gazoakley

Yep - out of the country right now and get the same. VPN back home and it’s working. A bit annoying

If you’re running containers you’ll want some kind of container management - but I’ve been fine with ECS for running on AWS. It’s well integrated, standard enough, configurable via OpenTofu/Terraform/CloudFormation etc and free for container hosts running in AWS

So only organisations that have had an Oracle license audit are impacted?

See here: https://www.bbc.co.uk/news/articles/cq52382zd1no.amp

Octopus have started doing things like connecting properties in the north to cellular type meters (not supposed to) or using Octopus Mini hubs (connects smart meters using WiFi) as a way of trying to solve the problems

I'd avoid LastPass. The UI is awful, and they've been breached before: https://krebsonsecurity.com/2023/09/experts-fear-crooks-are-...

SSO all the way (if you can). Chances are you've got Google Workspace or Microsoft 365 - both allow you to configure SAML based SSO into many SaaS apps either through their respective app galleries or some kind of custom configuration. Otherwise you could look at Okta, but be prepared to fork out serious cash. We use Entra ID (part of Microsoft 365) for SSO in our business, and it generally works well.

There'll be times that employees can't use SSO though. For that I'll add my voice to 1Password - it's well designed such that a breach of the 1PW service itself won't reveal credentials (you'd need peoples vault passwords and secret keys for that). Avoid Lastpass - the UI is awful, and they've been breached in the past.

When I wrote the code that published that for Storengy UK around 4 years ago I never expected AGSI would get featured on HN. Strange world we live in.

That's pretty awful on Lastpass's behalf. 1Password does this much better - your account is frozen in such that you can't add new passwords or make changes, but you can still read your data:

https://support.1password.com/frozen-account/

Curious to see how this would be deployed in the wild. A sneaky way would be to add this as an extension to existing Lambdas - it could run in parallel any time such a Lambda is invoked, and continue even after an initial response until the timeout for the function is reached.

> Remember this does not only mean team sports, there is more to the world than what school PE exposed us to, there will definitely be something out there that interests you.

My biggest bugbear about school PE is the focus on team sports. I know some schools want to build their sports teams, but if there is one goal of PE class it should be ensuring every child finds at least 1 form of exercise they really enjoy.

I’d encourage you to persist in finding something you can get into and stick with. I’ve really got into obstacle course racing events like Tough Mudder and started with the shortest distance - everyone there is helping everyone else through it. Find what works for you.

The UK also has credit scores, although they’re not the sole factor in acceptance for credit. Experian, Equifax and Transunion all have their own individual scoring systems with different scales - I’m not aware of a standard like Fico here.

As for shutting down accounts affecting scores - most scores factor in credit utilisation %. Maxing out a credit card can indicate that a borrower is having problems making repayments, so keeping utilisation under around 30% is helpful for a good score. Closing old accounts reduces access to credit, so the utilisation % increases.

PayPal also works well when the merchant doesn’t directly accept Amex

Wherein San Francisco wants to confiscate your ice cream cones: https://www.youtube.com/watch?v=QOreHYVTHGA

(from https://www.dnalounge.com/backstage/log/2011/08/19.html)

Whilst competition has been pretty slow to improve speeds, there are an increasing number of altnets around the UK with small providers running their own FTTP networks. This is even happening in rural locations through organizations like B4RN. I wish it would move faster, but I'm glad that we have some competition - Corbynband would likely have nuked other providers, and I can only imagine the kind of filtering that would get applied to it. Hopefully good ISPs like Andrews & Arnold can stick around.

More background here:

https://onemileatatime.com/qatar-airways-fires-pilot/

https://viewfromthewing.com/qatar-airways-firing-pilots-and-...

It's suggested in the first article that the pilot had failed to pass the necessary exams:

"The other side of the story here is that the pilot has spent the past six years completing a two year training course, and still hasn’t passed any of the tests necessary to become a pilot. The airline became fed up, and since they’re firing pilots anyway and trying to cut costs, they also decided to terminate their contract with her at this point."

Not true (unfortunately). Transfer within an AZ is free, but go outside that and the pricing is a minefield:

https://twitter.com/QuinnyPig/status/1172239124251709449?s=1...

>> There is a review phase of course and it's very important because it might do anything. Anybody who's had to use terraform can attest that it is scary to run.

This is no worse than Ansible - if for a set of EC2 instances the user "set to 0 to delete them" then Ansible will blindly do as requested and be just as destructive. On the other hand:

* Terraform does its best to enforce the recommended plan/apply workflow - the plan is always presented before any changes are made, and auto-approval is strongly discouraged.

* There are multiple options for review - do it there and then, or store the plan as an artefact and share with others for review.

* It doesn't matter when you run a stored plan - the plan is the set of changes that will be applied regardless of current state.

* The summary makes very clear if anything is going to be destroyed in bright red text.

Ansible offers some visibility of what it will do with dry runs, although it's not as complete - there's no way to guarantee it will do the same thing next time if changes have been made in the interim.

I'm not sure why you've had problems with Terraform trying to nuke things - I'd say the planning capability was one of its strong points. A quick glance at the plan will tell you what it needs to remove to put an environment in the expected state (and it's called out again in the destroy count summary at the end of then plan). Terraform doesn't "accidentally" delete things - it's doing it because you've told it they're not needed anymore.

Unfortunately this is true - the Terraform AWS provider has thousands of PRs closed (and hundreds still open) as proof. Nevertheless, things seem to get support quicker in Terraform than in CloudFormation.

Take a look at this talk - it explains what both tools do and how they can work together well:

https://www.hashicorp.com/resources/ansible-terraform-better...

TLDW; You can do resource management (e.g. creating EC2 instances in AWS) and deployment (e.g. installing packages on an instance) through both Terraform and Ansible. Terraform is best used for resource management - the documentation states using the "provisioning"/deployment function is a last resort. Ansible is great at deploying packages but less so at resource management for the reasons you'll see in the other comments. Either use them together for what they're good at, or use Terraform to do resource management and other techniques (such as prebuilt images) for deployment:

https://www.terraform.io/docs/provisioners/index.html

Also useful:

https://blog.gruntwork.io/why-we-use-terraform-and-not-chef-...

I can imagine the EU having a field day with this. Given the scraping of data from other sites, this is clearly processing of PII without explicit consent - it's effectively being used as a biometric identifier too so the rules around sensitive data also apply...

And it's just crashed...

You can do inter region VPC peering: https://aws.amazon.com/about-aws/whats-new/2017/11/announcin...

Terraform can do that: https://www.terraform.io/docs/providers/aws/r/acm_certificat...

That said, one irritating omission I've had to deal with is not being able to add email subscriptions to SNS topics. The underlying AWS API is a bit odd - I don't think it provides an ARN until the subscription is confirmed.

Any chance of support for KAYAK or AwardWallet? Both offer a TripIt style forward booking email to add to an itinerary - I think AwardWallet offers an API for access to account data.

Well that's one way to avoid using Content-Security-Policy with "unsafe-inline" (assuming someone cares about CSP?)

But they have:

* http://opentravel.org/

* http://www.htng.org/

It's all XML based and sometimes it's a bit confused but a lot of hotel booking sites work by forwarding OTA/HTNG schema messages to booking engines (e.g. Siteminder). A heck of a lot of hotels are already bookable through those engines.

It's been a while since I used the vCloud web client, but if it's the same as the vSphere one I can appreciate the pain anyone else using it goes through. Trying to have the "right" version of IE/Java was a right mess.

Another generally happy customer. I'm on Home::1 and the pricing is much more stomach-able than the other units based tariff. Line monitoring graphs/logs on their control panel are excellent, and you can opt in to SMS messages if your line goes down. Support are (somewhat unofficially) available on IRC at 11pm on a Sunday evening. I've had problems with our line, but they've always been BT/OR issues rather than A&As fault - still annoying when it happens but you feel like they've got your back (even if they struggle sometimes to get BT working).