a unified API. It was way more a developer tool than a user-facing feature, but that's not how it was marketed.

One of the easiest mitigations to this is to not even create credentials that have access to do anything that could run up a bill in any short amount of time. Between the Console (access protected with an MFA token) and IAM roles, neither you or your application ought to ever have to handle raw AWS secrets.

That said; the AWS APIs offer a lot of tools to hand keys to clients with extremely limited scope, both in API access and time boundaries. For example; a game could be given access keys that allow it to write a high score only to a particular row of a DynamoDB table, the one corresponding to that user.

Direct device->AWS use can make a lot of scaling issues very simple without needing a middleman service on every request. However this does not obviate the need for a federation brokering-type service that auths the device, calls AWS to get a time-limited token with permissions scoped just so, and hands that back to the client.

AWS provides Amazon/Google/FB web identity federation for just this use case: http://aws.amazon.com/iam/details/manage-federation/.

If you get a notification that your instance is going to get terminated - then yes, you can stop/start, but then you will lose ephemeral disks (but not EBS volumes). If you get a notification that your instance is just going to get rebooted, then nothing's going to get lost.

As I said above - the terminology can get hairy pretty fast. It's valuable to take stock of what you really need persisted, and what use can be made of 'scratch disks'. Local ephemerals are fast and cheap (included in the price of any instance). They come with the operational overhead of needing to rsync data off of them yourself if you want to retire that instance however.

Amazon Kinesis 13 years ago

It's not exactly the first time, but close - the Simple Workflow Service has client helper libraries for both Java and Ruby.