ManWith2Plans

I work with AWS a lot every day and lead a team responsible for building workloads on AWS for some customers with very high security requirements. This tool terrifies me.

The sheer amount of potential for misconfiguration of resources that this tool can exploit with no effort whatsoever is absolutely insane. I feel like every AWS environment I've ever seen is suddenly at risk of some angry employee compromising everything very very quickly.

I'm betting over at AWS they're almost as terrified by this as I am.

We use pyinvoke to orchestrate terraform invocations and feed the outputs to chalice configuration files. We then intercept the chalice deployed resources and feed them back into dependent terraform modules as inputs. It's been incredibly smooth for us and we're able to get deterministic environments that are easy to debug, modify and deploy. It takes a little imperative glue to manage dependencies, but the bulk of the configuration is declaratively defined and I've been incredibly happy with this workflow.

Haven't used this yet, but this looks like a really good user experience from their demo video. Haven't used competitors like Alteryx myself, but just having this integrate so well into the AWS ecosystem makes this seem really useful.

This is what I experienced this time too. Still impacts development significantly if you use a tool like terraform.

Maybe a JCR implementation like Apache Jackrabbit Oak would be a good tool for this data. See here for sql semantics: https://jackrabbit.apache.org/oak/docs/query/grammar-sql2.ht...

From the documentation:

> Nami is a decentralized binary package manager, she allows software authors to publish their software anywhere, without having to request a merge from a software center for each update.

If you're trying to install a decentralized binary package manager which doesn't require maintainers to merge anything, you're presumably planning on taking far greater risks than curling this installer.

One wonders what has led society to a place where this is so sadly unsurprising. Why should employees ever feel the need to deliver results quickly, even at the expense of safety? How have we managed to flood engineering with incompetent people to the extent that they manage to infiltrate such critical systems without thinking twice.

We've clearly screwed up somewhere in setting incentives for these companies...

Dunno if he ever really had a chance. That said, he's got as good a chance as he ever did. Currently polling 2-4%. That said, he just raised $1 million in the last week, and $1.5 million the last week of Q3. He also just started rolling out TV ads in Iowa and New Hampshire for the first time.

If he stands a chance, we'll probably know in the next couple of weeks.