4 ms·

> MacOS is a terrible server OS if you're exposing TCP services to the public. I wish you had listed at least one or a few technical reasons why that is the ca

> MacOS is a terrible server OS if you're exposing TCP services to the public. I wish you had listed at least one or a few technical reasons why that is the case. It's assertions like these which uninformed people then go around parroting in unrelated contexts, in the hopes of gaining HN points because someone with 18k odd HN points made this statement, so surely it must be true. This is how all the "experts have said ..." information gets born.

toast0 4y ago
It has no syncookies or syncache, as I alluded to. It is super trivial to synflood a mac that listens on tcp port. The port of pf has a synfilter, but that doesn't work for traffic to the host, it might work for forwarded traffic, but not for the host itself.
- hnchamber 4y ago
  Thank you for adding this detail.
- mattl 4y ago
  It reads like they added it. I thought Apple rebased at some point but maybe that was when NeXT merged with Apple.
  - toast0 4y ago
    They did, but they is FreeBSD there. Pronoun confusion, I'll work on it.
    - mattl 4y ago
      Aha!
brutusurp 4y ago
ty