frenchman99

A reverse proxy using Nginx would work just as well.

You can totally have multiple secrets' sources: one for development that takes secrets from a plain text local file and one for production that takes secrets from Vault. I don't see an issue here.

Also, what's immature about Vault?

I've seen Python CLI apps for internal tooling being very maintainable and setting up a Makefile with an "install" task makes it easy for everyone in the team to get started.

> Simple, you get the secrets very rarely: at deployment.

Do you mean writing custom scripts to get secrets? Where do you store secrets in such a scenario? What if you need to change secrets at runtime.

Vault is nice in that you can fine grain access:

- ACLs which allow some team members to be responsible for setting secrets and other team members for using them,

- temporary credentials for well known DBMSs which helps secure logs from leaks,

- PKI Management,

- temporary SSH keys.

And more. Not sure how you'd get that with a deploy time script.

> Don't Design for Multiple Cloud Providers

Some industries legally require you to plan for the case where a cloud provider cuts you off. So sometimes you don't have a choice.

As you say, it was a scandal and we did not accept it.

I'm always amazed at what Americans put up with in terms of food. In France, where I live, when you buy olive oil, it's olive oil: simple.

Is this somehow associated with https://www.browserless.io ? If not, this is confusing.

Autocomplete is automatic in Intellij as far as I can see. I don't recall doing any kind of custom configuration to have it working. Autocomplete works on resource names, variable names, properties, etc.

The `count()` "hack" is so common that it barely qualifies as a hack anymore. It's just common practice and immediately understandable when you read code.

That's not what "convincing" is. That's "coercing".

If you want to convince, do it with data and logic, not by taking away rights.

> When majority is agrees on something it doesn't make this automatically the right thing.

In a democracy, yes it does.

I'd probably pay if this is an issue for me, just like I pay for other stuff that has popups for as long as you don't pay (Sublime Text, Little Snitch, etc). You're only getting Docker for free because you help them by upgrading automatically.

In fact, it's pretty cool that the only requirement is to stay up to date. Some companies make you pay to get upgrades, which is less secure in a way.

I read AGPL as "if you need to clone the Grafana Git repository, change code (even just one line), then you need to open source your changes". If you write code without having to modify Grafana's code itself, then you don't need to open source that.

They do say it:

> It’s important to note that this change does not prevent our users from using, modifying, or providing our open source software to others — provided, however, that under the AGPL license, users have to share source code if they are modifying it and making it available to others (either as a distribution or over a network). For distributors, AGPL has the same source code sharing requirements as GPL. Those conditions are designed to encourage third parties looking to modify the software to also contribute back to the project and the community.

Vault is open source, it looks like 1Password Secrets is closed source. Not really comparable. Probably not aimed at the same people.

It seems like a Whois search about the domain that's in your Hacker News profile yields lots of interesting information. Your previous comments seem to indicate that's a provider you work for. Maybe it's not related though. Or maybe it's just a way of doing PR. I know nothing.

Heroku and Porter are more like a PaaS (Platform as a Service). Not sure FaaS can compare here. A PaaS could include a FaaS offering, but not the other way around.

Unless you can deploy something like Postgresql to a FaaS. If that's doable, I'd like to read more about it.

So now you need Python + pipenv + the actual program? Versus just the binary with go/rust (or any compiled language for that matter)?

I think that's exactly the kind of complexity arusahni was referring to. Being able to deploy a single binary with `go get` or `cargo build` without worrying about anything else is really convenient.

I guess it depends on the use case though, I use Python extensively at work and have little complaints.

Depends what you mean with "setting up auth". Once you get into enterprise scenarios, where you need SSO for SSH, Git, your public website, internal tools, ability to revoke accesses, handle trusted mobile devices (ie generating QR codes for VPN/Wireguard access), handling 2FA, etc, etc, it takes more than a week. For such scenarios, doing it yourself and doing it correctly becomes immensely difficult.

I'm not even sure that would apply here, since Uber drivers are not employees.

It isn't? Is it not possible to be tricked into downloading a malicious binary that you then execute on your computer?

This web server has been available for a long time. Sure you can misuse pretty much any technology. Rolling your own crypto is possible too but most people don't do it.

People tend to use ready-made Docker containers for PHP deployment. The official PHP image has apache and fpm versions: https://hub.docker.com/_/php/

Looking at this page, it seems like they can't set their fares, but only a "fare multiplier", so effectively, Uber still decides.

If you like devops and security, have a look at SRE (Site Reliability Engineering) positions. Companies look for software engineers to fill these positions. And you'll work on security related stuff. Not necessarily pen-testing per se, but network security, operational security, etc.

Also, teams with SRE expertise most likely use modern tech because SRE itself is a rather new way of managing infrastructure. So you'll probably be able to get your hands dirty with lots of cool tech.

From a quick look, I'm wondering if this integrates with the rest of the Symfony stack, if that works with API Platform, if it supports subdomain routing and if it has long time support.

Sure, shaving a few milliseconds off the load time is nice, but it's just one parameter amongst a whole bunch.

I remember reading about Ghost.org team members saying that if they had chosen PHP instead of Node.js when they got started, they'd be much further along in their roadmap [0].

PHP has a reliable ecosystem of 3rd libraries with LTS releases. I am not aware of something like Symfony [1] for Rust or Go.

[0] https://www.indiehackers.com/podcast/007-john-onolan-of-ghos...

[1] https://symfony.com/

Also, if you write library code, you can, and should probably have CI running against Python 3.0, this way at least your code doesn't break when used against a newer version.

The sentence doesn't have any clear meaning. That's probably why it's brilliant: each and everyone of us can and will interpret it how they like due to confirmation bias [0].

[0] https://en.wikipedia.org/wiki/Confirmation_bias

Wow, that looks so practical ! And no server cost/setup/maintenance, I guess.

The thing I'm concerned about that doesn't seem addressed on your home page is security : by installing your agent on my machine, I'm basically giving you access to my machine non-stop, no ? What guarantees do I have that your agent can't be used as a backdoor ?

Only if they don't request to be paid back later for said rent. Otherwise, that's just giving rich people free money.