Artemis2

قبل 7 سنواتdiscuss

These “baseline rules” come from NIST SP 800-63B, Appendix A, which is a surprisingly digestible document: https://pages.nist.gov/800-63-3/sp800-63b.html#appA

Artemis2

قبل 7 سنواتdiscuss

Xerox PARC!

Artemis2

قبل 7 سنواتdiscuss

You’d still have to handle the complete flow for the case where the exemption has been used multiple times since the last authentication though.

Artemis2

قبل 7 سنواتdiscuss

https://news.ycombinator.com/item?id=19315273

Artemis2

قبل 7 سنواتdiscuss

Very serious handling of the issue!

Artemis2

قبل 7 سنواتdiscuss

CockroachDB is made up of several layers to implement SQL and transactions on top of a distributed key-value store: https://www.cockroachlabs.com/docs/stable/architecture/overv...

TiDB has a similar architecture: https://www.pingcap.com/docs/architecture/

Artemis2

قبل 8 سنواتdiscuss

Unfortunately, with trackers such as the Like button embedded in every web page and shadow profiles, social media is definitely not opt-in.

Artemis2

قبل 8 سنواتdiscuss

“Coordinated Inauthentic Behavior” is a nice euphemism!

Artemis2

قبل 8 سنواتdiscuss

There is also a series of posts regarding the design of Aurora on the AWS blog, although about everything is described in the original paper:

https://aws.amazon.com/blogs/database/amazon-aurora-under-th...

https://aws.amazon.com/blogs/database/amazon-aurora-under-th...

https://aws.amazon.com/blogs/database/amazon-aurora-under-th...

https://aws.amazon.com/blogs/database/amazon-aurora-under-th...

Artemis2

قبل 8 سنواتdiscuss

DynamoDB with strong consistency turned on works pretty nicely for us.

Artemis2

قبل 8 سنواتdiscuss

This is powering CloudKit. Very cool!

Artemis2

قبل 8 سنواتdiscuss

Most payment gateways offer a card fingerprinting feature. Here’s Stripe’s: https://stripe.com/docs/api/cards/object#card_object-fingerp....

It’s fine with PCI DSS as long as it is not reversible.

Artemis2

قبل 8 سنواتdiscuss

> The confetti thrown at midnight is made from recycled material that would otherwise be discarded, and all of it is biodegradable.

Artemis2

قبل 8 سنواتdiscuss

⌘+F “performance” or “memory” does not show anything :-/

Artemis2

قبل 8 سنواتdiscuss

Quorum reads will always be much faster in the same AZ :-(

Artemis2

قبل 8 سنواتdiscuss

> The global reservation is divided to multiple partitions, each no more than 10TB in size.

I think this should be 10GB partitions.

By the way, maybe it’s worth mentioning adaptive capacity? https://aws.amazon.com/blogs/database/how-amazon-dynamodb-ad...

Artemis2

قبل 8 سنواتdiscuss

Caused by a bad BGP route announcement [1]; this is outside of the control of Google. However, they do seem to have global incidents more often than the competition (for example [2] last July)

1: https://status.cloud.google.com/incident/cloud-networking/18...

2: https://status.cloud.google.com/incident/cloud-networking/18...

Artemis2

قبل 8 سنواتdiscuss

That’s not it, but I really like Whimsical (https://whimsical.co) to produce great-looking diagrams.

Artemis2

قبل 8 سنواتdiscuss

Good addition! Here are some more:

https://ferd.ca

https://blog.filippo.io

https://lethain.com

http://movingpackets.net

https://www.integralist.co.uk

https://peter.bourgon.org/blog

https://engineering.linkedin.com/blog

https://begriffs.com

https://mijailovic.net

http://tatiyants.com

http://blog.pentestbegins.com (seems down right now?)

https://kalzumeus.com/archive

http://blog.stephenwolfram.com

https://paragonie.com/blog

https://www.filfre.net

https://brandur.org/articles

http://archagon.net

https://eklitzke.org

I guess I could go on forever…

Artemis2

قبل 8 سنواتdiscuss

Some favorites of mine I haven’t seen mentioned:

https://blog.acolyer.org

https://jvns.ca

https://stratechery.com

https://blog.cloudflare.com

https://latacora.singles

https://www.schneier.com

https://www.ben-evans.com

plus an endless amount of newsletters…

Submissions

Open-Sourcing VictoriaMetrics

Google Compute Engine Incident #19003

Dashlane Closes $110M in Series D Funding Led by Sequoia Capital

Nextdns: The Next-Generation DNS

Metabase raises a Series A

Building Highly Reliable Data Pipelines at Datadog

Sqreen (YC W18) raises $14M for its application security management service

What’s New in the Go Cloud Development Kit

Why we're switching to calendar versioning

The Story of Spikey

Fiserv to buy First Data for $22B to boost payments business

N26 raises $300M in Series D funding round

ReiKey

Brad Fitzpatrick Is Rethinking Go's HTTP Client

Microspeak – The Old New Thing

Increment: Security

Department of Interior records slated for destruction

libssh authentication bypass

Speedscope – An interactive flame graph visualizer

Packet hauls in $25M Series B as customized cloud vision takes shape

comments