GCP sucks so bad as a product, that the only way to tell what IAM policies apply to your service account, is to run some kind of analysis query thing exported to a BigTable (which will cost you money).

You'd think you could just go into the console and click on the service account and it'd show you which policies are linked to roles are linked to your service account? That would make sense, and be convenient. But this is Google we're talking about. Engineering principles will always trump customer experience.

It's much worse than that of course. The default roles give too many permissions, for nearly anything you want to do. Often you are limited by what you can control, to only at an Org level, or Folder, or Project. Yet making a custom role is often difficult, leaving you to usually just slap on the default roles, making your resources insecure. Much of the time, a user must have an Admin-level permission over all VMs in order to SSH into them with GCP creds. Kind of defeating the purpose of having IAM to begin with.

I think the only reason we haven't heard of more GCP accounts getting compromised due to the shitty default policies is, thankfully, GCP has few customers.

For cushions I already had some, but you can easily make them with more JOANN fabric and a big box of poly stuffing. Extremely basic sewing skills and a pair of scissors are all you need.

Give a man a fish...

If you have 10 pieces of work, and you show each piece getting done at regular intervals, along with demos, then you can show your actual results and exactly how close you're getting to finished. Even someone who has no insight into the product can follow along and see the progress's results and trajectory. The more detail you get about the work, the harder it is to fake (you can fake a demo, but it's much harder to fake an entire Jira board)

If you want to avoid this scenario, your company needs good leadership. If you're at a company where the managers don't do any due diligence in terms of verifying the progress of work, you are at an either inept or toxic company. If all people do is ask you for a "status report" and they just hope it's correct, they're setting everyone up to fail.

Good management is like a teacher in school who checks if students are completing their work, and if they aren't, gives them assistance. The teacher must actually check the work, and be interested in the welfare of the student as much as improvement.

Art, play, love, nature? Waste of time. Personal finances, cooking, repairs, wayfinding? Useless. We need you to learn advanced maths by hand, for that job you'll have at McDonald's where you need to handle advanced algebra. We need you to learn this highly curated view of history that excludes most of the important events in world history. Philosophy? You'll have to go to an expensive college for that. Psychology? Why should you have an insight into relationships, the human mind, emotional intelligence? It's not like that would come in handy at some point.

If I ran a school, the curriculum would consist mostly of teaching people to curate their inner and outer life towards their own goals and interests. The purpose and benefit of intelligence as a tool to use too improve their own life, and the lives of others. The benefits of benefiting society and our loved ones. The benefits of love. The things nobody should learn by accident.

Speed isn't more important than having respect for your craft. If you have to go slower to produce a better result, you go slower. If you have to work harder to perfect an incredibly tight joint, you do that. You don't have to use traditional joinery to build in Japan today. But if you build something in a shitty way, it reflects poorly on you.

Efficiency is not the goal.

Swap is also used by the system's hibernate function to store a copy of RAM to disk.

If you have 64GB of RAM and no combination of your apps, cache, etc will ever approach that, then probably nothing will ever swap. But for more limited systems or when running apps with higher memory pressure, swap does increase system performance.

This means basically saying "I pressed a button and the thing did X". That's the test. No need to understand how that works, or provide any more technical documentation or specs, or record system state or variables, or do anything else. Press button, it does X. That's good enough to be certified.

The reason for this is simple enough: sometimes the thing you're using is proprietary and its manufacturer/vendor simply won't give you anything else to certify it. But this black box testing is even used for open source software and components. It's like a short cut you can use to cut through a lot of the testing you could have done. I imagine this will remain standard practice as the "AI" companies push their hallucinating dreck and unexplainable magic into the medical device space.

My guess is basically nobody cares that much about this rare condition. It's much more likely the pilots are incapacitated rather than asleep, in which case the alarm is pointless.

But I guess it's not that rare:

  - https://www.newsweek.com/pilots-boeing-737-both-doze-off-overshoot-airport-two-hour-flight-1735435
  - https://jalopnik.com/tale-of-both-pilots-sleeping-during-flight-reminds-us-t-1849014190
  - https://www.cnn.com/travel/article/pilots-sleep-cockpit-airline-safety/index.html
  - https://www.bbc.com/news/uk-24296544
  - https://www.cbsnews.com/news/both-pilots-fall-asleep-during-british-airbus-flight-incident-report-reveals/
  - https://www.aero-news.net/index.cfm?do=main.textpost&id=A9AAFE58-18F4-40B5-B59A-EBE316BBE878
  - https://content.time.com/time/nation/article/0,8599,1932040,00.html

Just putting out there that OpenStack is open source, already exists, very feature complete, and there are even hosting providers that will give you your own OpenStack control plane and only bill you for the resources you use. Only one provider in the US, but several in Europe.

No need to deploy and manage your own clusters on bare metal. They do it all for you and just give you an API, same as AWS. Way better than managing your own stack. The fact that more providers aren't doing this kind of blows my mind. But they probably prefer the proprietary walled garden, easier to keep customers from moving.