431 karma · joined March 13, 2012
"How secure is MySocialCloud.com? From day one, it has been our goal to provide the best security on the web. While we don't expose how we keep MySocialCloud secure (if we told you, it would be unsecured!), we do ensure that not even our employees are able to see any of your sensitive data."
One of their videos shows a bookmarket so I'm going to presume they're using that for somekind of encryption clientside with AES???
I do however think that interoperability needs to be improved.
Sounds like this would be a great time for a rewrite of the UNIX Finger tool to solve a problem like this. Real-time client/address lookup and can be protected with some kind of pub/private key.
Ping - Power - Pipe : Ask everything you need. If a datacenter is unwilling to share or discuss who they are, what they do and what they offer then walk away. Colocation is a buyer beware environment.
Here's a VERY ROUGH list/braindump of questions that AT THE VERY LEAST you need to know before placing equipment with the colocation provider/datacenter.
Tier I,II,III, IV datacenter? Who owns the datacenter? Investors? What's your ASN number(s)? Carrier neutral facility? How many connectivity providers are present in the data center? Does data center run BGP over these providers? IP Transit providers - Bandwidth Pricing? Overage pricing? Straight $mbps/month? Who manages your network? Ip allotment? Assignment procedure? High density for micro vms(Heroku style)? 200 VMs per host meaning 200IPs per vm. Swip/rwhois updates on assignments? Cross-connects? Cross connect pricing? Charges? Local loop(last mile connectivity) charges? BGP support? Is our traffic on a private/separate v-lan from your other customers?
Infrastructure? -Redundancy in detail -Brands -Networking -Connection -Power. Maintenance programs?
A/B feeds from two separator breakers or breaker panels or better yet two Utility Power Service Provider if they are truly A/B feeds. A/B Diesel-Generators? Additional fuel storage on site? Is a PDU included? If so, how many outlets and is it accessible from the web or telnet? What type of hand off/drops to your rack will you be provided (Ethernet)? Are there raised floors? Are there any fire suppression systems in place? Physical/Video Security? Biometrics? Screening of employees?
Insurance requirements to colocate equipment with you?
On-site visit requirements? 24x7 staffing? Remote Hands - Cost and Abilities? What's included? Shipping/Receiving of hardware?
Sas II 70 or SSAE 16 certification? Audit available for review? -Common practices -Staffing -Security -Emergencies - Escalations -Contacts Outage alerts? Notifications through Twitter or similar offsite status page? RFOs for past outages? What's been your corrective action?
Power density per rack? 80% rule or true metered? Can you rack the equipment for us? Who provides cabling? Types of rails for servers? Billing-95th or other? Rack size? Partitioning available? 4u/10u/Quarter/Half? Cages? Lockable or baker's racks? Shared with others?
Finally, ask for a listing of ALL fees.
Now we just need a smartphone-based AS/400 and we're back in the 90's again.
--- At Lang.NEXT 2012, several conversations happened in the "social room", which was right next to the room where sessions took place. Our dear friend, Erik Meijer, led many interesting conversations, some of which we are fortunate enough to have caught on camera for C9. We'll begin with these Expert to Expert episodes with a "standing" conversation (participants stand comfortably close to the whiteboard) with computer scientists Carl Hewitt, Visiting Professor at Stanford University, creator of the Planner programming language, inventor of the Actor Model (the topic of this conversation), Clemens Szyperski, an MSR scientist working in the Connected Systems Group and Erik. ---
no-ip.com - changeip.com - freedns.afraid.org
http://tools.ietf.org/html/draft-montenegro-httpbis-speed-mo...
If encryption is required, I can see many complaining about the burden of certificates. Will this finally drive an alternate solution such as Moxie Marlinspike's Convergence project to help us do away with the certificate authorities? Also, I can see a huge increase in the number of IP addresses unless some serious progress is made with SNI. On the otherhand, that might finally open the floodgates for widespread IPv6 adoption.
If DDOS attacks are now being organized by nation states, how would you keep your business running? I don't think Name.com did anything wrong here.
Substitute Lua with Tcl and it would still be underwhelming.
Relevant to this discussion : Joyent releasing SmartOS http://news.ycombinator.com/item?id=2887170
AMD support from SmartOS wiki: http://wiki.smartos.org/display/DOC/SmartOS+Technical+FAQs#S...
http://www.iana.org/assignments/smtp-enhanced-status-codes/s...
http://tools.ietf.org/html/rfc3463
I'm guessing most e-mail client providers just haven't found a reason to prettify the responses. If anyone is up to the task, then can you explain PGP/GPG so the entire world can also understand and use that?
From Slim: (http://www.slimframework.com/)
require 'Slim/Slim.php';
$app = new Slim();
$app->get('/hello/:name', function ($name) { echo "Hello, $name!"; });
$app->run();
From Silex: (http://silex.sensiolabs.org/)
require_once __DIR__.'/silex.phar';
$app = new Silex\Application();
$app->get('/hello/{name}', function($name) use($app) { return 'Hello '.$app->escape($name); });
$app->run();