I too use an ad blocker, download torrents etc. but I really dislike when we ("tech savvy people") suddenly feign to ignore the rules of society and start to use the same arguments as line cutters, shoplifters, or any non-disabled who park on a disabled spot.
This is just misbehaving guys, stop trying to find a silly defense.
Not exactly on-premise but we rent 2 big dedicated server (ovh) + install VMWare ESXi on them.
Going to the cloud would cost more, the price would be unpredictable, only to solve a scale problem we won't have.
And customers love to know their data are hosted in France by a French company, not by Google or Amazon :)
I love keycloak but I was always disappointed it cannot be used as an LDAP server. As many open source products and SaaS support LDAP as authentication/authorization, it would have been perfecy for an internal SSO.
Instead of keycloak, I had to rely on GSuite Identity Premium: hood product but gets expensive quickly...
Rent dedicated server from OVH, install ESXi, hire a sysadmin. You will save huge amount of money.
Cloud can be great, but sometime it looks like people forget there are other solutions.
I'm currently using influxdb v1.x and I'm not very happy with it for many reasons (impossible to delete a value, no clustering in free version,...). Can anyone who migrated from influxdb to timescale share his opinion ?
The "Date, Valid-Until" timestamp mitigates replay-attack, cool.
But what if a vulnerability is discovered in a package and an MITM attack prevent you from downloading the new patched version, making you believe your system is up to date although it's not ?
This is what we are doing at Qarnot Computing for 5years.
We created a heater using CPU as a heat source.
People send a docker image (3d rendering, financial analysis...) and we run it on heaters deployed in buildings in Paris where people are heated for free (we refund the electricity cost)