scient

A lot. Quite different in technology as well. None of these new tools really work just off of signatures.

The whole original point of what underpins FIDO2 was device locked, unphishable credentials. Wanting to export and move passkeys between devices is kind of counter to that. And I would argue vendors completing the attestation process are much more trustworthy than storing your own keys god knows where.

Services, or even microservices, are more of a strategy to allow teams to scale than services or products to scale. I think thats one of the biggest misconceptions for engineers. On the other end you have the monorepo crew, who are doing it for the same reasons.

On your note about resiliency and scale - its always a waste of money until shit hits the fan. Then you really pay for it.

Large tables take hours, if not days. I attempted a test case on AWS using souped up io2 disks (the fastest most expensive disks they have) and a beast of a DB server (r5.12xl I think) and it became abundantly clear that at certain scale you won't be doing any kind of in-place table updates like that on the system. Especially if your allowed downtime is one hour maintenance window per week...

Rails migrations really fail to be viable at scale. And its not really because of the migrations in Rails, its because changes in PostgreSQL get very very expensive. Things have gotten better in PG 15, but its still not quite there yet.

I've ran into an integer PK being almost exhausted in values twice now. In one of these cases I used pg-osc to rewrite a 8TB table on disk without downtime over a period of a week to fix the issue. In the other case it was about 6TB within 2 days. Its doable, but the amount of planning and time it takes is non-trivial.

I so far have no found any other viable solutions either. I keep hearing about logical replication but I haven't seen a great real-world solution at scale so far.

Self hosting likely makes it much much worse. I'm willing to bet a lot on the fact that most authors of these comments do not have any kind of experience with serious security or compliance programs.

Not just one...

And Google is trying to push their identity products, but they are very far from being mature enough for enterprise needs.

I generally suspect folks making comments like this are really not familiar with the products and their uses.

Seems like an Elon bootlicker babbling more than anything.

Noone. But the ones whining here about their employers seem to think its not hard, without actually trying it.

If your compensation consists of base pay plus a bonus, that is usually tied to performance, then why should you get the bonus payout if you don't meet expectations?

Thats absolutely not true.

If the company is not public, there are no dividends. Crazy that stuff like this needs to be explained on a tech site.

Same one that HTML7 solves.

> Like providing people across the world with access to a financial system thet can't be denied from?

And what a lot of people seem to realize is that there are reasons for this, the controls exist for a reason. Allowing everyone access is not necessarily a good thing across the board. That realization will at some point be forced though, which leads into regulation in some form, which will takes us full circle again...

So you take the money, walk away and someone else pays for it?

Not all co-founders are co-owners. He likely owns below 5% of shares.

Unfortunately I think the issue not AWS here. You say you lost interest when it became a frustrating exercise, I read it as you lost interest once you realized setting up a cloud environment is not trivial.

With H1B you need to prove that you are unable to hire anyone from the US for the given position, including actually having to show that you have interviewed candidates and had a job listing up. Alongside having to pay a salary thats above the market average for the position.

Am Estonian and agree with that. The investments via EU have yielded awesome results over the years.

So what do you propose as the solution then that works better? This kind of complaining is neither useful, nor constructive.

Correct me if I'm wrong, but its also nowhere as mortal or serious as these others you are listing.

He has done enough damage with his "work" on leaks with Russia. No thanks.

For a developer who has not done React before - this looks super convoluted for some reason. Global functions with constants defined in another function, that act as ... methods? I'm lost :D

Got any examples for these "great" decision? So far much everything he has done is a complete disaster or just flat out idiotic.

The pricing page is pretty confusing. Is the price per engineer per month? Whats the difference in engineers vs accounts?

Meanwhile back in the real world...

I think he is pretty spot on. JS community is infamous for the constant replacement of tools with the next shiny thing, which are all built on a house of cards (one-line npm packages). I would rather see some more serious tools being put out and matured instead of this constant running around.

My own personal theory is that because the barrier of entry is so low, people get a little too excited about being a contributor and solving a problem "differently" (sometimes before even understanding the problem space well enough). In short - lot of it is inexperience.

Not sure what the complexity here would be, you can set up nginx with some simple DNS (or even hosts file) stuff and run HTTP locally.

Something like puma-dev does this pretty painlessly out of the box too. Running a container just for that seems frankly overkill.

What moral act? Working for Russia and helping them push their agenda - willingly or out of ignorance? You are blind if you thing Assange and Wikileaks was some kind of a knight for truth.

Whats your point? That its pointless to use 2FA because of it not being a perfect protection for all scenarios?