lox

His reply was snarky and created a false dichotomy. The 90% usecase exists in between “lightweight VM’s” and google scale horizontal app deployment. Consider that the former is just as much an outlier as the latter. This post is about a pragmatic minimal Ubuntu base image, which would meet neither case well.

It’s vastly more accurate than your statements. Look at the domestic violence statistics for most first world countries.

Care to expand on that? This guys by all accounts seems like a truly horrible human.

This will be amazing for plugins!

We took this approach at 99designs with aws-vault and bastion accounts: https://99designs.com.au/tech-blog/blog/2015/10/26/aws-vault...

With good reason, they are both out dated and insecure.

Yeah, I'm wondering too.

Anything that increases team productivity significantly. If my team of developers is > 10 then I'm probably spending about 100k per year in supporting tools:

- source code management - server monitoring and metrics - payment processing - testing tools - continuous integration tools

Any of those could easily cost 10K/year, or more, depending on what the team is doing and how fast they are growing.

Beyond that, anything that ties back to revenue. Email marketing, PPC, SEO. Also possibly things that optimize finances, analytics or anti-fraud.

I'm fine with subscription pricing provided the vault format remains published and and accessible and I can control the storage of my vault files if I choose.

I'd even encourage it, I'd like AgileBits to be a long term viable business.

Things might be considerably different if people weren't so litigious when these thing go the wrong way. I can understand doctors being extremely hesitant to suggest experimental therapy if it means they might be bankrupted and unable to work.

Is there a strong correlation between company management and ops practice?

He was older and in a position of power. She was young and an intern. What initially seemed funny changed after some time because she got older and got some context and understood why it was inappropriate and unacceptable. The manager that overheard the jokes understood the context and what could have happened, which is what a manager should do.

Is it really so surprising that someone can over time process an event and see it for what it actually was, rather than how they first reacted to it?

Do you mean innovation and driving forward the web? How else do things improve?

They penalize slow sites, its very different.

Unless part of the reason you dislike Jira is that customizability.

I'd love to figure out how to use Mitmproxy to intercept traffic from Docker containers for debugging on macOS, I've never been able to make it work.

That statement is incredibly hyperbolic, the defaults work fine for quite considerable scale (many millions of requests a day). Have used golang with http defaults in multiple high volume production deployments and rarely needed tuning.

Absolutely, but one tool is better than two tools. If it's good enough for most cases, then great, stick with the std library. It makes testing it and deploying it easier. When it gets more complicated, add Nginx.

On the contrary, it makes a lot more sense to build something in technology you have expertise in than it does to "use the right tool for the job". I'd rather have less tools to maintain at the expense of them being slightly worse fits.

It's incredible standard library is probably the thing that motivates me the most. Beyond that, fast builds, good package availability, easy to compile for multiple platforms and great community support.

I'd say the std library is built exactly for the "plebian programmer" but such that it scales up well to larger use cases, pretty much exactly how the language itself is designed. I think how they've responded to vendoring package management is a great example of how they do take external feedback, but don't make knee jerk changes, and I really appreciate that.

Don't feed the trolls :) From the article, the author concludes that it's not good for anything where you need performance-critical parts of the code running via cgo. That has certainly not been my experience, but I'd love to hear other people's experiences.

I posted this because I was interested to see if anyone else had experienced gaps in the golang `crypto/tls` library. The original author is pretty scathing about Go's implementation, but my impression thus far has been that it's an amazing quality part of the Go standard lib.

I'd take it any day over openssl, that is for sure. I wish the author had published methodology on the benchmark comparison, would be interesting to dissect that.

That is a false dichotomy. The reality should fall in between, learn enough to understand some of the design choices you make, but don't overcook it.

I find it very annoying when people do this, it makes it very hard to gauge what sort of issues the software has and how the author responds to them.

It doesn't seem like it's more work, although you are right in that it's probably more user friendly as you don't have to wait for keys to propagate to various servers before you can login. We've previously used a cron script to pick up authorized_keys from a centrally published source, I guess that same infrastructure just moves to the CRL.

Makes sense. I missed that section, much clearer now, thanks. Any plans to release more details on how the bastion hosts are configured? Seems like that would be the complex bit to get right.

To be clear they said they "could" use RevokedKeys. See my reply further down for my line of thinking.

I get that, but you need to update the revocation list on every single server. At which point you've just undone the benefit of not having to manage `authorized_keys` on each server.

Interesting, so I'm assuming this wouldn't work for staff that roam with laptops?