edutechnion
Joined 11 years ago
Joined 11 years ago
> Max “Scoopie” Allen was making an Old Fashioned in the Seelbach Hotel Rathskeller in 1917. Whether someone bumped him or was walking by with an open bottle, somehow champagne splashed into his mixing glass.
NYTimes wrote about this created history:
> Shortly after being put in charge of the hotel’s bar and restaurant operations in 1995, Mr. Seger declared that he had discovered a recipe for a pre-Prohibition cocktail that was once the hotel’s signature drink.
https://www.nytimes.com/2016/11/02/dining/seelbach-cocktail-...
* "authorized S3 team member" -- how did this team member acquire these elevated privs?
* Running playbooks is done by one member without a second set of eyes or approval?
* "we have not completely restarted the index subsystem or the placement subsystem in our larger regions for many years"
The good news:
* "The S3 team had planned further partitioning of the index subsystem later this year. We are reprioritizing that work to begin immediately."
The truly embarrassing that everyone has known about for years is the status page:
* "we were unable to update the individual services’ status on the AWS Service Health Dashboard "
When there is a wildly-popular Chrome plugin to fix your page ("Real AWS Status") you would think a company as responsive as AWS would have fixed this years ago.
https://github.com/search?q=%22Upgrade+Apache+Commons+Collec...
* us-east-1.amazonaws.com: split between internal, UltraDNS, DYN
* spotify.com: all internal nameservers now
* reddit.com: all Route53 now
* github.com: all Route53 now
* netflix.com: all Route53 now
* paypal.com: split between UltraDNS and DYN
No changes made:
* twitter.com: 100% with DYN
* SPF: limit your record and all includes to 10 DNS lookups (e.g., "A MX include:_spf.google.com" is 3 DNS lookups plus all of the lookups inside the include.
* DMARC: to see a strict reject policy, check out Yahoo:
$ dig +short -t txt _dmarc.yahoo.com
"v=DMARC1\; p=reject\; pct=100\; rua=mailto:[email protected]\;"
* Mail forwarding: if your app sends mail as the logged-in user, make sure the user's actual email address is not in the FROM address as Yahoo does not authorize you to send FROM: [email protected]* DMARC emails: use dmarcian.com to parse and process the auto-generated emails
* SPF: use the ~all for your first day of testing and then lock it down to -all after testing is complete
* DKIM: OpenDkim appears to be the most widely supported Linux software package.
* DKIM keys: setup a TXT entry you control and ask client to CNAME it. Then setup key rotation.
May 2010: Om Malik "Android Has Won — Time for Chrome OS to Move Along?"
In 1955, the NY Times led with "United States has Secret Sonic Weapon-Jazz"
http://thereisjazzbeforetrane.blogspot.com/2009/08/us-has-sonic-secret-weapon-jazz-nytimes.html
Why did they fund jazz like they funded abstract expressionism? Jazz was the ultimate display of democracy and integration, improvisation and the exchange of ideas.