12:37:01 GMT <tzudot> ls
23:06:40 GMT <raz> i can't believe redis still doesn't support SSL
23:06:44 GMT <raz> what a PAIN
23:10:42 GMT <minus> i wonder if they'd accept a patch
23:11:29 GMT <raz> the theater around it is ridiculous beyond belief... there's pages over pages about idiotic, unmaintainable workarounds
23:11:55 GMT <raz> instead of simply adding SSL like every single other database in existence
23:12:21 GMT <raz> meanwhile every single rediscloud customer is running a world writable database.  any intern at the ISP can sniff their password and write to their redis instances.
23:13:58 GMT <minus> fwiw running an internet-accessible redis instance isn't the best idea anyway; a vpn or so seems the better way
23:14:32 GMT <raz> well duh, with SSL support it'd be a non-issue
23:14:52 GMT <raz> thousands of people run their postgres publicly exposed (on AWS RDS etc.) just fine
23:15:33 GMT <minus> it still isn't the best idea
23:16:54 GMT <raz> not supporting SSL is a horrible idea
23:17:42 GMT <minus> oh, there even is a PR https://github.com/antirez/redis/pull/2402
23:24:19 GMT <raz> https://support.redislabs.com/hc/en-us/articles/202264006-Do-you-support-SSL-
23:24:32 GMT <raz> ...
23:26:19 GMT <minus> why would you expose backend services to the public internet anyway
23:26:34 GMT <raz> because it's 2017 and that's the reality of cloud services
23:26:39 GMT <raz> welcome to the internet!
23:27:05 GMT <raz> how would *you* use redislabs exactly?
23:27:11 GMT <minus> i wouldn't
23:27:30 GMT <raz> well duh, it seems to be the official redis SaaS
23:27:37 GMT <minus> we just run our own redis instances
23:27:42 GMT <raz> just collect a ridiculous amount of investor money, too
23:28:16 GMT <raz> well, that's what i'm seeking to avoid, because the brittle stunnel nonsense is a bad joke
23:28:46 GMT <minus> we just run a VPN
23:28:53 GMT <raz> "just run a VPN"...
23:29:01 GMT <raz> i take it you're not the admin ;)
23:29:03 GMT <minus> not that'd i'd have done it differently if redis supported TLS
23:29:49 GMT <minus> i am, somewhat
23:30:21 GMT <raz> yea well, i am full what, and so i'm not inventing new problems just to host a trivial memory db
23:30:50 GMT <raz> i rather rant on irc about it, maybe antirez sees and is appropriately ashamed
23:31:01 GMT <minus> =D
23:31:56 GMT <raz> https://redis.io/topics/security
23:32:01 GMT <raz> look for "protected mode" on this page
23:32:21 GMT <raz> i mean...  what do you have to be smoking to even get to that point of writing a paragraph like that and not hang yourself immediately afterwards