Ayesh

74 ms·

871.
by Ayesh 8y ago
> but stateful connection management comes with a cost, especially on tcp. Keep-alive isn't any better. In Apache bad nginx, keep-alive and http/2 parallel requests are handled at a separate thread and hardly adds any noticeabl
872.
by Ayesh 8y ago
If you run your own mail server, you can simply catch-all. The + trick is for the rest.
873.
by Ayesh 8y ago
TIL too, but I'm honestly not surprised.
874.
by Ayesh 8y ago
I am freelancing on my 10th year now (never set foot in an office to work), and let me tell you hiring people on freelancer.com, no matter how much the budget is, won't end up good. Fiver and freelancer.com has the worst kind of freela
875.
by Ayesh 8y ago
This should be part of the job, no matter how tight the budget is. Password hashing is quite accessible in almost every language and I can't think of any excuse not to hash passwords.
876.
by Ayesh 8y ago
Over 4000 stars. Nice.
877.
by Ayesh 8y ago
Yes, orange is the new black.
878.
by Ayesh 8y ago
I wouldn't call myself productive, but I take a great pleasure in Security bounty hunting. My day to day work doesn't leave me a lot of freedom to spend a few hours focused in something.
879.
by Ayesh 8y ago
Credit card forms are probably the most over-engineered inputs, majority of which lead to break my browser autocompletion.
880.
by Ayesh 8y ago
The "buy me a taco" message is more prominent than what this service really does and how.
881.
by Ayesh 8y ago
That whole Heart Bleed incident was a blessing for OpenSSL. It's now quite active: https://github.com/openssl/openssl/commits/master
882.
by Ayesh 8y ago
I've recently started to use them for my freelance income as well (I'm not in the EU), and it's amazing how much I was paying for regular SWIFT transfers. I don't know if there's any relationship to this news, but T
883.
by Ayesh 8y ago
You'll be surprised how much data you can easily grab out of thin air, if you probe the right frequency.
884.
by Ayesh 8y ago
Looks like a really cool approach for git-tag based release management in a CI level. TIL about git-notes which looks pretty neat.
885.
by Ayesh 8y ago
ACME protocol is fairly straight forward to implement, and you can easily write your own implementation with existing code (OpenSSL, Apache/nginx, etc). With many commercial registrar's, although they offer a valid and long certif
886.
by Ayesh 8y ago
You are talking about EV certificates. OV-validated certificates require (the best case) the user to click on the padlock icon to reveal more information about the certificate.
887.
by Ayesh 8y ago
I recently read an HN thread about Romanian ccTLD registry selling domains for lifetime. They have stopped it and asked the former customers to pay up though.
888.
by Ayesh 8y ago
Unless I'm thinking of something else, it's not a domain registered through CloudFlare. The taken down site was using CloudFlare's reverse proxy service. IIRC, Matthew wrote about the incident in length. I personally don&#x27
889.
by Ayesh 8y ago
I couldn't recommend namesilo more! They almost always have the slowest price, very close to what the registry charges them. Their UI is dead simple and gets things done well and fast.
890.
by Ayesh 8y ago
My developer self loves this idea, knowing that my secret key doesn't even leave the computer. My traveler self hates the idea, because I can't read my emails from my friend's phone when my phone is broken during our 6 month
891.
by Ayesh 8y ago
I always hesitate to even use a service that has customer IDs. Most of the frequent flier programs have numeric IDs and there's no way I'm going to remember them. It makes things worse because you don't always have a password
892.
by Ayesh 8y ago
Firefox blocks third party trackers by default. In some rate limiting implementation, this often signals a bot that don't often retain tracker cookies.
893.
by Ayesh 8y ago
Conpared to many cities that we consider diverse (NYC, Amsterdam, London, etc), Singapore is by far more diverse, perhaps only second d to Dubai. Their metro lines have announcements in 4 languages, and you can even get away without speakin
894.
by Ayesh 8y ago
I cringe every time I hear someone going "fully Serverless" or NoSQL or whatever is popular these days. From the article, it mentions Torri, a site that is ~1.5 millionth in Alexa rank. I understand they probably have a backend wi
895.
by Ayesh 8y ago
True, Amazon Prime is full of dark patterns when you want to cancel. I got the first two months free (Amazon.de), and at the end of the trial, when I wanted to cancel, they added a month for free, and I accepted the free month. My card was
896.
by Ayesh 8y ago
Old hardware will eventually die and needs replacing. I run infrastructure for a CDN setup, and we actually _reeuced_ the CPU overhead with TLS 1.3 + HTTP/2.
897.
by Ayesh 8y ago
In my country, the ccTLD registry is run by a university. While the professors have done an excellent job, the NIC itself was hacked a few times back, there is no admin UI (call a 19 year old kid and set your nameservers with NATA phonetics
898.
by Ayesh 8y ago
It's also easy to just scan a whole range (say, top 1m Alexa domains) and log the IP. You can scan 1m sites on a cheap $5 VPS nowadays.
899.
by Ayesh 8y ago
When I first read that Google is funding WordPress development, I was honestly expecting that Automattic would use that money to update their code base. It's horrible 15 year old code that has no namespaces, autoloading, or any of the
900.
by Ayesh 8y ago
Why even waste time, money, and a domain name on some shitty web hosts tracking script? The XHR payload shows what data it is sending.

More ›