reqres

Thanks for the recommendation. Seems like a natural X-COM follow on. Appears to be 60% off on Steam atm as well!

Donation link to the organisation that uncovered this abuse: https://viva.org.uk/join/

If the UK was a US state, it wouldn’t quite be the poorest per capita. It would be USD400 per person better off than Mississippi. Everywhere else – from Arkansas to Washington – would earn anywhere between several thousand to several tens of thousands more.

For ISO 27001:

- Two-factor authentication (2FA) - Not stipulated - Access control for any accounts that store sensitive information - Access control policy is required - End-to-end encryption - Not stipulated - Training staff in data protection awareness, and a data privacy policy - Training policy is required

For the controls not stipulated in the standard (e.g. 2FA, E2E encryption), you may find you ultimately need them once you do an information risk assessment. As long as you explain clearly why the risk is not significant enough to require it or have good alternate controls, you won't get dinged by the auditor for not having these.

The standards are not incoherent. However by design they need to be abstract to apply across very diverse businesses.

I've implemented ISO 27001 myself (solo dev founder, 6 person company, USD2mn SaaS). The divergence in quality of the implementation depends on whether the company is actually using IS027001/SOC2 as a tool to formally define, implement and monitor information security or finding the path of least resistance to accreditation.

I've successfully implemented ISO 27001 (CTO, Sole Founder, ~USD2mn ARR SaaS Business). Had a small team around me (5 people) but essentially implemented ISO 27001 myself spread out over 6 months.

Would be very difficult to write a complete guide - it's a long journey and accreditation requirements very specific to the business. Do you have specific questions or areas of concern in mind? Been thinking I could write a few blog posts about my experience.

COVID-19 induced a recession all around the globe

I'd say there's one extra preliminary step missing:

Before (0): Understand if it needs to be built at all

UK expat in NL (3 years). Concur wholeheartedly. The Dutch have nailed their SSO app (DigiD) - this is the model to copy.

It eliminates a multitude of steps (sign up, proof of identity, credential management) to accessing any government service from booking COVID tests to paying taxes.

I'm a British software developer and SaaS business owner

I left the UK in 2017 because of Brexit. My company generates about GBP150k per employee. Prior to leaving this was 100% UK workforce. Following my relocation this is <50% and falling as we move to contract-based + remote. That's my n=1 experience with the "brain drain"

When I left the UK, there was a large & growing political/economic divide, unaffordable housing and poor/declining public services. It gave me a lot of stress and anxiety. Having left, I feel more disinvested from how things are turning out in the UK and it's helped greatly with my wellbeing

I've met other brits in my host country that share my n=1 experience. We're all just trying to quietly get along with it really - stay working and raising families

Isn't this a legitimate trading strategy in financial circles

Contracts like credit default swaps pay out if some organisation fails to meet their (debt) obligations

I'm an EU resident with a SaaS business storing EU personal information.

It's forced us to think more carefully how we build systems to pick up, retain and scrub data. So all clients (>1,000) and their clients (likely in the millions) have benefited

They absolutely won't have noticed a difference - by design!

Unbeknownst to downstream users, there are now more rigorous systems in place to manage this information and reduce the surface area where it might be captured

> where we should have (and ended on) docker / compose

We ended up doing this too.

Do you have any links to deploying docker-compose in production? We've not been able to find out much. However our solution seems to work well - am keen to find out how other people are managing host setup, updating and remotely controlling docker-compose

In our setup, we essentially use docker-compose as a process manager:

- Updates with docker-compose.yml via git syncs

- Logging via journald (which in turn is forwarded)

- Simple networking with `network: host` and managing firewalls at the host level with dashboard/labelling

- Restarts / Launch on startup with `restart: always` policy

IMO, more straightforward in the past

1) Entrusting everything to a package manager or build script which might break on a new version release

2) Maintaining ansible script repository to do the host configuration, package management and updates for you - these too always need manual intervention on major version updates

Congratulations on the launch. It looks great and I wish you success on this project

Could you kindly answer this question for me. How does your product compare to pushover.net? Are the problems to be solved the same? What are the tradeoffs?

Thanks

That's fair, the London-Manchester issue is specific to our particular client base.

However the absurd cost of low quality rail travel (often standing room only, less frequent trains following new time table, poor customer service) is real. Right now I'm paying £3.5k a year for an annual rail pass to take me into work (for instance). The alternative would be to move further into London and pay double in rent for the same accommodation / standard of living

This is welcome move by the new Home Secretary, but the thing that terrifies me the most is the end of free movement when we leave the EU. As the director of a software development business, I have to contend with a very tight market for good developers.

After brexit takes place, any EU citizen I wish to employ will have to go through the Tier 2 visa route. There are 3 major issues with this. 1. It's capped at 20k people per year. 2. We do not have the deep pockets and the legal/HR team to navigate the home office to procure such a visa 3. It does not provide sufficient guarantees for bringing and settling down a family

On top of that, we also have to contend with many structural issues that makes the UK (London in particular) a less appealing place to attract talent:

- High cost and low quality of living in London

- Poor transport infrastructure (it's cheaper to eurostar London-Amsterdam than train London-Manchester)

- UK politicians and media do not stand up for the benefits of immigration and is willing to allow blanket demonisation of immigrants to go unanswered

- All the negative externalities associated with an overcrowded city (overcrowded public transport, knife crime, NOX pollution in excess of legally permissible levels)

This is wrong.

Either:

1) You don't know what libertarianism is

2) You don't read the economist very closely

3) You meant liberalism

Given you think that the economist dogmatically believes in less tax, regulation and trade barriers, it seems more likely you don't actually read the newspaper very closely.

Take healthcare in US for instance. The economist consistently favours more government intervention and higher taxation with a single payer health system. Just taking one example from the current Europe editor (I think): http://www.economist.com/blogs/democracyinamerica/2013/09/he...

> In fact, government intervention is often necessary in order to bring comprehensibility to a bewildering private landscape.

IIRC, there was also a time when Elasticsearch used multicast by default to detect other ES nodes on the network and to add them to the cluster automatically. So any node joining the same network will join a cluster and have shards allocated to it

Given Trump's propensity to publicly denounce individual organisations, including threats of withdrawing government business, it's hardly surprising that companies are now lining up to court Trump's favour in the same vein as Carrier. The only thing that does surprise is just how quickly companies are adapting to the new game and lining up to present King Trump some kind of offering.

The most recent Economist cover story provides some interesting perspective on this http://www.economist.com/news/leaders/21711314-president-ele...

> Which leads to the 'callback hell' that we all know and hate. Part of the bill-of-goods we accept when using Node is that in exchange better time and space characteristics, we lose the thread as an abstraction.

Perhaps my head has been stuck in javascript/node land for too long but I think accusations about javascript producing callback hell now seem a bit disingenuous even for relative novices to the language.

It's 2016 and there are many well documented and widely adopted solutions arising from external libraries and developments in ECMAScript. Thanks to transpilers like Babel/Typescript we can even shoehorn these new ECMAScript features into older browsers.

Having tried self-hosted and cloud logging solutions, Papertrail is one of the services that we subscribe to that I feel pangs of gratitude when we receive our monthly billing notification.

Some of the things I liked about Papertrail:

- Super easy to setup (& automate setup). Just a dozen lines of setup in rsyslog.conf

- Also ships with a tiny client written in go if you want to tail specific files

- Sensible pricing. Charges per GB, which for us at least, correlated with how much business we were doing. Now we'd gladly pay more for the same service

- Great dashboard/UI. Having started with loggly, we were used to slow, unresponsive, unintuitive dashboard. As loggly grew, the dashboard increased in complexity. Papertrail by contrast is fast, simple and made sense (at least to us). It's quite surprising how simple it is and yet performs it's job very well. Although we don't use the live log tailing so much, the log grouping & notification system is very intuitive and easy to setup.

- Easy S3 archival. Took about 10 minutes to setup

Thank you Papertrail

Please do not look upon popular economics best sellers as a good way to get a rounded economics education. While many have value in critical insight and entertainment, they often offer only a narrow perspective on economics. Novice economists typically lack the ability to critically appraise them without a wider economic framework to work from.

An academic reading list (i.e. university course texts) will provide you a good theoretical foundation as to how economists interpret and model real economic issues. It's important to grasp the plethora of important economic concepts like diminishing returns, comparative advantage and concepts of market efficiency (among many others things) and how they apply within micro or macro economic issues.

With some foundational knowledge in place, a good economist then goes on to relax the underlying assumptions and look for analogues in the real world. This is where the popular reading list come in, often they take a deep dive in specific areas i.e. where traditional economic assumptions break down.

In short, the academic reading list gives you a framework to understand economics. The best seller list tempers that framework with real world exceptions, paradoxes and open questions.

It's a bit disappointing to see a real academic reading list so far down this comment page (I strongly recommend looking at oli5679 suggestions). I doubt HNers would suggest reading up on javascript as a good foundation for a computer science education. Yes, you can become a well rounded computer scientist by starting on javascript. But it's more important to have a grasp on core computer science ideas like algorithm design & analysis and automata.

A core banking system captures and stores all the transactions and business a bank performs. Without this a bank would not be able to function let alone produce a meaningful financial report.

Could you be specific. In what particular areas do you need a consistent point-in-time snapshot?

Having worked in finance myself, as part of a team that procured and replaced an international core banking system with a state-of-the-art, multi-hundred million dollar successor; we've never had a strong consistency requirement. Much weaker forms consistency sufficed for their needs and the requirements of regulators.

Also what big trouble do you mean? I do not know of any financial regulators that expect banks to have a totally consistent point-in-time view of their balance sheet. Furthermore the Basel Accords and similar banking supervision rules do not mandate such a requirement.

I be very much grateful if you could provide me with this information, as I can pass it to my former colleagues who will be quite surprised to discover this requirement.