dx034

The alterntive for companies with many departments is usually using a variety of tools that all need to be in sync. Jira can be the one point that handles all workflows for all projects.

One could say Jira is like SAP. Theoretically it's just a software, but in the end there is so much customization that the business starts to revolve around its processes.

That pain also comes if you're already deeply invested in cloud products. Nothing scales without effort. And pain points always arise where you don't expect them. But the simpler the setup, the simpler it's often to scale out the parts that need scaling. In this example maybe a dedicated server or a separate database server at some point. But there can be many customers before that's necessary.

Preemptive scaling never really works and most projects never scale enough to warrant more than one server (unless you write very inefficient code).

Why should the database ever be publicly accessible? I've only ever seen databases being accessible by applications and maybe users (but those only for analytics databases), and have never experienced anyone working full time on certs and user access for a single database. There's usually a team for that, but they do that for the whole server fleet.

National parks in Spring and Fall can be great and aren't that crowded during the week. E.g. anything between Easter and Memorial Day tends to be nice weather, most roads are open and visitor numbers are low.

I've also felt that struggle between employees and managers in Europe. It's usually that employers set a minimum #days in the office and employees would like less office time. But I've heard of very few companies that are going back to 100% office. Even 2 days home office is viewed as restrictive now, whereas before very few places even allowed 2 days per week.

I also have the feeling (not SF) that traffic has returned to pre pandemic levels, but rush hour is much less severe. Probably because people also sometimes spend half days at the office or travel for leisure instead of work (e.g. leaving on a Thursday and working Friday remotely from a vacation home).

They definitely tried it. All bulge bracket banks have significant portions of their staff outsourced, it never worked that well for highly compensated IT staff though.

Do you expect 100% presence or are 2-3 days per week from home ok for you? I'd also never go fully remote but have found a hybrid model to be really productive.

Only at certain times. If you travel full time, you can find times where even the most popular national parks aren't crowded at all.

The question is, how many other companies do that? Would be great if more companies could go through their used libraries and spend $500k. Github doesn't have to make up for all the other users not paying.

SSO with our AD. Works well, but I'm not the one who set it up.

Calls in the browser would be great!

I've been using the self hosted version with a 10-person team for a year now and so far we like it. It's not as good as Slack (yet), but if you need to self-host, I can absolutely recommend it.

I'd rather use Copilot than including yet another library just to avoid writing one function.

Confusing the server I'm on will always cause issues, not matter if I have to sudo for root.

I get the other points, but most servers I encountered don't have these fine grained controls because doing manual work on them only happens for debugging or fixing issues.

And the password doesn't need to be shared with sth like Tailscale.

Tracking actions is a good part though, I wonder if you can still track which tailscale user was responsible for that root login.

Session cookies are allowed if the user agrees. And if the user doesn't agree, you have no right to process PII to group metrics over a session. That's the big shift here, assuming you have a right to build a profile on a user (or even evaluate their behavior) without their consent is not legal under GDPR.

And as a European, I'm very glad that's the case. I know, we're still not close to compliance with GDPR, but it has changed the privacy discussion more than any other part.

I'm still a fan of Matomo. Very powerful, easy to self-host and you get full control over your data. Never tried their managed services though.

It's like with Cloudflare. The free Tier is what gets small companies and hobby developers in. And as they know your system but not the one of others, they'll recommend it to use when your company grows or their employer looks for an analytics system.

But I don't think it's predatory. It clearly worked for cloudflare and seems to work for Tailscale (they openly said they're using the same strategy). It would be predatory if others couldn't match that, but I'd argue many competitors could offer free plans for small websites if they wanted to.

But it's enough of a hurdle that many website owners may just decide to go with a EU-based competitor. Certainly a good ruling for the EU tech scene.

You can only see visitor numbers per search term, but not information like bounce rates or duration of visits. And that would be really helpful to judge if people may get the wrong impression of your page and bounce if they searched for specific topics.

Honestly, I would expect that from him as CEO. He only makes money off people watching the channel and subscription numbers are hugely important. Any efforts by employees to gain subscribers for their channels could dilute visitor numbers and subscribers to LMG. And obviously he doesn't want to create competition.

In the end he's still a CEO and the others are his employees, not his friends. For that, he doesn't appear to be a terrible boss.

I've always heard that and adhered to that, but what's the advantage of me logging in with a user account to then use sudo for every command? It's not like I could break less than being logged in as root.

> Real people directly in your infra is probably best avoided.

But I've yet to see a company where no one ever needs to ssh into a server. Using these ACLs to give a contractor access (and even visibility) to only the servers they're supposed to see is probably a big advantage over OpenVPN, where a contractor automatically becomes part of the inner network and can theoretically see all machines?

The last point is a good one, I'm not sure how that makes tailscale usable for big orgs. Imagine a company with 10k+ people using it, I guess you'd need to build a lot of own tooling to avoid breaking the whole corporate network because of a mistake in setting an ACL.

Most code is open source, I guess they could include a feature (not enabled by default) that sends a warning whenever it sees a previously unseen device on the network. Would be noisy and useless for most, but prevent tailscale from adding a new device secretly.

But then again, I'm not sure there are many people who'd worry about that.

I love that feature but I'd be a bit scared to just switch off all other ssh, in case the tailscale service ever crashes. I know, machines can just be set up again, but if the problem reproduces there's no way to debug it.

So what's the recommendation here to stay safe but still have a failover? Keep ssh enabled for only one user (with sudo rights) and a key that's stored at some secure location?

That sounds extremely risky. Apart from the fact that it makes it much harder to restrict access for leaving employees, mixing personal and work identities sounds like a recipe for disaster. What happens if a personal account gets banned? How do you enforce security rules?

I guess companies where there's not even any identity management, securing your network via tailscale is not your primary concern.

Oh that sounds exciting, would it also solve the current performance issues when moving large amounts of data? It's currently the only reason I still have to use public IPs for some applications.

I'd love to use another company, but there's no one offering the same for the same price tag. Most of their services are free and they charge very little for the rest. Especially if you have a traffic heavy page with little revenue, Cloudflare is pretty much the only solution for CDN, WAF etc. All the others charge for traffic and cost a fortune.