957 karma · joined May 14, 2013
Socials:
- linkedin.com/in/christophe-hartwig-ba228a5
Interests: Cybersecurity, Entrepreneurship, DevOps, Digital Nomading
---
As far as I know, TLS prevents all these security issues, except authentication of the webhook caller, hence the shared secret which your webhooks should check.
I've verified in the TLS specs that every issue I've seen raised by people is actually covered, yet people still think (and write) that TLS doesn't sign traffic (it does), or TLS doesn't prevent replay attacks (it does), etc.
Usually I give them pointers to the specs, and they say "it doesn't hurt to add even more security" but they're really rolling out their own encryption, which you shouldn't do.
I'd say enforce TLS and authenticate the webhook caller...
[1] - https://snv.org/update/smallholder-palm-oil-farmers-can-farm...
Also palm oil feeds many families in SE Asia. Boycott is not a solution.
I can name so many use cases a relational database is incapable of...
It seems like his business could at least afford an HA setup on a cloud provider. Moving to any hosted db with backups, updates and redundancy could be worth it.
As for HA failing, it's still less likely than not-HA failing.
Also an HA setup allows for maintenance and upgrades without downtime, which is way better than the very common "we don't upgrade if it's working, because it could break".
Also HN: "Database X can fail in Jepsen tests during partitions, it's unusable"
I see HA as a mandatory part of what makes a system production ready...
Think of Ebola and herd immunity for more that a second, and you'll understand what it means: herd immunity is not the only way. Korea proves it too. SARS 2003 died without herd immunity either. What about HIV? Fancy trying herd immunity?
Herd immunity shouldn't be a goal.
Korea "should" be comparable to western countries if it wasn't for politics. But they have 100x fewer deaths. They're not trying to reach herd immunity, it's a political choice.
https://support.monese.com/hc/en-gb/articles/115002002229-Is...
"Unlike banks we do not re-invest customer funds and have to keep all customer money separate to our own company finances. We are required by Regulation to Safeguard all funds received from Monese customers. This guarantees that even in the unlikely event that Monese is no longer in business, all of our customers would receive 100% of their balance back"
(fellow developer, please do not ban VPNs if you can't guarantee 0 false positive)
if free, simple and it checks your TLS settings too
is totally free, superfast and checks your TLS settings too (it's my baby)
In the meantime, I'll keep eating beef in an effort to get rid of the 1.4B cows you want dead.