I was surprised when switching to U2F authentication that I can only register one key on my AWS root account. If I lose that one single hardware key I'm in for a world of pain. Why half-ass such an important feature. Things like this make me look for alternative providers that take security more seriously.
I understand the frustration but as a business it makes a lot of sense to cut back on the plans and simplify things. It's happening all across the board and I myself have done so. Doubled the price, canceled the free plan and rolled out a single plan that covers everything. I was expecting push back and reduced customer signup but the opposite happened.
For the reasons listed I got myself three Yubikey 5 NFC dongles and removed SMS wherever possible. Unfortunately the authentication landscape is still very fragmented. AWS root accounts for instance cannot be secured with multiple hardware keys, only one. So no backup. The only solution is to use virtual OTP and register the same OTP setup key on multiple hardware keys. Only Google seems to have the ability to register as many keys as you want.
This idea that you need a ton of money to maintain self hosted servers is not true. You may have to update to a new OS or software major version at some point in time, but in the meantime things can pretty much auto-security-update for the distribution provided version until you gain traction with your startup.
I wish there was a statically typed version of Ansible. There is Pulumi but it's mostly tied to cloud API's and not Linux system administration (setting up HAProxy, NGINX, PostgreSQL, users)
Same. In the Netherlands it's not uncommon to find a raw milk dispensing machine at your local cow farm. You bring your own bottle, put one euro in the machine and out goes one litre of raw milk.
What I like about GraphQL is how quickly one can start fetching data without considering the API endpoint. Especially for nested data structures where the alternative is using json_build_object queries with PostgreSQL. I use it extensively in admin backends and only switch to a rest endpoint when I have to get too creative with custom functions (PostGraphile). PostGraphile doesn't require much configuration, it introspecting your db and you're good to go. The moment the tradeoffs start to show you add a custom rest endpoint.
You can run an automated rootkit detector, but I doubt anyone able to get that far will be caught that easily. Your best bet is using application specific monitoring, eg for WordPress there are excellent tools like Wordfence that monitor login attempts, file changes and block common attacks. For my custom apps I will be alerted on brute force attempts, weird queries (sql injection attempts) and pretty much any anomaly is logged and will stand out. Another big one is monitoring for weird resource usage, I use Netdata for this. But doing some upfront hardening is the most effective way. I have yet to be hacked (as far as I can tell) operating multiple VPS servers in 10 year+ timespan. But have worked with companies that frequently had their servers compromised due to poor security practices.
It has also gotten much easier. For instance running your own full blown email server with docker-mailcow. There's a great UI tool that helps to setup the required DNS records. I remember doing the lengthy postfix + dovecot + SASL + MySQL + Auth + this + that guides. No need for it anymore.
If this works properly for a code editor I may have to reconsider buying a MacBook Pro for coding in the garden. Not looking forward to switch from Linux to macOS but the hardware is pretty good.
I'm a bit of a cowboy coder and completely skip all but the very top of the testing pyramid. I strictly run E2E tests and albeit slower than other tests, it tests a much broader spectrum than just a single function. For instance I change the expiration date of a user's subscription, run expire logic, test of this user has received the expected expiration email, this automatically tests the Amazon SES integration, the email template parser and everything in between. Clicking on the expire email call to action button I expect to land on a certain page with elements "missing" and others added, which validates changes in the user's roles. Let's say I swap Amazon SES for Postmark, no new tests have to be written. In my experience this approach works really well for a SaaS like product. It also looks satisfying to see the test suite blast through the site clicking and typing like there is no tomorrow.
Isn't Ivermectin most effective at the onset of symptoms [0] ? From the article "They looked at data from all patients; then analyzed data from patients who received ivermectin or a placebo 24 hours before they were hospitalized" This sounds like Ivermectin was given when symptoms where so severe, hospitalization was required. This could well be too late for Ivermectin to be effective.
"There's a huge maintenance burden with WP sites"
I can't subscribe to this notion. WordPress can run almost unsupervised on auto update. Perhaps when you install 40 poor quality plugins things will break between updates, but with a few base plugins such as Advanced Custom Fields Pro + Custom Post Type UI you have no such problems.
What kind of problems did you encounter ? I recently switched from v12 to v16 without any problems on a decent sized project. I was expecting to break a few things and surprised how smooth it all went.
I submitted the form but haven't heard back. I have recreated all important email accounts on a self hosted Mailcow instance with a sync job that syncs all email every hour. When push comes to shove I only have to flip the MX record for the domains.
For almost everyone, vaccinated or not, Omicron is a minor nuisance. Somehow everyone seems to claim they have minor symptoms because they got vaccinated. This is human psychology 101 as it validates your decision for getting vaccinated.
I can vouch for mailcow as a great mailserver system. Going to migrate a couple more domains from the soon to be discontinued "G Suite legacy free edition" to my existing mailcow server. Migrating email accounts is pretty easy with the "Sync Jobs" option from the web ui.
As has been said, the tooling, libraries and documentation makes a big part of a language being easy to learn. I run a small SaaS like service and consolidated all code into a single language: Typescript. I believe this has given me a lot of headroom to focus on the business side. Is Node.js the best tool for the job? Perhaps not, but having a single language across front and backend certainly makes up for it.
Maybe this is the same marketing speak as we've seen with the 1600 nits peak, and 1000 nits sustained brightness claim for the new mini led displays. Which later became 500 nits for SDR content, when ambient temperature allows. [0]
I want to see proper benchmarks before getting too exited.
"As detailed in a recent report by Nature Research, biomass loss increased 69% across Europe between 2016 and 2018, with large losses occurring in the Nordic and Baltic regions. In the past five years, the rate of deforestation in Estonia has risen 85% – a surge linked to a 25% decrease in bird populations. "
We are on a fast track to deforest Europe in the name of CO2 reduction [0]
The west is still paying Russia 500 million dollars a day [0] for oil and gas imports which is indirectly funding the shelling of Ukrainian citizens with cluster bombs [1] as we speak. I think we should stop imports even though this will be painful at first.
They say "sitting is the new smoking". I work standing, with my laptop mounted on a tripod. The nice thing is that I can often work on my laptop in the garden. Sometimes I do a moderate workout on a stepper if the work doesn't require carefully touchpad / mouse input.
In the end it's not the amount of money you make, but the freedom you have while making that money and the freedom it buys you. I run a subscription service that requires little handholding, it generates enough to enjoy the winter months comfortably in Spain and spent the summer back in my home country. The business runs on autopilot while I can hike in the mountains or enjoy a beer with my wife at the local Chiringuito. Some will laugh at my MRR but I wouldn't switch for a high paying desk job in a million years.