grapehut

One of the biggest problems I've had with RDS (postgres specifically) is not being able to do incremental offsite backups. I wonder if the database migration service can help with that, as they say the process is "reliable" and "automatically restarts the process and continues the migration from where it was halted"

For what it's worth, this was one of the companies I tested for a recent project of ours, as we were in the market for European hosting. While we ultimately didn't use exoscale, I can only say good things about them. They were very professional and gave good service, and even voluntarily gave a refund on the used prepaid credit.

I say this, as when trying a bunch of small providers you never really know what you're getting into. As an example one of the companies we tried was entercloudsuite.it which is quite literally the most ridiculously worst company I've ever dealt with. At a point during our benchmarking they they froze the account (with zero warning) and locked out access (?!) and refused to give a refund. Correspondence with their (Italian) staff hit a huge language barrier and their explanation was when we originally registered we had multiple attempts at getting the credit card right (possibly fat fingers?), they refused to be reasonable or restore access, and had to solve the issue with a credit card charge back.

Sorry that diverged into a rant, but if you're int the market exoscale is a good option (along with what we ultimately went with: OVH)

Google doesn't want to lower the PageRank of http sites, it just wants to use http vs https as a feature in ranking. That isn't particularly surprising, I would be willing to bet google already uses hundreds of such features (one of which might be PageRank).

You can't seriously be suggesting that Cryptsy is one of the big bitcoin exchanges? Never mind the fact it's an altcoin exchange, it been been suspected insolvent/scam since late 2014.

It's like calling

It makes me wonder, if the person is unsuccessful at authenticating, does the real owner get a follow up email? For instance, maybe he had to try 5 times to contact support before he found an agent who authenticated me using a fake address.

Worth checking out: someone reproduces using a fake address to get a real address.

https://medium.com/@amaz/thank-you-for-sharing-this-but-i-co...

(contains pretty great screencaptures)

I would recommend strongly against that. You'd be far better off picking something plausible, so if someone does impersonate you it's obvious.

Remember it's a human verifying this. The attacker just needs to answer: "oh, yeah i just spammed the keyboard with some jibberish" and he's in.

The other thing I noticed by the attacker going after me, sometimes he'd call/contact the service multiple times in a row. All he needs to do is find out from 1 support rep that the reset password is randomly generated. Then tell another support rep that its "some jibberish" and he's in.

Actually, I do have 2FA enabled on my account. But I don't think I had it enabled at the time for the very first attack.

Interestingly, last night I did get an SMS: "Message from Amazon Customer Service: xxxxx is your Amazon security code" even though my 2FA is not an SMS (it's using authenticator).

I don't have access to the recording, so I have no idea what actually happened. But based on the email ("here's the details" on your order) I'm almost certain they were successful. Probably just told them that they lost the phone, or something. At this point, they've now been able to get almost everything possible about me.

Also interestingly, not once did Amazon recommend that I use 2FA to avoid social engineering. I was told by two different support reps to change my password though.

I honestly have no idea. I think the only protection at the moment seems to be obscurity, use an email address that is not linked to you.

2FA is useful if someone knows your password (e.g. you re-use it, and it gets leaked) but it's not useful in this case. I have 2FA setup on my accounts, and when ever contacting customer support I've never had to prove I own the device.

> Caching is based on file hashing. Not filenames.

I'm not really sure what this means, and I've used all the major CDNs/reverse proxies =)

Cloudflare for instance is generally controlled by the filetypes, while cloudfront is generally controlled by the cache control headers sent by the origin server.

Either way, I think exactly how it works needs to go into its own fully-fledged article. It's probably the most important thing a reverse-proxy does, and should be documented very clearly.

BTW one unique feature of cloudfront you might want to support, is setting cache control with vary on cookie. So with cloudfront, I can make non-logged in users see a cached page, while logged-in users see a non-cached page. It allows me to take a huge amount of load off the origin server, with no real downsides (in my case).

Hey, wow. The site looks really good, so I connected a domain to try it.

Initial feedback: * I spent about 2-3 minutes to trying to find how to get to the main website settings. Only just before giving up I found the "..." which contained it. I think the "Manage your website settings" settings should be prominently displayed.

* All subdomains (and the domain itself) needs to point at the same ip address? This seems to be a pretty big limitation

* This is definitely the most confusing of the UI: https://i.gyazo.com/dc0f848525e98a08944f839aabbea44e.png I thought it was all a single form. I'd break it up a bit better, and when adding a subdomain explain the steps better (aliasing)

* While my ssl certificate is being provisioned, my site is serving a certificate from organkimlan.com I'm guessing that's another one of your customers?

* I love the idea of real time stats, and route-specific feedback (page load time , errors etc).

Some questions:

* What's your content policy in comparison to cloudflares? (That's probably the single biggest thing I like about them)

* Do you have any guides on how your site respects caching? I really love how cloudfront handles this (unlike cloudflare)

* Are you guys able to eat a DDoS? Is this one of the services you're providing?

Anyway, one of the most impressive Show HNs I've seen in a while. I wish you guys great success and will be following closely

That's not true, when you setup crypto in cloudflare you need pick between "Full SSL (Strict)" which requires a valid certificate, and "Full SSL (non-strict)" which allows you to use a self-signed certificate or what not, but there's no reason you should be using that mode if you already have a valid certificate (as is the heroku case).

I agree with your post, but Byzantine Paxos require at least 2/3rd to be honest not 1/3rd