dhess

Agreed that the current Terraform provider is shockingly bad. It’s changed my estimation of Cloudflare’s technical competence, drastically. The automated migration from v4 still doesn’t work and it’s been, what, nearly a year since v5 was released? (This is not to mention I’ve never used a Terraform provider that made me run external migration tools in the first place.)

Thanks! I was also considering Mythic Beasts.

Where/with whom are you colocated? I’ve been looking around in London and everything is shockingly expensive.

Can anyone recommend an Emacs mode for this model?

Thanks!

What performance numbers are you seeing on pods with Ceph PVs? e.g., what does `rados bench` give?

What’s the plan for dealing with the Terraform CDK?

Same here, but note that in this post on the Google Security Blog:

https://security.googleblog.com/2023/05/so-long-passwords-th...

the first sentence reads, "Starting today, you can create and use passkeys on your personal Google Account." (Emphasis mine.)

I've seen this recently, but only in the last few months, after years of using Little Snitch with Spaces, so I think it's a new thing either with the most recent version of Little Snitch, or macOS Ventura.

Do you mind spelling out your NAS’s specs? Chassis, motherboard, etc.?

Hackworth | Software developer | UK REMOTE | Full-time (fixed term) | https://www.hackworthltd.uk/

Hackworth Ltd is a private limited company based in the UK. Our first product is a novel, web-based visual programming language designed to teach functional programming to beginners. Our tech stack is Haskell (backend) and TypeScript + React (frontend).

We're looking for a frontend web developer to join our team and help us ship this product. You should have at least some experience developing & testing bespoke, highly interactive UIs. Experience with D3.js, Visx, or similar visualization libraries is a bonus, but not required.

This is a full-time role on a fixed-term contract (until June 1 2023). Depending on how our product launch goes, there may be an opportunity to switch to a permanent role at a later date. Due to the product schedule and the amount of time required for someone new to ramp up, we need someone who can start more or less immediately.

We are fully remote within the UK. You must be eligible to work in the UK, as unfortunately, we can't sponsor visas at this time.

The full job posting is here, along with useful information about what it's like to work at Hackworth:

https://www.hackworthltd.uk/jobs/20220601/

We hope to hear from you! If you're interested, please email careers@hackworthltd.com.

Hackworth | Software developer | UK REMOTE | Full-time (fixed term) | https://www.hackworthltd.uk/

Hackworth Ltd is a private limited company based in the UK. Our first product is a novel web-based visual programming language designed to teach functional programming to beginners. Our tech stack is Haskell (backend) and TypeScript + React (frontend).

We're looking for a frontend web developer to join our team and help us ship this product. You should have at least some experience developing & testing bespoke, highly interactive UIs.

This is a full-time role on a fixed-term contract (until 1 May 2023). Depending on the success of our product launch, there may be an opportunity to switch to a permanent role. Due to the product schedule and the amount of time required for someone new to ramp up, we need someone who can start more or less immediately.

We are fully remote within the UK. You must be eligible to work in the UK, as unfortunately, we can't sponsor visas at this time.

The full job posting is here, along with useful information about what it's like to work at Hackworth:

https://www.hackworthltd.uk/jobs/20220601/

This role is a great opportunity to help create an innovative, highly interactive user interface, while also making a positive impact on the world by helping kids learn to program.

We hope to hear from you! If you're interested, please email careers@hackworthltd.com and it'll come directly to me.

I'm in the process of doing this now. You can close accounts from Control Tower without needing to log in as root to each separate account, adding a credit card, removing it from the org, and then closing it manually.

However, you can only close them from Control Tower at the rate of 2 to 3 per month, due to a hard limit quota which cannot be changed, even if you request it. Needless to say, this sucks when you've followed AWS's own best practices and created lots of accounts using Control Tower's "vending machine."

AWS's archaic account model is one reason we've switched to GCP.

Hackworth | Software developer | UK REMOTE | Full-time (fixed term) | https://www.hackworthltd.uk/

Hackworth Ltd is a private limited company based in the UK. Our first product is a novel web-based visual programming language designed to teach functional programming to beginners. Our tech stack is Haskell (backend) and TypeScript + React (frontend).

We're looking for a frontend web developer to join our team and help us ship this product. You should have at least some experience developing & testing bespoke, highly interactive UIs.

This is a full-time role on a fixed-term contract (until 1 May 2023). Depending on the success of our product launch, there may be an opportunity to switch to a permanent role. Due to the product schedule and the amount of time required for someone new to ramp up, we need someone who can start more or less immediately.

We are fully remote within the UK. You must be eligible to work in the UK, as unfortunately, we can't sponsor visas at this time.

The full job posting is here, along with useful information about what it's like to work at Hackworth:

https://www.hackworthltd.uk/jobs/20220601/

This role is a great opportunity to help create an innovative, highly interactive user interface, while also making a positive impact on the world by helping kids learn to program.

We hope to hear from you! If you're interested, please email careers@hackworthltd.com and it'll come directly to me.

Hackworth | Software developer | UK REMOTE | Full-time (fixed term) | https://www.hackworthltd.uk/

Hackworth Ltd is a private limited company based in the UK. Our first product is a novel web-based visual programming language designed to teach functional programming to beginners. Our tech stack is Haskell (backend) and TypeScript + React (frontend).

We're looking for a frontend web developer to join our team and help us ship this product. You should have at least some experience developing & testing bespoke, highly interactive UIs. Experience with D3.js, Visx, or similar visualization libraries is a bonus, but not required.

This is a full-time role on a fixed-term contract (until April 1 2023). Depending on how our product launch goes, there may be an option to switch to a permanent role sometime down the road. Due to the product schedule and the amount of time required for someone new to ramp up, we need someone who can start more or less immediately.

We are fully remote within the UK. You must be eligible to work in the UK, as unfortunately, we can't sponsor visas at this time.

The full job posting is here, along with useful information about what it's like to work at Hackworth:

https://www.hackworthltd.uk/jobs/20220601/

We hope to hear from you! If you're interested, please email careers@hackworthltd.com and it'll come directly to me.

I’m glad it’s not just me — I also have issues with iCloud Private Relay and DDG. I’m using AdGuard, so this DDG problem is not specific to 1Blocker (nor to AdGuard, which I was wondering about). I’ve had the exact same problem across 3 different ISPs, as well; and I’ve recently switched from running my own local DNS cache to using NextDNS, yet the issue persists.

The problem only occurs on macOS. My iOS devices use the same AdGuard settings, and the same DNS, but iCloud Private Relay is completely reliable on that platform.

(The macOS Safari hanging issue has recently begun to affect GitHub in addition to DDG, which is unfortunate.)

That’s what we do, more or less: our build step is a no-op and we simply point Cloudflare Pages to the static site directory in the repo where everything is pre-rendered.

Deployments are still painfully slow.

I literally just enabled this 1 hour ago, for unrelated reasons.

However, for those reading along, initially the 1Password web interface for my account only offered the choice of setting up a TOTP authenticator. I completed that, and still saw no option for enabling a FIDO/YubiKey device. I then went into the 2FA settings for my account, toggled the option for YubiKey support off and then on again, and returned to the 2FA settings page. Only then did I see the option to enable a YubiKey.

I was then able to add my YubiKey and I can confirm that it's working with my 1Password account as a 2FA source.

> and nobody will accept a Google Voice (or most VOIP really) number as valid.

Apple will accept a Google Voice number as a trusted phone number on your iCloud account, and it even works with their SMS 2FA, in the few places where they still support that.

My SB24 is going from 18.47 Euro to 29.00 Euro.

I've heard good things about TP-Link's Omada EAP series. Did you happen to look into that platform?

Skypack looks interesting. However, as I come from a Nix background, I'd like to a) pin my dependencies and b) do a hash check at install/download time to ensure the pinned package hasn't been modified behind the scenes.

Based on https://docs.skypack.dev/skypack-cdn/api-reference/pinned-ur..., it appears that you can do a. with Skypack, but this requires a manual step: look up the package in the CDN with curl or your browser and copy-paste the URL into your JS import statement. Is there any tooling to automate this?

Also, there appears to be no way to fail the build if the contents of the pinned URL change. Are Skypack users relying on Skypack to ensure that can't happen?

Prior to AWS SSO and Control Tower, we followed best practices and used an "identity hub" account in our organization, tied to our IdP via SAML. Users authenticated via SAML into their identity hub role, and that role could then `sts:AssumeRole` to any other roles they needed to do their work.

We've since adopted AWS SSO and Control Tower, and to address the problems with it that you mention, we configure the SSO permission set so that the only thing the user can do is assume their identity hub role. Because you can chain `AssumeRole`, it's an extra indirection, but everything works just like it did before.

So while I agree that AWS SSO is not the right place to configure fine-grained permissions, I think that overall I prefer the benefits of Control Tower and the relatively easy SAML integration provided by AWS SSO over the previous bespoke SAML configuration we used. It's a bit inconvenient to set up the extra hoop to jump through to go from SSO permission set to identity hub IAM Role, but that's a one-time cost and is trivial to maintain.

That, and I often have multiple projects open at once. There's a note in the Magit manual about this and how it affects performance, but unfortunately, the workaround means that buffers don't get refreshed and you might see stale information unless you perform a manual refresh.

Unfortunately, it's pretty slow on macOS, as well. I love Magit, but there are times when I feel like it's hindering me more than helping due to the performance.

Anyone know if they install ARD for remote desktop access? It's pretty difficult to administer a Mac remotely without MDM and/or ARD.

We have a fairly large Nix binary cache in S3, with not insignificant egress fees, and I'd love to try this out as a replacement.

Interesting! Is there a site that documents which off-the-shelf switch models work with DSA?

As someone who has run his own mail servers since 2000, and still gets his email delivered to people's spam folders (even when I've emailed them in the past, or simply replied to their original message), this is very interesting, as I always enable plaintext outbound email.

I'll have to give this a try. Thanks for the tip!

I have, on macOS, and somehow, it has much much worse lag than Mitsuharu Yamamoto's Emacs "Mac port," [1] which is still based on Emacs 27.2. The native comp version was so slow that I gave up and switched back to Mitsuharu's port, which is snappy enough for my needs even without the native compilation bits.

From what I gather, mainline Emacs was adversely impacted by changes in Mojave. [2][3] The end result, for me, is that any gains in the native compilation are swamped by the macOS issues. I'm hoping that Mistuharu rebases his work on the native-comp Emacs soon, so that I can get the best of both.

[1] https://bitbucket.org/mituharu/emacs-mac/src/master/

[2] https://www.reddit.com/r/emacs/comments/faz1fm/seeing_a_flas...

[3] https://emacs.stackexchange.com/questions/59966/is-it-possib...