1,212 karma · joined March 13, 2011
Grew up on:
Orchid ProDesginer II 8088 386DX-20 => 486DX2-66 => 486DX4-100
Borland C++ 3.1 :: probably the single biggest killer of trees ever.
Later, the right amount of validation will speak for itself and reduce friction. That is if investment would win a race-to-market. Otherwise, plan to get to market as quick as you can on with the team and money you have.
FWIW I'm impressed more by how little actual (non-bullshit numbers) cash and time went into something.
Let the clients handle end-to-end encryption with something zk DH/OTR/SMP.
I'm curious how they later monitored this and did other common SRE stuff. Also deployments.
The meta is that thinking strategically from tactical on up about how solve business and customer problems at scale is uncommon, valuable. It's hard as it requires focus, experimentation and intellect. Further, common sense and critical thinking skills are basically impossible to improve from a rote memorization approach because the education system is so hopelessly disconnected from life and business. A wise parent today could act like an investor by taking a step back, do far less for their kids so they can become more independent and more survivable. Whenever I see kids having their food cut for them, ...
Oh and maybe food and shelter.
Departing from this is what allows folks to believe violent terrorism to be a viable strategy to "win."
My favorite so far is this guy that hangs out at a cafe near Stanford that has alienated everyone in his potential "deal-flow" by anger outbursts on conference calls and generally acting like a dick.
If it could use Heroku as backends for repos, now that would probably break HK's freemium model.
The other point is that bitbucket has unlimited private repos for free and github has unlimited public ones for free. In a business setting, I can't see the time and cost of maintaining code services except as a backup, or if you are Goldman Sachs imprisoning your ex-employees or a defense contractor working on missiles. (Setting up giolite + active directory + Crowd + JIRA + FishEye was a chore I'd rather not repeat.)
It looks a little nicer than gitlab, but has anyone had recent experience with gitlab, redmine or github enterprise?
Ultimately though, github could threaten C&D against the authors if it were to take off because it's such a design ripoff. Although it has almost no commercial viability it's neat for its own sake.
It's also more secure because if it's possible to dictate all of the service details, it's much easier to run a lean and locked-down infrastructure.
CoreOS by itself looks great. More JEOS distros need to happen. Trying to bundle more unproven things just looks marketing led the product.
You've also admitted that it's an incomplete solution. But What's worse is that people are going to buy this and quickly they'll have to scrap it when it gets out of sync, deadlocks or can't handle more than 8 boxes.
Puppet has the notion of stages.
Yes because it's marketing an unproven technology as a solution when better things already exist. Someone I know from (OpsCode||Puppet) even further the recommendation of zk as basically the only proven consistent KVS. A better approach should be to do what other cloud shops have done and ship ZK appliances. Pushing new tech on customers is using them to beta test unproven tech, which is reinventing the wheel and risky.
It's bad to promote a solution that don't address the problems of real deployments: coordinating change and responding to it. Updating host files or ssh moduli is about all it seems good for. In reality, files have to be changed at just the right time in a series of coordinated changes with everything else. Chef is what I reach for first, because it solves the problem in the most logical and most complete way. Some people prefer Puppet and that works too. But it's several systems together, like TheForeman (not just Foreman) that make for more powerful infrastructure. There are half a dozen or so other systems in addition to some homegrown (nonportable) ones out there but most others fail to meet requirements Chef and Puppet address (security, auditing, scalability, non/determinism).
Hiera is a like a hierarchal property list that puppet chef etc can use to pull its state. Use zk as a backend to keep multiple instance of hiera in sync to scale for large shops. The neat thing is, like OpenLDAP, Hiera has multiple backends to store your single source of truth. It's like if you wanted to run a Heroku, the environment variables for apps would go in there. Zookeeper is solid but hard to use directly. A more concrete example is a MySQL cluster: you'd want to know what are the hostnames and what is the write master. Sure you could write something that talks to zookeeper but it wouldn't be very general purpose. It's for the use case of scaling beyond what Redis can handle and you do want to get tied to any particular technology other than Hiera. If anyone has funding lying around and wants to take infrastructure smarter and farther, talk to R.I. He knows what the opportunities are and where it needs to go.
http://projects.puppetlabs.com/projects/hiera
PS: I'm glad we're past the days when shops' Cfengine would have a permissions battle with itself (chmod 4750 -> 750 -> 4750 -> ... )
It's great for a host file but scp can do that.
It doesn't coordinate the transition of services to other states. Puppet does an incredible amount of work (dependency satisfaction) to get things where you want them to be. Configuration management is as much management order of operations as well as what files should contain what. There's not much separating the two because you have to usually change them between states. Chef does this to, but in a simpler way.
Cfengine was a past attempt, but is really complicated double work of what runs on a server and what runs on a managed node.
There is more to configuration management that templating files, but in inspection and having other services arriving at other states.
Hiera, a simple hierarchal property distribution system using a backend of Zookeeper plus puppet or chef is far superior. Etcd is the PHP of configuration management.
It's worth noting that most carriers DO NOT blacklist all types of serial numbers burned into a device with a single serial number. There should be a requirement for a blacklist of one to also blacklist all others and that a carrier should be able to search by any of the serial type number.
Further if a device is legitimately recovered by the original owner, they should be able to unblacklist it.
Finally, carriers should cover return shipping and reactivate found blacklisted devices. There are many worthless blacklisted iOS devices on eBay, but neither Apple nor carriers will activate them nor return them to their owners.