piotrkubisa

Indeed. I don't get it why `ip` has -brief which is not a default behavior and why -verbose flag does not exist. Also there could be a -no-color instead of -color flag.

Yup.

http://archive.today/2018.05.24-124106/http://gdprhallofsham...

https://web.archive.org/web/20180524111054/http://gdprhallof...

Yes, it adds a new custom types AWS::Serverless::* [1] and new Globals section [2] and it is really pleasant to work with for basic, not complicated API. It is transformed into CF template via samtranslator [3] (recently open-sourced) so it inherits a lot from CloudFormation but also that's why I encountered differences between SAM and CF types.

[1]: https://awslabs.github.io/serverless-application-model/inter...

[2]: https://awslabs.github.io/serverless-application-model/globa...

[3]: https://github.com/awslabs/serverless-application-model/tree...

I were using SAM for month or two and then switched back to CloudFormation, because I felt limited (not all features of API Gateway were implemented, duplicated stages, problems with instrict functions). However, I watch their GitHub repository for changes and I noticed many missing features are implemented on AWS re:invent basis (duration between next conference). The worth-noting feature of SAM is definetely aws-sam-cli (former: aws-sam-local) [1], which is a tool for developers to parse SAM template and invoke Lambda function in the docker on local machine. It was great to test simple APIs (start-api mode), but when some API started using custom authorizers or response was a compressed payload of png image it was not very helpful. Personally, I am working on a fork of aws-sam-cli to implement it to work with CloudFormation.

[1]: https://github.com/awslabs/aws-sam-cli

Might AWS Lambda behind AWS API Gateway (with caching, burst and rate limiting, custom authorizers) behind AWS CloudFront behind AWS WAF and/or CloudFlare work for you?

What is your issue with keeping Lambda instance alive? They mostly stay in standby mode some minutes to keep listening for requests and then it will shutdown whether staying idle - what means next request will boot a Lambda function (container?; It usually takes ~1 second), after that time to receive response is approx. ~100ms.

Basically, caching allows you to cut your costs if you do it right. Also it is worth to note after 12 months API Gateway stops being free and caching may decrease amount on your bill. However, caching cluster is paid on hourly-basis and you must know if it will be worth to use it.

Personally, I don't imagine to provide aaaaaaaaa.execute-api.eu-west-1.amazonaws.com/v1/transactions/XXXX/cancel as a API endpoint in the documentation of some product. Well.. It'd definitely made my day if I will see such endpoint in i.e. Stripe docs. Everyone uses short like address like api.example.com so there is definitely use for custom domain name as a feature of API Gateway. Custom domains allows you to separate an API by base paths (i.e. Transactions API, Notifications API, Refunds API) and it easier to upgrade/shutdown... basically maintain your API. Also if you are interested from requests made in two AWS regions and you also care about latency regional endpoints might be way better. Of course, if you will use it with WAF and CloudFront you have a lot of things to configure, which for some companies might be important.

I am not sure if 'Full Guide' in title of the article made me smiling or maybe it was recall of my experiences related to configuration of AWS Lambda and AWS API Gateway in CloudFormation. There is a lot of things which has not been mentioned in this article and it is what I am looking forward to - even trivial things which looks easy at the first glance, i.e.:

* How to configure caching and caching rules - please note there are few ways (query strings, headers, parameters, cache enabled only on single method etc.) to specify how to cache responses.

* Attach your REST API on custom domain as a regional endpoint (instead of edge-optimized, since regional endpoints are more configurable)- create ACM certificate (per each region, and one for CloudFront), create own CloudFront distribution (think: multi region deployment), add DNS record in Route53 and configure WAF (some magic DDoS protection).

I took me a lot of time with CloudFormation to get through where I am today and yet I think I would be grateful if someone will share his knowledge gained on more sophisticated use-cases than just 'Hello World'.

Xkcd "Standards" https://xkcd.com/927/ is obligatory here.

There are five ways to have update software on Ubuntu Linux these days:

* Ubuntu Store (snap).

* Via Flathub (flatpak).

* Official deb repository pool (apt-get).

* Community maintained PPAs (apt-get).

* Other, tools like appimage, nix, linuxbrew etc. etc.

If you are not fan of terminal tools, sometimes "Software Updates" popup will appear to ask you if you would like to install new updates.

By default there isn't any self-update enabled (please correct me if I am wrong), though it is recommended to configure automatic updates of unattended-upgrades [1]. In my experience 17.10 were asking about installing updates when you were shutting down or restarting OS.

[1]: https://help.ubuntu.com/lts/serverguide/automatic-updates.ht...

Personally I have no idea why they rolled these theme styles for nautilus while they have been worked on Communitheme [1], which does not have tab-like menu [2]. However I'd like to note even in adwaita (and many other styles) there is design inconsistency between nautilus and gnome-tweak-tool. Sadly, Ubuntu dev team and community have not released any stable version Communitheme yet, so they were too late to bring new, consistent theme to 18.04.

[1]: https://github.com/ubuntu/gnome-shell-communitheme

[2]: https://itsfoss.com/ubuntu-community-theme/

It is worth noting Ubuntu comes with snap and flatpack support since latest two releases, and it works flawlessly for most of GUI applications. Sadly there isn't many CLI tools available to download like aforementioned git or zsh.

Does Leanpub Markua (http://markua.com/) fit into your requirements?

I am really glad Flutter came out as beta and finally ReactNative got a good competitor, so maybe it will encourage both sides to improve itself and polish various (annoying) edges.

As addition to JavaScript, they have used their own language called Dart for some their services like AdWords or AdSense [1].

[1]: https://www.dartlang.org/community/who-uses-dart

I sometimes use multiple dots to create an alias, but it only works for a fraction of e-mail providers (i.e. GMail). E.g.: example@example.com is the same as exa.mple@example.com.

I also use this method. Thanks to it I usually can check if e-mail was automated and also I am not disturbed by e-mails with social media notification, shop promos or marketing spam during work. Also some e-mail providers allow to create many e-mail aliases which shares the same inbox.

2FA is overused term in these days. I thought like Cierge+U2F with some physical device like Yubikey or Google Authenticator.

Edit: If my email was breached (and I would know it) I would probably reset password and logon to change all services to populate them with brand new credentials. Then I will try to minimize the threat (i.e. by making impossible to use my accounts - bail out emails, resting credentials or even removing accounts and e-mail) and then find out the best solution for specified scenario and recover after breach with implemented better security.

I am not a security expert, so I started looking for solution which I know from my personal experience: If we add additional complexity like MFA/2FA this problem seems to be mitigated.

It would be great if someone with more knowledge in this field could provide a better solution for this issue.

Edit: Also you could reset password on your e-mail account if was breached.

Edit 2: There are also push notifications sent on mobile apps which acts like boolean type to accept or deny logon process.

Edit 3: If MITM is also laid down in discussion about possible threats then I think end-to-end encryption may help.

Edit 4: Banks usually use "Fill 3, 4, 15, 22.. character from your [placeholder: password, auth card]" method to get rid of key-loggers on clients PCs.

PINJWT - "PAST is not a JWT". // Please, do not take it seriously.

Edit: Good job on PAST and your other projects. I often follow your GitHub activity and publications to check on what interesting you are working currently.

Ad 1. I am really interested of about the progress of development of your service. I would love to see it as "Show HN" submission.

Personally, I am thinking about developing an online service, which will be offerring general-purpose providing distribution of content to Kindle or other ebook-readers. Initially, I thought about creating only a app which will extract a article tag from website and create ebook from it (pandoc) or exactly a Pocket-to-Kindle. But when I was thinking more about it more ideas had come to my mind, HN-frontpage scrapper, simple notebook/orgmode adapted to Kindle Experimental Browser, markdown-files-to-ebook, arxiv-to-ebook converter, some kind of IFFTT pipeline (stream X from Y and save it as a ebook) and even trying to implement most of features known from Calibre application... If I could somehow help you as a developer or you are interested in bootstrapping some online service together I really would like to receive an e-mail from you. My e-mail address: (put my HN nickname here) at gmail.com

I am also really glad someone has glued toghether major aspects of template/html std library. It is definetely a place where are some 'taboos', tricks or gotchas, i.e. re-usability of tmpl static variable to add multiple named templates and call them by name (re: question on disqus below article) or sharing parent scope to children variable when using range loop (stackoverflow popular question). I am bit sad I haven't found some free time to collect all known 'tricks' to me and try to list them somehow or send CR yet.

Note: There is NATS streaming [1] which implements persistence and redelivery.

[1]: http://nats.io/documentation/streaming/nats-streaming-intro/

[2]: https://github.com/nats-io/nats-streaming-server

"Conduit" is often refered to "Conduit toolbar" [1], which was known as a malware.

[1]: https://en.wikipedia.org/wiki/Conduit_toolbar

Yeah, they implemented it in Firefox 57.

> "Addition of Duplicate Tab option"

As a user of both Chromium and Firefox browser, I miss this option in tab's context menu in "stock" Firefox browser.

Disclaimer: I don't have experience with developing RN apps.

I mostly agree, but do a lot of RN modules are written in ES6 rather than TypeScript, so they are lacking type definitions [1]? Also I noticed a lot of modules which are just converted cordova plugins to RN.

[1]: Yes, I know. I can use anonymous definitions or use some magic tools...

Personally, I don't imagine working under any other OS than Linux as a web developer. And hey, Java and .NET Core/Mono is quite pleasant to work with under non-Windows operating system.

Yeah, I know. I made that screenshot, signed out, uploaded this file, then logged in to post my previous comment. Thank you for reminding anyway :)

It is interesting that Network Panel in Firefox has built-in simple Postman-like tool [1] for editing request which you have already made.

[1]: https://imgur.com/a/hBkmq

// Chrome has copy as curl command.

I am curious, what is the unique selling point of Unity which makes people stick to it? Is it a global menu[1]? Dock? Support of legacy indicators?

[1]: GNOME3 has command pallete (ctrl+p) known from Sublime Text - https://github.com/p-e-w/plotinus

edit: Also https://github.com/lestcape/Gnome-Global-AppMenu

It is system-wide configuration, so also you block ads in apps.