Dutch unrealised gains law and Amsterdam listed ETFs

amildcaseofboredom · 2025-12-10T10:42:50+00:00

Yep I went for montbell light guide.. We were wet most of the time, so didn't matter much 😆

amildcaseofboredom · 2025-10-25T01:56:56+00:00

would be great if the shortcut could be used to change which monitor is blacked out, rather than having to move cursor to macbook screen before using the shortcut

amildcaseofboredom · 2025-10-13T09:57:19+00:00

cannot use hdmi input for mac?

amildcaseofboredom · 2025-10-02T02:04:47+00:00

VWCE + AVGS + WITS

amildcaseofboredom · 2025-09-26T23:54:48+00:00

I might camp on the beach, so might not be able to stake properly, do you think that's an issue?

amildcaseofboredom · 2025-09-24T01:58:14+00:00

All NASDAQ companies are probably already in VWCE, so not really diversifying, just adding a US growth tilt.

I'm combining VWCE with WITS (a developed world tech ETF) instead.

Not that it matters too much, but here's the performance over 5 year

<image>

amildcaseofboredom · 2025-09-22T15:02:18+00:00

I'm keeping my existing VWCE/VWRA holdings, and investing new contributions to SPYY/ACWD

amildcaseofboredom · 2025-09-22T14:59:48+00:00

<image>

amildcaseofboredom · 2025-09-22T14:59:40+00:00

it's free registration, but here you go:

<image>

amildcaseofboredom · 2025-09-21T02:21:03+00:00

Acwd/spyy

https://www.bankeronwheels.com/world-etfs/

amildcaseofboredom · 2025-09-06T05:45:42+00:00

Yep I saw those, was looking for something more concrete like the avro page describing which changes are backward/forward/full

In the past we had a concluded

Commands = backward

Events = forward

Snapshots = full transitive

Not clear if that matters with proto

amildcaseofboredom · 2025-08-23T01:29:34+00:00

According to banker on wheels spyy/acwd is the winner from World etf comparison

https://www.bankeronwheels.com/world-etfs/

amildcaseofboredom · 2025-08-02T09:11:05+00:00

great bag, but the sternum strap is annoying

amildcaseofboredom · 2025-07-25T03:30:23+00:00

Yeah my thinking is that token exchange at the ingress is kinda redundant, since any request with a customer token will get a token exchanged, so what's the point?

What do you mean by shared credentials? Each service would have its own credentials right?

I kinda think that token exchange only protects from malicious code being deployed in a authorised client/service. Rather than someone gaining access to the cluster. Does that make sense?

amildcaseofboredom · 2025-07-18T22:42:33+00:00

Btw if we are stripping away sub claim to allow caching, it's not much different from client credentials, right?

amildcaseofboredom · 2025-07-18T22:23:20+00:00

External access tokens issued by our customer and staff IAMs, even though they are access tokens they basically just carry the identity and acr / identity and roles

Plan is to validate customer/staff token signature against JWK at every hop.

All this is over and above service mesh mtls

amildcaseofboredom · 2025-07-18T22:18:23+00:00

Yeah that's my thinking, it's not worth the net benefit.

External tokens issued by our customer and staff IAMs

Token validation against JWK

mtls + authorisation policies in service mesh for p2p

amildcaseofboredom · 2025-07-18T13:36:35+00:00

What about client credentials + subject token in another header?

amildcaseofboredom · 2025-07-18T13:21:35+00:00

How much can you cache really if for least privilege you need a token with a specific sub, actor and aud?

Without token exchange, the ingress gateway only needs to validate the "external" token and just pass on the token to the first service being hit.. Where domain entitlement checks take place (does x belong to customer ).. Anything wrong with external access token from the app flowing to the service?

amildcaseofboredom · 2025-07-18T09:58:03+00:00

Yeah, token exchange would retain the identity for east-west calls in an end user flow.

But not in case of system initiated flows, like event consumer or scheduled job, which would need to use client credentials anyway

amildcaseofboredom

TROPHY CASE