Or as I’ve explained to other people it’s great that AAA will tow me a hundred miles if I need it, but if I can’t call them then what good is it?
4,913 karma · joined August 25, 2015
Or as I’ve explained to other people it’s great that AAA will tow me a hundred miles if I need it, but if I can’t call them then what good is it?
Since I was working in an environment where development teams tended to obtain root credentials from CI-CD pipelines and use them to change all the permissions on production servers or fill the storage with database dumps, I ditched teleport, ssh, and logins altogether! We followed the serverless model and there are no logins to any compute resource. The only way to bring data in is via unprivileged ci/cd pipelines or the application's API, the only way to get data out is via stderr or writing to a resource like S3. Nothing runs with privileges, there is no ssh, there are no admin-only access methods. Overnight that eliminated almost everything mysterious or unreproducible. No more permissions issues.
They would shut down every single process on the server and bind the trading trading app to the CPUs during trading hours to ensure nothing interrupted.
Electrons travel slower than light so they would rent server space at the exchange so they had direct access to the exchange network and didn't have to transverse miles of cables to send their orders.
They would multicast their traffic and there were separate systems to receive the multicast, log packets, and write orders to to databases. There were redundant trading servers that would monitor the multicast traffic so that if they had to take over they would know all of the open positions and orders.
They did all of their testing against simulators - never against live data or even the exchange test systems. They had a petabyte of exchange data they could play back to verify their code worked and to see if tweaks to the algorithm yielding better or worse trading decisions over time.
A solid understanding of the underlying hardware was required, you would make sure network interfaces were arranged in a way they wouldn't cause contention on the PCI bus. You usually had separate interfaces for market data and orders.
All changes were done after exchange hours once trades had been submitted to the back office. The IT department was responsible for reimbursing traders for any losses caused by IT activity - there were shady traders who would look for IT problems and bank them up so they could blame a bad trade on them at some future time.
One of my favorite stories to retell is my wife had a job there also and she had a medical issue from a car wreck. Her boss said the bank couldn’t function if she was doing physical therapy two hours a week, basically fired her, all the paperwork was drawn up, sent to a manager in London to sign. The manager in London was “too important” to sign things so he just leaves it for someone else to rubber stamp in his name the next day. Meanwhile my wife goes across the street (literally), gets a doctor to sign her disability paperwork, walks it into HR - and instead of doing physical therapy two hours a week she was on paid medical leave for almost a year. Her termination paperwork did get signed eventually but because she was on a protected leave they had to throw it out.
Have a separate account for Youtube then your primary e-mail in case they decide to shut down your entire account your not completely cut off.
Try to have a way to communicate with your viewers outside of Youtube. If the algorithm does kill your channel then often times the only way to get it restored is via social media outrage, and you need a way to ask your followers to be outraged. Fund raise via patreon, have a reddit or discord community, release your videos early on a different platform, etc.
Don't be afraid to refresh old content periodically - everything old is new again.
The biggest issue that never was never resolved was on one hand you have the people who don't want people controlling what they read and say - and on the other hand you have the jerks that want to abuse that. If you've ever logged into a darknet forum and someone has uploaded hundreds of autopsy photos anywhere they could upload photos except the "autopsy photos" area, then that is exactly what used to happen on Usenet. It's probably the same guy doing it. Though personally I think having to do the occasional bulk delete is worth preserving freedom of expression.
But I would also note that the 70s gave us both Star Wars ('77) and Alien ('79). Of the two of them I actually think Alien is the most significant because it was the turning point where we lost the rubber suits, army guys, professors making long winded explanations, and hormonal teenagers and started getting the darker and more serious sci-fi.
Disney's The Black Hole also came out in '79 and it is an enjoyable movie if you don't know anything about physics. It is a serious attempt at sci-fi and kept me on the edge of my seat when I first saw it.
I read that Jamie Dimon's office is a fully decked out apartment on Park Ave (NYC) so for all his griping about remote work, he essentially works from home full time.
When I was there the gimmick was that you either relocated to a third world country and took a local wage, or you resigned.
At some point the banks should step in and say hey, there is no way this property is worth $300k, $600k, $900k - it will never sell at that price again, none of the local industries pay well enough to have a $7k per month mortgage payment, if the loan defaults we are going to take a bath. However the banks don’t do that, they just say California idiot has money to blow, give him the loan.
And of course the California idiot is going to have problems also when he wants to move in 2-7 years and finds out nobody can afford his house.