Agree, the npm ecosystem is increasingly becoming an security liability.
HN user
dserodio
[ my public key: https://keybase.io/dserodio; my proof: https://keybase.io/dserodio/sigs/LFVTSLmlmEeReYHHkTQBsFti3gIBp2J107kvA4jWNJw ]
I tried signing up with my email (Gmail), but the message with the sign-in code never arrived (it's not in the spam folder either). Maybe your email provider has hit its sending quota?
It's a best practice to have a Deployment run multiple Pods in separate AZs to increase availability
Absolutely! I've been complaining about this exact problem for a while: stop pushing AI features no one asked for and improve the reliability.
I just hoped they would fix the mess that are GitHub notifications: https://github.com/orgs/community/discussions/15747
But "Doctor" means you have an actual PhD, a doctorate. That's a worthy title, IMHO
After Hashicorp's recent license change shenanigans I doubt any new OSS project will adopt HCL
Many companies already pay for Google Workspace so Google Drive is included.
And for personal use, it's much cheaper than Dropbox.
I pay R$6.99/month for 100GB of Google storage (most of which is used by Google Photos), while Dropbox costs R$10/month for 50GB of storage and doesn't integrate very well with Google Photos.
Not sure what he means, but some banking apps in Brazil have a "geofencing" feature like "only allow transactions when phone is inside this area". Presumably you set your home and work addresses as trusted.
But most Google Workspace customers are companies, not individuals. It'd be hard to convince the company to pay for Mimestream, so its customers are people. And there are too many "personal productivity" tools competing for my money, Mimestream is very low on the priorities list.
ECS is so much simpler to use and understand than Kubernetes, even on EKS.
But as for CodeDeploy... IMHO the only reason to use it is "I don't want to deal with another vendor" due to procurement/compliance hell in large companies.
Never user Docker for Windows, but Docker for Mac has not been great lately either.
Granted, macOS changes a lot between each release but our company is paying for Docker Desktop licenses and the experience has really been disappointing.
Depending on your needs, GitHub Packages is an option
Yes, it's happening to us. And on top of that, since Business is only offered via yearly invoice, we'll also have to pay 1 year upfront instead of monthly via credit card as we've been doing.
But to make us feel better, they're offering a 30% discount (for this initial year) to the affected companies.
This is insane, I don't expect we'll renew out subscription next year. Fool me once, shame on me. Fool me twice...
Even if it's already patched, the fact that it was exploitable for years make it very much relevant. And of course, those with older computers that can't be updated to the latest macOS are still vulnerable.
Yes, please. It's awful when a one-line PR changes the whole file to fix formatting
uBlock prevents then from being downloaded too
The domain does not look okay. There are no A or CNAME records, only NS (AWS) and MX (Google) records
I was so pissed at LastPass when the Firefox extension stopped working when Firefox Quantum was released, they didn't have an ETA for fixing it, their support is completely crap. I gave up no LastPass with 9 months left on my subscription and moved to 1Password. Also, LastPass UX is still awful to this day (I have to use it for work). Migrating from LastPass to 1Password was like migrating from Linux to Mac. It's more expensive, but it's sooooo much better and polished.
AWS did something similar in the new EC2 console. Too much whitespace, too little information. I'm glad they iterated and improved information density.
HCL, which is what GitHub Actions used when it first launched
Tried it in Firefox with just 3 people in the room and the UI (mute/hangout/video off) UI is like 0.2 FPS
I'd love to read a condensed version
Thanks for replying to feedback Seth. Stuff like this - following the Google Maps API massive pricing increase, the G Suite pricing increase - is what makes me wary about building stuff on GCP: I'm afraid that Google will increase prices for stuff I rely on. AWS has made users expect pricing for cloud services to only go down.
That's what SLOs are for
CloudFlare's cfssl: http://blog.cloudflare.com/introducing-cfssl
They don't "must", but it would be very nice of them.
Thanks, I'll give it a try. That's still a mess compared to npm, which is a single tool you can use for app and libs, in constrast with easy_install/setup.py/pip/pipenv/poetry/...
Specifying dependencies when you're writing a library is still a mess, because pipenv isn't recommended for libraries. npm works the same way for both apps and libraries.
Great explanation, thanks
Do you have the link to that guide by any chance? I haven't found a guide that's practical enough for my needs yet.