Viewing profile — wftglf

Disappointed to discover OP didn't actually go and eat in all the kebab shops.

Hmm but is it excellent for kebabs? I'm more a falafel person so can't really judge but I think crystal kebab is the only one and it doesn't do any form of deep fried chickpeas I r…

I wouldn't say it's wanton abandon - here is a deeper explanation of the threat model of SecureDrop workstation https://github.com/freedomofpress/securedrop-workstation?tab...

Hey, author of the post here. I've had quite a bit of feedback on the post from some people with a lot more Qubes experience than me - there are definitely some issues with it - e.…

On our team we swapped databases 6 times in a year. We’ve landed on Aurora Serverless V2 – was it worth it?

Nice work! In the past I've used https://privnote.com/ for this kinda thing but it doesn't allow as short self destruct times

> It's not too long ago they would ask for information faxed using company letterhead, as a form of legitimization. I had PayPal ask me for exactly this (emailed rather than faxed)…

No, I think it's on our own infrastructure.

It's the same system, just without any tags on it that mix it in with editorial content. I think if we wanted it published somewhere like the technology section we'd have had to go…

The main advantage of the migration was getting onto a fully managed DB. What we didn't mention was that there were also huge cost implications - savings of ~£40k - through switchi…

In a happy world the guardian wouldn't rely on a company we spend a lot of time reporting on for unethical practices (tax avoidance, worker exploitation etc.) - but we decided it w…

Thanks to hacker news and reddit this piece got over 100,000 page views which should be enough to justify the blog staying on platform!

Sadly we don't trust our security practices anywhere enough for that! Secret investigations happen in an air gapped room on computers with their network cards removed then get move…

Yep that's what we were doing, and the management software (OpsManager) was also running on EC2 instances. We messed up the VPC configuration so that NTP didn't work on some of the…

Yeah it did take a long time! Part of this though was due to people moving on/off the project a fair bit as other more pressing business needs took priority. We sort of justified t…

Hi! I'm one of the authors. Good point, we should add something on that. Briefly our mongo db setup was running on 3 r4.xlarge instances which comes to around $5000/year with stora…

Fair criticisms! It's true if we'd used Mongo Atlas or something similar it would likely have been a different story - often the MongoDB support spent half the time on the phone tr…

Hi! Thanks for your comments. I'm one of the authors of this post. It is the same platform at the moment (just not tagged with editorial tags so it stays away from the fronts), tho…