I'm sensing a lack of empathy in this comment.

Calling people stupid or attaching any label to them will only hinder your attempt to sway their minds.

Portraying black and white thinking (splitting), when we know the world is shades of grey, also hinders your ability to change minds.

It's great that you found benefits to moving to a non-meat diet. This helps others see what they could benefit from. Continue from here.

To boil it down, it's my "10-minute task" time saver.

And my use of it really picked up when I started using GPT4. It's head and shoulders above GPT3.5 in terms of quality and clarity of output.

Also, having a developer understand the value and need for code security from the perspective of a security person is important to the overall success of an infosec program. Otherwise both engineering and infosec are going to be grating on each other.

Two books I like to start this process:

* Threat modeling by Adam Shostack

* CISSP all in one handbook by Shon Harris

You don't need to get a CISSP cert, but the resources and education are generally applicable in most situations.

It appears to be down, saying "Website temporarily unavailable". But it's intermittent for other employees at my company so it might be failing app services behind a load balancer.

CLI access or EC2 services doesn't appear to be affected, at least from us-east-1.

And, of course, the status health dashboard shows Green across the board. https://status.aws.amazon.com/

UPDATE

HatchedLake721 mentions that it appears to just be us-east-1 Web console that's down. Use this instead for now: https://us-west-2.console.aws.amazon.com/console/home?region=us-west-2

Thanks @HatchedLake721!

Comments URL: https://news.ycombinator.com/item?id=19749781

Points: 102

# Comments: 49

Now that you've done your share of sysadmins, SRE and software developer, you can see how things can fail. That's the heart of security. As tptacek advises, choose an area of security to focus on and go down that path for awhile. You'll find you will want to go further or jump to another path, but security is a great thing. The world is going to need more security-aware people and you can be at the forefront of it.

My current security focus is holistic defence of data flowing from customer to company. The whole SDLC lifecycle. It's fun but super challenging because it focuses on changing human mindsets and behaviour, but my Dev and ops skills are essential to my technical success.

And certs are useless on their own. Don't do certs unless you can specifically get something out of it. Your work experience is much more valuable than a cert at this point.

Given the inputs you stated, I am full CF because I don't want to manage state files, and I want some more advanced things like Deletion policies and automatic tagging of resources with the stack info. We use these tags in a lot of lookup scripts when operating on the infrastructure.

If you mean this in a general sense...

One use case at Unbounce (where I worked in infrastructure) was to encapsulate the runtime dependencies for different services that were on a machine.

Our monolith required Ruby 2.1 and a bunch of gems. Then we were using Scout for centralized monitoring, which required 1.8 with a separate set of gems. We only noticed the problem when our monolith moved from Ruby 1.8 to 2.1.

To fix this problem of dual-Ruby runtimes, we encapsulated the Ruby 1.8 + gems into a Docker image for Scout, then ran the Scout container on the machine. It works perfectly and never conflicts with the monolith's Ruby runtime.

Super easy to setup and use. About $1/user/month, so fairly cheap.

> you'll get paid more than you need to survive - so don't be an idiot with your money.

Adding to this is something to consider:

You will be paid more than you need to survive, but you will most likely survive longer than you will be paid. Make sure you save money for those times.

I don't need to prove my knowledge to you by pointing out lots of capitalism's flaws. Instead of reading my comment carefully, you decided to teach me about how basic supply and demand operate. Jesus, you are a self-absorbed piece of work.

In the end, I think these scalpers won't sell for 8x because anintendo will just pump out more product. Still, it is sad to see this happen.

Today's weirdness and communication around it has made me trust Globalsign a lot less now.

It allows you to scale one independently of the other, and you can have different codebase and deployment workflows.