agrajag

10 ms·

61.
by agrajag 9y ago
Yep, this is what we do. Adding in some kind of object cache cluster wasn't a significant enough of an improvement over just hitting mysql to justify the extra point of failure. The problem is WP just makes a ton of simple queries - in
62.
by agrajag 9y ago
I thought this was a great writeup, but one significant issue I see unanswered is why did all OCSP responses fall out of cache at the same time? In a cache with an even distribution of expiration times they should have seen a gradual increa
63.
Let's Encrypt OCSP and Issuance Outage Postmortem(community.letsencrypt.org)
223 points by agrajag 9y ago|34 comments
64.
by agrajag 9y ago
1 week, so most servers likely won't be affected unless the outage goes on for a really long time.
65.
by agrajag 10y ago
It's the weight on Earth. Just look for a source that specifies in kg - there's no ambiguity about what the SI unit represents.
66.
by agrajag 10y ago
My wife is vegetarian and I eat meat analogues typically one meal a day. For almost all applications Mock duck, seitan, soy-based chicken are all inferior substitutes for their meat counterparts. They're less flexible when cooking, don
67.
by agrajag 10y ago
Not even four 9's - they only trigger SLA credits when they dip below 3 9's.
68.
by agrajag 10y ago
Those extra precautions are designed explicitly to prevent the ability to get a certificate using a collision attack. CA's now must explicitly introduce entropy into a certificate to prevent exactly this, and will not sign a certificat
69.
by agrajag 10y ago
Just because the addresses are publicly routable doesn't necessarily mean they're accessible to the public. I used to work at a place with a Class B block, but nevertheless advertised no routes for most of those IPs. Internally an
70.
by agrajag 10y ago
You can use SSL with S3 as the backend, you just have to set the distribution origin to s3.amazonaws.com/bucket-name/
71.
by agrajag 10y ago
I think you're missing some use cases here. Cloud can be really helpful for prototyping systems that you may not even want running in a few months. Another use case would be where infrastructure costs are minor compared to dev and ops
72.
by agrajag 10y ago
Many votes are still left to be counted in the very blue states of CA, OR, and WA. Models such as the NYT upshot model give a high degree of confidence that those states will tip the popular vote balance to Clinton.
73.
by agrajag 10y ago
Most users won't click through on a prompt that a website is insecure though. For that majority of users the website is well and truly "broken beyond repair". The only thing that matters is what your users experience, not wha
74.
by agrajag 10y ago
The part that makes this a real exploit is that the administrator of the target domain would only have to open the e-mail with a client that displays images in order to be exploited.
75.
by agrajag 10y ago
Data transfer into S3 is free - it's the storage that's $0.03/GB-Month
76.
by agrajag 11y ago
It's not worth the development costs and extra verification costs to try to weed a small number of legitimate purchases from a sea of illegitimate ones though.