cptnbob

Ironically this happened to me due to a card expiry fuck up.

Too much vendor lock in. Will keep my VMs thanks.

These are possibly great but much like my foray into DVORAK layout, there's something to be said for consistency of layout. You just sit down and use it if it's the same as everyone else's. No embarrassing prodding and arguing with a basic keyboard. This was a killer for me in the end so I bought a shit Cherry G83 about a decade ago and have used that ever since. $20 well spent. Wonderful keyboard.

Yes. I think you've just been through a couple of cycles now like myself. Cynicism comes from watching the last disaster unfold :)

That's just embedded systems that have always been there though isn't it? Someone just stuck a marketing label on it.

Does it call 999/911 when it pours boiling water in your lap :)

100% this. I haven't found a genuine IoT device that is useful. They always remind me of this scene from The Fifth Element:

https://youtu.be/SnzzWGcdMqY

Literally ever device has dubious utility and security so far.

HTML! And you get to do it once for both...

It was probably limited by the SATA interface speed back then.

What's even worse is that I recently jumped into asp.net 5 and tripped over three build systems and a pile of cack just trying to get it off the ground. Now msbuild as well!?!

Also its not even the right tool to build .net stuff. Add the shoddy dependency resolution steps plus the shitty performance of NTFS on lots of small files (MFT contention) we have to wait 8 minutes for a build. I wrote my own system in powershell and we're down to two minutes. Also, powershell sucks awfully too but that's another story.

Frustratingly I've played around with golang on and off for around two years now. I've not written anything significant in it yet (lack of opportunity more than anything else). You know what's cool about it?

I mastered the entire build system in about an hour and its the same on all platforms and it just works and works quickly.

MS: go look there for some inspiration. Building stuff for the CLR is horrible.

Now I can hate every moment of its existence on more than one platform!

Having dealt with it for years, it's unadulterated pain and bad performance and nothing else.

They paid for our modem setup so meh ;-)

One of our clients still has a DOS box connected to a 14.4k modem that we have to drag EDI interchanges off. You wouldn't believe how much it cost to get a modem and POTS line installed in our DC so we could talk to it. There's a windows service written in .net that talks to it via a serial port and POSTs it to a REST endpoint.

He could also separate code and configuration as per the docs but I suspect the hubris excludes bothering to read them...:

http://docs.aws.amazon.com/AWSSdkDocsNET/latest/V3/Developer...

1. He stored credentials in source control rather than using configuration profiles as specified in the AWS SDK documentation.

2. He pushed code to a new repository without verifying the security configuration of the created repository (granted the tool made it easy to do this but you should create a repo, verify it, then push code).

3. He used his master AWS account key/secret in the code which gave global access to everything.

4. He didn't use IAM credentials with a restrictive policy set to just access the resources required.

No, clearly not security concious.

I'm a solution architect in the financial services industry and have been for 16 years. Never do I assume I know what the hell I'm doing.

AWS SDK for .Net supports named profiles for VS so your source check in only contains a profile name. If you hard coded your IAM or account keys or stuck them in the app.config you're simply doing it wrong. There is no excuse. It's all here: http://docs.aws.amazon.com/AWSSdkDocsNET/latest/V3/Developer...

Also if you use a proper IAM profile locked down to specific resources then you wouldn't expose your entire account. The author stated he didn't use EC2 so why wasn't the key/secret pair an IAM account with a policy set for minimal access?

What I'd worry more about is that the VS bug exposed private source code, data and proprietary intellectual property.

We use github and I worry every day someone will public fork one of our repos by accident. That would be a grave fuck up but it's waiting to happen. We should have stuck with centrally controlled active-directory integrated SVN from a security perspective (even if it is a pain in the ass).