Hacker News .hnnew | past | comments | ask | show | jobs | submit | L-four's commentslogin

The number one feature which would resolve this is. A list all resources page.

Agreed. AWS is downright hostile about giving you any idea about what resources you actually have deployed, to the point where it must be deliberately malicious. Even their billing page is terrible for tracing down the root cause of usage with the default configuration.

You have to go into third party tooling if you want any chance of seeing what’s actually going on, especially if there’s any odds of you deploying stuff in another region and even moreso if you have more than 1 account.

At this point, I’d say it should be a best practice of owning 2 AWS accounts, even as a hobbyist: one payer account with a HEAVILY locked down SCP and then a child account with the stuff you’re deploying.


Gmail was in beta for 5 years, until 2009.

"Gemini, translate 'beta' from Googlespeak to English."

"Ok, here is the translation:"

    'we don't want to offer support'

Nah, it's "We dont want to provide a consistent model that we'll be stuck with supporting for a decade because it just takes up space; until we run everyone out of business, we can't afford to have customers tying their systems to any given model"

Really, the economics makes no sense, but that's what they're doing. You can't have a consistent model because it'll pin their hardware & software, and that costs money.


I have a service that relies on NanoBanana Pro, but the availability has been so atrocious that we just might go back to OpenAI.

Just like any Google product then.

Until it had backup storage. Which ended up being useful in 2011 when tens of thousands of mailboxes were deleted due to a software bug and needed to be recovered from tape...

It was a different company back then. The Internet was still new-ish and not the multi-trillion dollar company it is now. I'd think expectations are different.

The cheapest way to make hydrogen is to use fossil fuels.


The payment in mobile games are a one button click. Browsers will never support this, as they're all funned by advertising.


No at 310k you get $1 dollar at 311k you get $0. But you know like you have 999 more dollars than before. Assuming Post tax income.


Where did you read that? It says you get 50% up to $310k, that very clearly means if you make $310k you get 50% off.

> Officials to offer 50% subsidy up to $310,000


I think the correct solution is to use a keyring. On Linux there's gnome keyring and last time I worked on a IOS app there was something similar.

This does mean entering your keyring password a lot.

https://en.wikipedia.org/wiki/GNOME_Keyring


> This does mean entering your keyring password a lot.

Not when you put that keyrings password into the user keyring. I think it is also cached by default.


Then what stops the malware accessing the keyring?


The security boundary on the OS is the user of the process. If you run the malware under the same user as the key, than yes of course it has access. But in production you don't run software under the same user, and on the developer machine you wouldn't put the production key in the user keychain.


On disk, it’s encrypted. The running service, at least on macOS, only hands the item out to specific apps, based on their code signing identity.


Who signs an "app" when I download it from Homebrew?

If all Homebrew "apps" are the same key then accepting a keyring notification on one app is a lost cause at it would allows things vulnerable to RCE to read/write everything?


It's a tragedy of the commons. Even if you don't use Cloudflare does it matter if no one can pay for your products.


Always use theses in testing don't ask me how I know.


No it's a neoliberal thing. Rather than the government doing the thing. They hand out massive subsides and hope it gets done.


Developer time is more valuable than user data. The market is being efficient.


I think you're assuming an ideal world where there's no information asymmetry, all the market participants receive and understand all the information and the risks, and clients could realistically move to an alternative platform that provably handles things better.


Externalized costs aren't weighed in that calculation


No.Just greedy.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: