HNHacker News
TopNewBestAskShowJobs

schlarpc

653 karma · joined July 29, 2014

Senior security engineer at Amazon.
submissionscomments
schlarpc··on AWS IAM Policies in a Nutshell
AWS uses this isolation pattern internally for just about everything, for what it's worth.
schlarpc··on Show HN: A Go Library for Better Access Control
Just to give an example of the pain that can be caused by NotAction in practice: https://www.reddit.com/r/aws/comments/3recc9/this_iam_policy...

This policy looks reasonable to a casual observer, but actually gives * access to everything in the account. IAM policies are _hard_.

schlarpc··on Prophet: forecasting at scale
Moderately relevant short story: https://www.facebook.com/notes/robin-sloan/julie-rubicon/985...
schlarpc··on Announcing SSL Labs Grading Changes for 2017
Not quite as feature rich or opinionated, but SSLyze is decent and not difficult to modify for your use case:

https://github.com/nabla-c0d3/sslyze

schlarpc··on What Happened to Howard Stern?
If you're a SiriusXM subscriber there's a catalog of 252 interviews available on demand: https://player.siriusxm.com/

The list is also available without signing up here: http://www.siriusxm.com/servlet/Satellite?c=SXM_PageDetail_C...

schlarpc··on Actually, Slack really sucks
I don't particularly like Discord (which I assume you meant) because I don't see a monetization plan for them that doesn't screw over their users. With Slack, I know that they have enterprise customers that essentially pay for the free users. Discord has nothing like that, and I can only foresee two outcomes: running out of money or selling out their users. Charging for their service won't really work, either, because gamers are a pretty price-sensitive group in my experience and Slack is still free.
schlarpc··on AWS X1 instances – 1.9 TB of memory
Don't know what hardware AWS is using, but Ark has server boards supporting 1.5TB, which is close enough to make 2TB believable: http://ark.intel.com/products/94187/Intel-Server-Board-S2600...

Edit: Supermicro has several 2TB boards, and even some 3TB ones: http://www.supermicro.com/products/motherboard/Xeon1333/#201...

(Disclaimer: AWS employee, no relation to EC2)

schlarpc··on Show HN: Intro.js Hints
I recently used Milligram for the first time and was very disappointed that the grids were not responsive. Seems like a real miss in an otherwise completely solid framework.
schlarpc··on Amazon Provides DIY Echo Plans for Raspberry Pi
I'm able to use it on an account with only a device generated via the Alexa Voice Service. I made a device profile on the developer site, then authenticated to it via the OAuth flow.
schlarpc··on I bought some awful light bulbs so you don't have to
Beware: the bridge for Milight bulbs also communicates outbound to a mystery server for Internet control of the bulbs. The actual RF protocol has been documented and implemented as Arduino code, though, which is what I use for my installation.

https://github.com/henryk/openmili

schlarpc··on 18F: CSS coding style guide
No real experience here, but the documentation presents SCSS samples first with a small textual toggle button to view the Sass syntax. If I were learning Sass, that'd be a big indicator to use the SCSS syntax.
schlarpc··on Amazon has no idea how to run an app store
> Alexa is not compatible with EC2 backends

Source on this? I know last time I played with it, they weren't doing SNI (in 2015, what?) but I've never heard of it not being able to hit EC2 IPs.

schlarpc··on Run your own high-end cloud gaming service on EC2
The OTOY AMIs do something similar to this. They use the GPU's onboard encoding as far as I know, but they don't stream through Steam - it goes through some custom HTML client.

https://aws.amazon.com/marketplace/seller-profile?id=795808b...

(Disclosure: AWS employee)

schlarpc··on Tunneling Internet traffic over FB chat
I did something very similar to this last summer, written in Python. No idea what state the code is in at this point because it's been months, but here's the code I had sitting around: https://gist.github.com/schlarpc/86e20aa3f3aaf3d78269
schlarpc··on “I am not authorizing you to release a Ruby port of Metaphone 3”
There is nothing to stop a software developer from taking the "other disciplines" FE and the "software engineering" PE.
schlarpc··on JPG Internet
I wrote a VPN-over-Facebook tunnel a week or two ago with basically the same motivation. Stupid and slow as hell, but I still want to try it out with the $12 data plan sometime.
schlarpc··on 404 Simulator
Easter eggs:

If you click 4 links on the side of the Start menu, it gives a BSoD.

If you click the picture of nyan cat 8 times, it opens nyan.cat in the fake browser.

If you let it sit for 3 minutes, the background turns black and displays "This copy of Windows is not genuine".

← PreviousPage 2 of 2