EB66

11 ms·

61.
by EB66 5y ago
Yep, that's correct.
62.
by EB66 5y ago
There's an interesting way you can implement TOTP that avoids the phishing problem described in the article. The method doesn't work for all situations, but it works for many -- it works particularly well if all you're trying
63.
by EB66 5y ago
Oh yeah, I completely forgot to mention that. The performance gains are immense when you use Pl/pgSQL to eliminate round-trips to the database. That's easily one of the most important reasons to use Pl/pgSQL. The vast major
64.
by EB66 5y ago
> 1. How do you handle versioning? Like if you want to try a development branch on a non-branch/shared db. Creating different version of stored procedures creates a recursive problem. A calls B, now A’ has to call B’ Writing UDFs an
65.
by EB66 5y ago
> Working with SQL in X (any language) usually has a poor developer experience that is why ORM or query builders are popular. At least when it comes to Postgres, I don't understand why more developers don't create their own use
66.
by EB66 5y ago
> I point out that your generation is also destroying the planet. No, not quite. You stated "no one decided [to harm the environment]". My reply sought to explain how that is incorrect. > You acknowledge that—-taking the pos
67.
by EB66 5y ago
What? Of course humans have decided to harm the environment. It happens every day and has happened for as long as humans have existed. I don't think his comment "divides the world into good guys and bad guys" -- it merely poi
68.
by EB66 5y ago
In San Francisco a family can absolutely make do with $400k annual income, have a home, go to decent schools, put kids through college, save for retirement, etc. You wouldn't have to live in and commute from Oakland. You could still am
69.
by EB66 5y ago
> In some places $400k can give 8 families this life. In others not even one. It depends. Ummm, where exactly in the world is $400k per year not enough to survive? Monaco? If you earn $400k year after year, then you are earning enough to
70.
by EB66 5y ago
I'm surprised there's only one other person in this discussion who has mentioned swim lanes. They are incredibly useful! Swimlanes are basically process flow diagrams (aka flow charts) but with lanes that indicate which actor or s
71.
by EB66 6y ago
We're talking about a situation where an attacker would create the service disruption by enabling Host header checks on an origin server that the attacker doesn't own. So a warning wouldn't help because that warning would be
72.
by EB66 6y ago
But in order to safely enable that check for all requests that go from CloudFlare to the origin IP, you would first need to verify ownership of the origin IP. You wouldn't want users who don't own the origin IP to be able to turn
73.
by EB66 6y ago
What would CloudFlare automatically check the Host header against? The Host header would be set to the attacker's domain (which is in CloudFlare) and, per OP, CloudFlare does not verify ownership of the origin server IP. It would be a
74.
by EB66 6y ago
I have the same problem. A lot of people do. For me, it developed during my 20s. My mother is a speech language pathologist so the problem was identified early. What you have is a hearing discrimination loss. It's often caused by dimin
75.
by EB66 6y ago
Or more accurately: owning property and being told your place in the community.
76.
by EB66 6y ago
I think you're underestimating the impact of being an ex-Googler. VCs are inundated with mobile app pitch decks from all kinds of random people with no relevant experience. Receiving a pitch deck from an ex-engineer of a highly respect
77.
by EB66 6y ago
100% this. Cloud vendor lock-in is absolutely a relevant factor for consideration -- especially when the non-cloud alternatives are ~10x cheaper. At my company we made the decision to stick primarily with managed dedicated servers over AWS
78.
by EB66 6y ago
> RDS multi-zone AZ deployment I don't know about all RDBMS brands, but if you're running Postgres then setting up a read-only slave is trivially simple. You run one command to promote it to master. At my work we use both AWS a
79.
by EB66 6y ago
> I suspect most systems that still need to connect to the internet trust the ISRG root nowadays. There are tons of systems that do not -- particularly in the enterprise. I manage web servers for a mission-critical healthcare-related Saa
80.
by EB66 6y ago
Frankly, I think many people here are overestimating the cost of electricity and cooling. My company leases several 42U cabinets with 208V 30A circuits in a modern SOC 2 Type 2 audited datacenter. We pay $600 per month per cabinet. Excludes
81.
by EB66 7y ago
If the municipality lays the fiber and provides the internet service, the result may be poor. But that doesn't have to be the arrangement. The municipality can lay the fiber and allow multiple companies to offer internet service over t
82.
by EB66 7y ago
Cogent salespeople are the worst in the industry. If your contact information lands in their database, they'll never stop soliciting. At least once a year for the past 6 years Cogent calls my personal cell phone. This continues despite
83.
by EB66 7y ago
IIRC maganese was used by virtually all American glass manufacturers from the 1800s til 1920ish. So I suppose if the glass was dyed purple, it would turn more purple as it was exposed to UV but only if the glass was manufacturered during th
84.
by EB66 7y ago
> How does T-Mobile know there's a problem worth calling the C NOC about? One way is to see the frequency and duration of calls. Or make it easier for consumers to report spam calls. For example, dial *666 after hanging up on the sp
85.
by EB66 7y ago
I agree completely. I work for a small ISP and we sometimes do the same thing for significant bad actors abusing our network. A phone call to the NOC of the ISP hosting the abuser or the NOC of their upstream transit providers usually gets
86.
by EB66 7y ago
> I mean, my company does this for certain failure scenarios involving our CDNs. Can anyone tell me why we're idiots, or is this just hyperbole? I came here to say exactly that. Our company uses DNS entries with low TTL for failover
87.
by EB66 7y ago
> The problem is if you want things like custom group-bys, sorts, joins, windowing, etc, you end up reinventing a lot of concepts, or copy+pasting procedures with slight variations. I could see how you could get that impression if you&#x
88.
by EB66 7y ago
+1 for this. People forget just how affordable it can be to maintain your own infrastructure. You can have the hardware and network capable of supporting 10X your average traffic loads and still have it operate far more cost effectively t
89.
by EB66 7y ago
> Such logic leaves you with no idea if the top X% is qualified or not, just that they are the top X%. That's what MBA schools want. They want to know who are the top students on the GMAT: how does XYZ candidate compare to their pee
90.
by EB66 7y ago
> but it is not a tough exam Ideally you don't want a test that's too easy or too tough. You want a test whose results form a normal distribution bell curve.

More ›