HNHacker News
TopNewBestAskShowJobs

unkoman

277 karma · joined June 12, 2011

submissionscomments
unkoman··on Vintage technology and why some people still use it
I can now afford the high end tech of a bygone era which is leads to high end products that do not break as they have survived for over 30 years.
unkoman··on GDPR Enforcement Tracker
Are you not seeing the 50 000 000 EUR+ fines to Google [1][2][3] then just sort by size of fine

[1] https://www.cnil.fr/en/cnils-restricted-committee-imposes-fi... [2] https://www.datainspektionen.se/globalassets/dokument/beslut... [3] https://www.autoriteprotectiondonnees.be/publications/decisi...

unkoman··on How to avoid Amazon: guide to online shopping
Can't you use a service such as pricerunner.com or pricespy.co.uk
unkoman··on Ask HN: Introductory Books on the Stock Market?
Just go to r/wallstreetbets and buy put options
unkoman··on How I replicated an $86M project in 57 lines of code (2017)
[2017]
unkoman··on CloudWatch Is of the Devil, but I Must Use It
I'd argue that cloudwatch is mainly an event source to drive other AWS infrastructure. Monitoring second, which might be why the experience is so sour.
unkoman··on Two years with CloudFormation: lessons learned
Cloudformation is infrastructure management, not configuration management. Both Ansible and Cloudformation can be used for both in different ways, but usually you have your configuration management (such as docker containers) in one step of your pipeline and cloudformation templates as another. That way you can test your infrastructure (by deploying cloudformation templates and tearing them down) as well as your code without them being too dependant.
unkoman··on Ask HN: How are you implementing GDPR-compliant soft deletes?
We're building a consent framework API so our customers can consent for personal data use. Data is then cleaned and transformed (ETL) from personally identifiable to pseudo-anonymised. The data is also separated into two separate encrypted storages for anonymous and pseudo-anonymised data for generalisation and separation. Random (important) hashed identifiers are created and put into a metadata service which is used as a lookup-table. If right to be forgotten is invoked, the data is disassociated from the pseudo-anonymised and personally identifiable data thus making it anonymous.

Important is also how you handle data analytics and this is why we're deploying high restrictions on raw data. Analytics will only be able to be done through an analytics service which can give the employees access to only certain parts of the data which is approved for the use-case. We're using Apache Sentry for fine grained role based authorisation to data and metadata and a directory services for user auth.

Things we've learned:

* Minimise data usage

* Don't use personally identifiable data

* You will need to be able to prove consent when it comes to data usage and it cannot be consent by default, it has to be opt-in

* Log all data access so that use cases can be proved. This needs to be evaluated and audited

* Encrypt in transit and at rest

* Centralise mapping for all data

unkoman··on AWS Lambda Releases Go Support
We use it for all production workloads together with API Gateway in the frontend, AWS Batch and RDS in the backend.
unkoman··on Microsoft cURLs too
curl is much more than http.
unkoman··on AWS Single Sign-On
Azure AD to AWS is quite simple:

* Create an AWS Cognito User pool

* Create an Azure AD Enterprise Application

* Set up Azure AD federation to the Cognito User Pool

unkoman··on Beijing Sinnet says it will buy Amazon Web Services’ China business
These services are not available in the China region.
unkoman··on How we analysed our increased AWS data transfer usage
Restricting the bucket to the EC2 instances is easy enough..
unkoman··on Ask HN: How was your experience with AWS Lambda in production?
- Decouple lambdas with queues and events, SQS, SNS and S3 events are your friends here

- Use environment variables

- Use step functions to create to create state machines

- Deploy using cloudformation templates and serverless framework

unkoman··on Street Fighter II's AI Engine
> AI-vs-AI street fighter competitions

http://www.saltybet.com/ does just that.

unkoman··on Ask HN: Best certifications in 2017
The AWS Certified Solutions Architect certs are great. Note: lasts 3 years max.
unkoman··on AWS IAM Policies in a Nutshell
Principal can be any AWS resource, such as Kinesis firehose or Lambda. Whichever resource that needs the permissions. For example:

            "Statement": [{
                "Effect": "Allow",
                "Principal": {"Service": [
                    "firehose.amazonaws.com"
                                          ]
                              },
                "Action": ["sts:AssumeRole"]
            }
            ]
        }
unkoman··on Ask HN: How often is hardware at the big tech companies refreshed?
3-5 years looking at the refresh cycle at AWS.
unkoman··on Tell HN: Merry Christmas
Happy Festivus (a tad late, I know).
unkoman··on AWS London Region (eu-west-2) now available
AWS has sunset features before (SimpleDB for example) but only for new customers. Old customers that use the EOL features 1. get a migration path 2. keep the features in their account.
unkoman··on Amazon EC2 Elastic GPUs
Scale. AWS is huge.
unkoman··on Geocities Cage at the Exodus Datacenter
No need for an instance if there is no dynamic content. Everything in S3!
unkoman··on Ask HN: What's your favorite tech talk?
Eric Brandwine at AWS talking about how they solved the networking part of the cloud: https://www.youtube.com/watch?v=3qln2u1Vr2E
unkoman··on Hacked: Investigating an Intrusion on My Server
There are plugins for this - Simply static, staticpress and more.
unkoman··on 13k BTC, 300k LTC Stolen from Cryptsy Exchange
Another day in bitcoin land. Sorry for your losses!
unkoman··on Scan a book in five minutes? $199 ‘Smart scanner’ with foot pedal and WiFi
I was looking into similar products when I found http://booksorber.com/

I already have the DSLR, tripod and floodlight so it was the natural choice for me. I guess this one is good if you have none of that.

unkoman··on RemoteStorage – An open protocol for per-user storage
Alternative to https://syncthing.net/ ?
unkoman··on Ask HN: Salary in Stockholm?
Try linkedin.
unkoman··on Would you use a Linux based computer, better or equal to a mac in quality?
Just get me a laptop with a trackpad as good as the mac and i'll be there.
unkoman··on Unlimited Storage with Office 365 Subscription
The 20000 item sync limitation is still there though.
← PreviousPage 2 of 5Next →