aaron42net

8 ms·

31.
by aaron42net 5y ago
Enabling Warp via the "1.1.1.1" Android app gets me an 8.x.x.x VPN address, at least. This /24 appears to be routed to my city's Cloudflare node, so presumably there's a /24 per city they run this service in.
32.
by aaron42net 5y ago
It's not edge location count that matters, but Cloudfront doesn't use BGP Anycast but rather does a more traditional DNS-based routing and tries to spread the requests across multiple edge locations (even those farther away) for r
33.
by aaron42net 6y ago
We weren't having issues solved by basic documentation. In the most recent example, we were occasionally hitting Java heap OutOfMemory under our workloads and wanted tuning or even architectural advice. It turns out that ElasticSearch
34.
by aaron42net 6y ago
Not much value at all, from my experience. Having given Elastic's support two tries at different companies, it doesn't surprise me that their business model is failing. Their support was _terrible_ both times; at no point were we
35.
by aaron42net 6y ago
Based on reading the LinkedIn of the Parler execs, their code is node.js and some Go with Cassandra and Postgres for storage and RabbitMQ for queuing. That sounds like it will run anywhere they can rent a pile of Linux boxes. They've
36.
by aaron42net 6y ago
Where did you see the "per month" for Travis? The 10,000 free credits are a one-time trial from what I can see.
37.
by aaron42net 8y ago
Wasn't it only has of version 3.4 that Jepsen stopped finding single-node data loss bugs in MongoDB? So it's been 3 years that MongoDB has been suitable for single-node data storage, and apparently 5 months that it's been re
38.
by aaron42net 8y ago
Skimming the bucket code, it appears that the rate-limiting information is stored in a map. It doesn't appear to implement an LRU or attempt to clean up stale entries. If I feed this user-supplied keys such as IP address or cookies, d
39.
by aaron42net 10y ago
Previously when the Wired article was mentioned on HN ( https://news.ycombinator.com/item?id=5089703 ), I did some digging and found that aaronsw.com and tor2web.org were hosted on the same Linode instance IP. While the sniff
40.
by aaron42net 10y ago
Recent Android on T-mobile US uses IPv6-only transport. T-mobile's DNS servers are only asked by these devices to translate hostnames to IPv6 addresses. If they can't find an IPv6 address, they will look up the IPv4 address for
41.
by aaron42net 11y ago
That was an explicit goal of OpenBTS when I was following it years ago. The GSM vendors want something like $250k per base station, which is unreasonable for third-world or very-rural applications. OpenBTS thinks they can get the radio hard
42.
by aaron42net 11y ago
There's a TPM-like mode with hardware isolation built into ARM for years, used for disk encryption keys, DRM, auth keys, fingerprints, etc on IOS and Android. See: https://en.wikipedia.org/wiki/Trusted_execution_en
43.
by aaron42net 11y ago
Do they just strip the color profiles? Or do they apply them and convert to sRGB?
44.
by aaron42net 11y ago
That depends on how you define fair, I guess. If this isn't a hardcoded bonus for "google.com" and instead all established, high-PageRank sites receive the same benefit, is it still not fair? There's a not well-known co
45.
by aaron42net 12y ago
The lack of provider competition isn't a natural monopoly. It's a government-created monopoly/duopoly in a given market. Instead of regulating the one or two providers in a market, we could try a different model that improv
46.
by aaron42net 12y ago
That depends on how you define "wide scale infrastructure sabotage". I believe that this is resulting from: https://blog.torproject.org/blog/tor-security-advisory-relay... January 30 to July 4, 2014 someone s
47.
by aaron42net 12y ago
I grant the docker.io build and private repository service access to my github repo, drop a Dockerfile at the root of my git repo, and the build server does the checkout outside of the Dockerfile and then executes the Dockerfile. I then use
48.
by aaron42net 12y ago
We're moving all of production in EC2 from an old CentOS 5 image managed by capistrano to CoreOS, with fleet deploying images built by the docker.io build service and private repo. I love it. Every week, we rebuild our base image start
49.
by aaron42net 12y ago
I'm doing this, but starting with the minimal 80MB debian:stable image and then using apt-get to grab my dependencies. The 80MB covers the dependencies for apt-get. I believe the centos images are also minimal, but the ubuntu image st
50.
by aaron42net 12y ago
Until Firefox tightens their sandbox, I believe any exploit can still use system calls to directly create TCP sockets. Chrome forces sandboxed processes to use its network stack; if that's been configured to use Tor, it shouldn't
51.
by aaron42net 12y ago
ECMP is used heavily in serving Anycast DNS worldwide; it's only the application to HTTP that's somewhat new. A high-end router can do stateless ECMP at 10s or 100s of millions of packets per second; it's hard to find load b
52.
by aaron42net 12y ago
They haven't bothered to update that page in a few years, sadly. It says "Dual Stack IPv4/IPv6 will be launched in various areas within Verizon’s FiOS network, starting Later in 2012. Check back for more information."
53.
by aaron42net 12y ago
Password hashing algorithms make it a bit harder to guess passwords by doing thousands of iterations ("rounds") of hashing, in addition to adding a random salt to prevent creating a dictionary for common passwords. However, e-mail
54.
by aaron42net 13y ago
Around 100% for anyone using the normal Tor browser bundle. Tor is designed to hide who you are talking to, not the fact that you are using Tor. IPs and other metadata about normal Tor relays are published publicly by the network and are us
55.
by aaron42net 13y ago
If you are in Santa Monica City proper, Santa Monica has a not-well-known fiber network: http://gismap.santa-monica.org/GISMaps/pdf/smFiberOpticsZoni... TrueCar uses the city's fiber network to connects betwe
56.
by aaron42net 13y ago
I also get "Failed to find test pattern on screen." in Safari with WebGL enabled on a Mid 2011 Mac Mini running 10.9 with dual monitors. View is set to "Actual Size", and I've tried moving the Safari window between
57.
by aaron42net 13y ago
Turn your API users into data suppliers by adding an optional GPS lat/long and accuracy radius to the API request. You could potentially enhance the position they already have with wifi data (like Google Maps claims to do), and collec
58.
by aaron42net 13y ago
If you are interested in tracking from within Tor vs in via tor2web, look for the header "X-tor2web: encrypted" on HTTP requests.
59.
by aaron42net 13y ago
Most companies have historically considered dark fiber (where nobody else's network gear is involved) to be secure enough. Passively decoding dumps of hundreds of gigabits or terabits spread over many colors of light (DWDM) into usefu
60.
by aaron42net 13y ago
If the eventual production app would run on Linux (which I'm only guessing based on the context), this benchmark should probably be run there. Darwin's surprisingly higher system call and context switch overhead can be deceptive

More ›