athrun

AFAIK, most of AWS is built on top of the JVM, including massive services like S3 or DynamoDB.

Seems to be working well enough for them.

Typically, compliance requirements will drive you to implement private subnets.

Auditors will want to know which isolation mechanisms you have put in place, and private subnets should be part of your isolation strategies.

Other use-cases:

- Legacy (or third-party) apps whose security model assumes they are behind some sort of private firewall.

- Hybrid deployment where you need to bridge on-premises (or other clouds) address space(s) with your VPC.

> Or, to ask it another way - what would be the downside of all your resources being in 1 single-Subnet VPC, spread evenly across AZs?

Note that a subnet cannot spread across AZs. So, even if you only need/want public subnets, you will want to deploy at least 1 public subnet per AZ.

It's counter intuitive but attaching a VPC Lambda to a public VPC subnet will not give it access to the internet.

See: https://docs.aws.amazon.com/lambda/latest/dg/vpc.html#vpc-in...

Can't you simply decouple your lambda project into two different parts where you have public lambda(s) calling your private/VPC lambda function(s) when required?

Public Lambdas can invoke VPC Lambdas (AFAIK, the reverse is not possible without a VPC endpoint).

I think that was my point.

Services with "native" AWS APIs use IAM for granular access management. Other services can only support access restrictions using the network so that means VPC/Security Groups.

Difficult to know for sure, but it's probable that MongoDB made Amazon aware that they would introduce such a licensing change, in a bid to put pressure on AWS and get them to contract with MongoDB.

It didn't work.

> I'm not sure I fully grasp the problem (why doesn't DynamoDB need to be accessed from within a VPC?)

This is due to the fact that DynamoDB's query API is a standard AWS API which means granular internal/external access can be provided through IAM mechanisms (ie: roles, temporary tokens, federation, etc.).

On the contrary, to access RDS, Redshift or DocumentDB you would use standard ODBC/JDBC/Mongo facilities, which do not rely on IAM mechanisms, leaving VPC/Security Groups as the only isolation option.

Ah, got your point.

I'd even argue that as a CEO, he probably doesn't even interact with a laptop all that much at work as I imagine he relies heavily on a team of personal assistants.

In that context, he might be an avid user of the iPad. As the result, the iPad might be the perfect device for all sorts of high ranking tech executives. Turns out you and I are just not the target market :)

To some extent Android has won on mobile the same way Windows won on the desktop.

It's true but kind of irrelevant because this is not what Apple was ever after (otherwise they would have pursued a very different strategy, with 3rd party licensing, etc.).

Does it really matter if Apple's market share is declining as long as they keep capturing >80% of all profits from said market?

As long as they keep their target demography on board (both on the consumer and developper side) they'll do just fine.

Well, Tim Cook is not Steve Jobs.

He is a different human being, with his own set of skills (and flaws) and that's OK.

He certainly does not "just write emails".

This article from The Economist touches on this topic.

“Banks cannot use deposits in one country to lend in another, because national regulators do not want to be on the hook for loans to improvident foreigners. An eu-wide deposit-guarantee scheme would allay that fear, but has yet to be agreed.”

https://www.economist.com/briefing/2019/01/05/the-euro-enter...

Criteo is another one.

Is it even possible to anonymously lease a VPS?

I guess you would need to use cash, at a minimum.

I really like their Audio edition: it's a full version of the paper voiced by pro actors.

I don't understand why this isn't more common. I'm already spending 8-hours a day at work, reading stuff or parsing information in some ways. I have found that I have no mental capacity left to read a full newspaper on top of that.

Listening to a podcast while commuting is way less exhausting (to me at least).

Of course they do. Their EU HQ is in Luxembourg.

Cross-platform rich content over SMS is a bit of a mixed bag. You’re never sure the other party is going to be able to read it properly.

Also SMS doesn’t do group messenging very well.

iMessage would be a great alternative to WA were it cross platform. In EU especially, you’re bound to have a critical mass of your contacts on Android :/

Why do you think WhatsApp usage is worse than IG and FB? (honestly asking).

While I’ve no doubts that people at FB are actively thinking about ways to monetize it, right now the product doesn’t seem to contain any of the toxic crap from IG/FB (ie: algorithmic timelines, attention-grabing dark patterns, promoted content, etc).

I’m wondering if it’s somehow already there and I simply haven’t noticed :(

Thank you for posting this! I'll be checking this out. I like how the scope of this project is only about setting up an IPsec server automatically on a Linux box.

Algo and Streisand have too much features, making them unwieldy.

They do [1]. In JSON.

[1] https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges....

I can only speak for me, but modeling financial flows in terms of transactions and not accounts is much more intuitive than the classical alternative.

I'm a long time Buxfer user, which also works like this. It's not that I don't understand double entry bookkeeping, I've used GNUCash for a long time before moving away. It is indeed very powerful and flexible, but it always was too much of a chore to maintain and next to impossible to get other family members to contribute.

I'm not sure this "transaction model" would be appropriate for business accounting, but IMHO it works very well for Personal Finance.

Wow! Thanks for flagging this. This tool has so many useful applications; mind blown.

Uh, this is a very interesting (and intriguing) perspective.

Couple of questions:

- Does this mean that there’s a case for QE to be made permanent under a low-inflation environment?

- Under this model, govermnents would be directly responsible for the allocation of the newly created money. How can this not lead to a depressed economic output over time?

- Where can I read more about this?

Uh? This is already how the world works. It does not matter where you are located as long are you are transacting with EU citizens.

In extreme cases of non-compliance, avenues for enforcement that have been discussed reuse existing Anti Money Laundering mechanisms: once flagged in the system, banks will simply freeze your business assets connected to EU countries and you might be arrested upon crossing any EU border.

Well, the point of the GDPR is to make you aware that collecting personal data of EU citizens requires their explicit consent. Just ask me for it, that's not a big deal, is it?

If you don't, you're effectively stealing from me and I shall expect my government to go after you to the full extent of the law.

The US (along with the democratic free world) may have its own problems but it absolutely can claim some sort of moral superiority in many areas.

You cite Julian Assange and Edward Snowden. Well, you can freely support, advocate, demonstrate or petition for their cause, in the open. Let me know how it goes for you if you were to try defending political dissidents in Russia, China or North Korea.

The fact that we can debate these things in a public forum is proof of our moral superiority.

This does not mean there aren't plenty of things we need to learn from these non-democratic societies.

We just don't need to reject our moral beliefs to do so.

Come on. I won't dispute your past experiences but you really should avoid extrapolating on anecdotal data.

Car ownership for Parisian households sits at 39%.

Zooming out to the Ile-de-France region (population: 12 million), 33% of households don't have a car.

source (french): http://transports.blog.lemonde.fr/2015/05/03/la-preuve-par-l...

Regarding your comments on safety, I certainly believe the city feels much safer today than in early 2000's.

(Obviously not talking about terrorist acts, as they are not caused by 'immigrants loitering in groups on the streets').

Not sure about auditability. If anything, IaaS is more auditable since everything is traceable.

Additionally, AWS will provide partner ISVs with detailed reports on how customers used their products over a given billing period.

That being said, this transparency might be an issue for Oracle as it limits their usual predatory sales/auditing practices.

and iOS provides an official API for adblocking since version 9.

IMHO adblocking is even more relevant on mobile because of latency & data caps.

You're right, but I would reframe it along the lines of Network filesystems (like NFS or OCFS3) vs. Distributed Object Storage (S3). In that sense, certainly, the current "default" is to use the latter and avoid the former.

Local filesystems and/or volume managers won't go away anytime soon. Internally, a system like S3 needs a unified access to the storage, which is provided by the filesystem.

I think we are going to see the emergence of new filesystems that are much simpler in design compared to ZFS (as reliability is left to an upper layer in the stack) for use in the Cloud. Somewhat similar to the trend toward lightweight OSes built for the cloud (CoreOS, Project Atomic, etc.). Many features that were in the realm of the operating system are now delegated to upper layers in the stack.

Good point. It's actually generally cheaper to serve content through Cloudfront instead of S3 directly as bandwidth is less expensive with Cloudfront.

However you are going to pay for Cloudfront requests in addition to S3's. In the vast majority of cases, it's insignificant compared to the savings you can achieve on the bandwidth side. (And at a certain level you can ask AWS to waive CF request fees entirely).