dopp0

I wish I was as hopeful as you, for real :)

because the intent of the post is exactly to show that it can be served, not that it can handle a huge amount of traffic HN causes.

why it would be a 'false' sense of security if it's not exposed? I don't seem to get it as 'security through obscurity' at all. sincere question, I'm not a network guy.

how do you know I'm not one? I'm appaled I'm not getting recognized

A botnet? A TOR exit node?

The article doesn't focus solely on the tweet, but is considering this typo from the tweet to be common. About the CloudFlare, not much to say. Poor planning it is...

but never forget that AWS uses us-east-1 to host core services that, when they go down, they take almost the whole thing down, no matter which region.

gRPC being an RPC, it avoids the overload of HTTP by miles, achieving low latency as well.

you mean "old content", right? (:

> I believe Facebook uses a single directory of files now as best practice Do you have any sources for this?

What you don't consider about the MVP is that you can release early/release often and then re-evaluate and improve upon it based on data, not your mind or guesses.

Taking 18 months to release it might cause you to waste a lot of valuable time with features/requirements that does not deliver any real value to your customer, and the competitors can gain this space delivering a much less complete product, with less quality, but with the right features because of MVP concepts.

Not teasing in any way, but just 2 cents to consider, as I see a LOT of issues with the MVP approach.

There is a series on medium called "100 Days of DevOps" [0]

It might be a good start at least for topics to look into before anything else.

[0] https://devopslearning.medium.com/100-days-of-devops-day-0-4...

but you just track visits? You should track custom events to get actionable data, right? at least that's what we do: map which events we want, send it to GA and then get the reports to support decisions.

if you're worried about legal, go for separated accounts.

makes you wonder how bad a country has to be in order to force one to go to "another country run by a criminal syndicate" just to expose shit that should never happen. It's the spiderman triple meme all along.

That would be a wonderful name for Microsoft back in the day. maybe some extra letter there, but that's fine

on the login screen, you have a gear icon on top left corner (at least for the chrome extension), there you can add the custom url for your hosted instance.

> (although log4shell did originate there) WHAT?

but when you have a lot of processing, lambdas can get really expensive, more than dedicated ec2 machines

I miss that a lot. it was one of my contacts with programming language, close to C. #pairc ftw

all of that loses to freezing an account and making your customer lose business, right? I can imagine having a bank account frozen, how much money and customers you can lose because of this.

it's basically a cli to create those. just that.

Not to be picky about you and the extension, but the fact that a lot of extensions need this kind of access to critical access, such as AWS. It takes a LOT of trust to run those. After that sleeping tabs extension fiasco, I'm done trusting anymore extensions like this.

It's nice to have improvements on website apps like this, but the risk is not worth it.

This is pretty common in Brazil, there is a lot of people that are able to master the syntax, but cannot fully understand an article in English. That's why I always recommend then to have at least invest a little in technical English, as the resources in Portuguese usually are scarce and outdated.

you just gotta try poking it