fishpen0

Mastodon communities are already coordinating trying to fully defederate threads. This is definitely going to be interesting to watch as a big whale jumps into the fediverse with the intent to profit

The same bill but without criminalizing the use of VPNs to access foreign networks that are deemed "bad" by random politicians

We're going to ban the use of VPN and fine and imprison people who use them. This is actually worse than the firewall of china

It sounds like the actual problem is getting too many meaningless notifications, inadvertently training people to ignore everything

The annoying thing with zelle is that every bank has different limitations. USAA for example has a 1k daily zelle limit. So it's completely useless for things like paying rent to a landlord unless you want to split a rent payment up over several days.

Honestly as someone living in Cali, I appreciate not dealing with the constant buzzing noise from 10 different tourists flying drones within earshot of me while I'm enjoying the beach.

Nothing ruins a vibe like BBZbzbzzbzzzZzbzbzzzzzzzZzzzZz

> Cortex is used by some of the world’s largest cloud providers and ISVs, who are able to offer Cortex at a lower cost because they do not invest the same amount in developing the project.

> ...

> All CNCF projects must be Apache 2.0-licensed. This restriction also prevents us from contributing our improvements back to Cortex.

I read this as "Amazon has destroyed the CNCF by not playing nice"

Exactly this, we use it for all of those things. None of which provide value to PMs, designers, and other non-engineer roles within teams that still need to collaborate on issue tracking and documentation.

In the rare case this happens we still don't use raw SSH. We rely on something identity-driven like SSM in AWS or IAP in GCP to initiate the tunnel.

This is a problem at every org scale as well. We have this issue with a 1000+ developer org where we still can't give our PMs and other non-developers read-only access to the gitlab issues because it would be another 200 headcount worth of full-price licenses. It's basically the sole reason we can't utilize most of their jira/confluence alternative product line and still keep issue tracking and docs mostly outside of gitlab.

Cluster-level ops really shouldn't be done by direct SSH. Tools like ansible, salt, chef, puppet, etc... all can be run in some form of daemon mode with a central management server for a reason. You should be authenticating against the management service and running your configuration or automation scripts from there, not as a massive pool of CSSH or whatever directly from your laptop.

Over the last 6 years I've worked for three different companies that all universally disabled ssh and we never had troubles running management scripts or tooling.

I go hilariously out of my way to eliminate elasticsearch at any org I join. Usually because it's only being used for logs and modern tools like loki are immeasurably easier to scale and cheaper to run. But I also find many many developers using it don't know about time series databases or anything at all about which data structures go in which kind of database and just dump everything into a horrifically organized search database. Its at least one order of magnitude worse to scale and operate than a mongo-type nosql database being used incorrectly by a developer who doesn't know any better and two orders of magnitude worse than a sql database being used incorrectly by a developer who doesn't know any better.

Fines don't happen until they get caught. How long can a company go and how much can they make before they get caught? What happens to the executives? They just move on pointing to their old success numbers.

I run internal audits for a large org as part of a strike team when my company is acquiring smaller orgs. External auditors are a joke and it's incredibly easy to slip things by them. The only reason we catch stuff is because we assume full ownership as part of our takeover process and actually build and deploy product to find issues.

It also doesn't help that these frameworks are often dated and don't align with modern best practices. Shops have the choice to check the boxes and do things the dumb way or to fill out page after page after page of special exception documentation for their auditors. Most take the easy way.

And that doesn't even cover the part where PCI, SOCII, and SOX all have various bits that contradict or are not compatible with each other.

I've seen too many times where the head of security or IT or whatever picks a pre-made package off a shelf from one of the audit providers where they guarantee you will pass all of them. Then they follow it like it's law ultimately leading the swe/devop/sre groups to build out layers of shadow it/ops to actually get productive work done.

My work primarily is to jump into startups after they are acquired to make them "enterprise ready" for a bigger org and its always a unique shit show dealing with the preexisting war between their security/it orgs and their actual product development orgs.

You could slap together a script that tracks the current ratios of a given index fund, then maintain a blacklist of baddies, and automatically buy at the new ratio using something like alpaca.markets api for buying. You'd get all the expertise of whoever designs your index of choice but your custom little changes for removing companies you want to ethically avoid.

I worked for Hitachi during that time period and that is mostly true. Hitachi actually sold the division to WD in exchange for private ownership shares of WD with insane leverage because WD had most of their factories flooded in 2011.

WD Drives were actually HGST drives with a different label for several years.

That may be the public SLA for people who create an account without private contracts. Large businesses never use the standard SLA terms.

Pluralsight | Devops Engineer | Boston, Ma | Onsite

Pluralsight is a tech skills platform that aims to help individuals skill up in their roles. We also operate a non profit, Pluralsight One, that makes the same platform available for free to learners with limited access to education. Teams in Boston tend to focus on improving our learner experience by using data science and machine learning.

More information here: https://jobs.smartrecruiters.com/Pluralsight/743999690523577