The community edition is not robbed of its value by this move. They provide a CLI tool (mc) for those admin tasks which previously could be solved via dashboard.

I have several minio instances deployed to k8s for small to medium, and non-profit projects. Easy to deploy, no problems or outages, yet.

But anecdotally i remember multiple occasions, where a quick tour of the dashboard convinced peers, that minio was the right tool for the job.

From my point of view it is much more questionable, that they "dare" to advertise the paid version with a 96.000 USD p.a. "platform fee" plus additional cost if you use more than 400TB. Small fish need tools, too.

> The community edition is not robbed of its value by this move

They literally remove features, and you defended them by saying "there's CLI available"?

> How is this not the same issue?

Although not explicitly stated, i read previous comments as using dick.less@privateequity.com to cancel his personal Netflix account. (Let's say that privateequity.com allowed personal usage of company email.)

I see a difference between accessing an email account and impersonating the previous account holder.

As we are sharing anecdotes:

One of my school math teacher had the same approach in another way: We were expected to use greek letters, not latin ones.

Same reasoning: It showed us kiddos that the letter was insignificant compared to the concept expressed by the letter.

So my take would be: Your friend taught the students for the first time what they were actually doing while handling equations with "a letter in it". That is no problem of algebra in itself. It just means their previous teachers sucked.

I saw a textbook that used a picture of a box in the equation. The number is hidden in the box, and you are supposed to figure out which number it is.

"Unreliable" is a bit harsh - the problem arises imho not from the websocket ping itself, but from the fact that client-side _and_ server-side need to support the ping/pong frames.

sry to be that guy (with a snarky comment):

> Over the 20+ years, I witnessed a few security incidents.

As you said, the attackers who breached your system had ssh root access and you had no chance to detect them.

Attackers attack for a reason. For targets like my servers, they mostly want to install mining software or a DDoS bot. This is detectable via cpu or network monitoring.

I assume if someone wanted to extort money from me after encrypting the disks on my servers, I would also be somehow informed.

> ... because you cannot attach an Authorization: Bearer header to a websocket.

Well, not properly. You can abuse the Sec-Websocket-Protocol header to pass an initial token to the server.

:) I have in fact done that.

Was there a specific reason to use AGPL-3.0? Not critizing, just asking.

Tried to read about the license and was greeted by a tl;dr summary of the AGPL-3.0 license [1]. I am no lawyer but my gut tells me that providing such a summary is an invitation to strange disputes. Take care.

[1] https://mercure.rocks/docs/hub/license

Also not a lawyer, but discussed this with multiple lawyers. As long as you make very clear that you're summarizing the legal document, but the legal document you're providing is the canonical truth, you're allowed to provide those kind of summaries.

For example, Creative Commons has a visual/bullet point explanation of their licenses. That's entirely okay, as the legal text is the core license.

I had a similar discussion with a lawyer once about a TOS that also included a summary. The lawyer told me that as long as you make it clear that your summary is just a summary, and is not the agreement, and you point out the actual agreement, you're okay.

In this case, the OP is pointing to the legal text clearly and merely summarizing it's most salient points.

Again, IANAL and this is not legal advice.

Another option is to have a read-, and a write-pump goroutine associated with each gorilla ws client. I found this useful for gateways wss <--> *.

> They will still be a game changer for workplace safety.

Sure. The robots could be used to distribute shoes and safety equipment to the less fortunate child laborers around the world.

"support or engage in terrorist or violent extremist offences"

What constitutes "support"? Hopefully your next government is OK with you back then liking the post of that one organization previously not classified as terroristic.

I wonder if arguing against someone who says "Group X eats babies with kitten sauce!" would count as supporting Group X...

At the very least you're connected via metadata, so Project Insight will still be interested in you.

The Holy Land Foundation case comes to mind.