buro9

20 ms·

241.
by buro9 3y ago
Lots of reasons that on their own were not enough to decide but together made it compelling. We weren't going to use C (Cloudbleed), cgo didn't give us as much control over the FFI as we wanted and produced slightly harder to read
242.
London Street Trees(apps.london.gov.uk)
139 points by buro9 3y ago|73 comments
243.
by buro9 3y ago
Unfortunately cloudflare has a poor OSS track record. Either not maintaining the public version, or promising to open things that then don't see the light of day (quicksilver database and replication, and their Rust reverse proxy and n
244.
by buro9 3y ago
Yup, and the filters described above replaced the pcre regex matching in lua. That was already planned at the time of this incident, but this incident accelerated the pace at which the new system was put in place as well as introduced contr
245.
by buro9 3y ago
Yup, that's the one. Uses wireshark display filters syntax to implement the ability to match traffic at any part of the stack. It's still used internally, but clearly they stopped updating the OSS version just after I left. They w
246.
by buro9 3y ago
When I designed Cloudflare's filters, a.k.a. Firewall Rules... we had an API written in Go, and the edge written in Lua. The risk I foresaw was that building rules that act on URLs and perform matching, and testing those, in one langua
247.
by buro9 3y ago
Just put in a multi second delay to _all_ requests to that API, humans wait but this costs bots and slows the aggregate progress. Add HTTP headers documenting the API you want them to use as a bot author will look and wonder why it's p
248.
by buro9 3y ago
It might not be for everyone, but I'm posting more on social media than ever and seeing more engagement than ever... it's on the fediverse where smaller and safer communities are leading to much higher valuable engagement. I'
249.
by buro9 3y ago
What do you need their name for? Do you need their legal name? As in, actually legally need it? Realise that you'll probably need several name fields in different places depending on what you're doing, i.e. an e-commerce app may h
250.
Grafana Pyroscope 1.0: continuous profiling for a modern OSS observability stack(grafana.com)
10 points by buro9 3y ago|0 comments
251.
by buro9 3y ago
The impacted systems get stuck on a retry loop... they can neither forward the message blindly nor consume it. They break the BGP connection, reset, come back alive and get the same message and break the connection again. Effectively the im
252.
by buro9 3y ago
Grafana Pyroscope is continuous profiling at scale, and the AGPL OSS project has just hit version 1, and it's already in Grafana Cloud to try out if you don't fancy running it locally.
253.
Grafana Pyroscope v1.0.0 Release(github.com)
6 points by buro9 3y ago|1 comments
254.
by buro9 3y ago
There's a million routers that are unpatched and easier to get into than this. It's not entirely unmonitored, Linode send bandwidth usage warnings and iops warnings, and my users have been the best downtime signal. I'm very f
255.
by buro9 3y ago
> How do you keep it secure with such ancient software? What happens when it goes down and you don’t have backups? Only 3 ports are open: 80 443 <another for ssh that isn't 20> The nginx is just a proxy to the frontend and a f
256.
by buro9 3y ago
I have three servers still running since 2014, I know this because they run Ubuntu 14. They've never been upgraded, they've only been rebooted a few times by linode during maintenance. I have no way of building them again, I have
257.
by buro9 3y ago
If you're traveling to the USA or China, take a burner phone.
258.
by buro9 3y ago
This feels semi-normal to me... just have the curiosity to ask "why?" and the bias-to-action to move to "I'm going to find out". You encounter far far more dead-ends than anyone ever says, and every unsolved mystery
259.
by buro9 3y ago
> Did it go somewhere? Lost it's ubiquity. There was a period in which you could rely on almost everyone to have it, which made it an attractive, convenient and low friction way to share diagrams that people could edit and update.
260.
by buro9 3y ago
https://c4model.com/img/c4-overview.png That's what the argument is... and I'm in favour, there used to be such great architectural tools that were mostly UML but they did this well. I miss Visio, it was awfu
261.
by buro9 3y ago
Now it's just like the Apple experience! Anyone who thinks otherwise, do go through a full install and then observe how many apps are installed that you cannot uninstall. And it's true that you can't really uninstall things f
262.
by buro9 3y ago
Welp... I wondered when Google would start encouraging me to put my work profile into Firefox, I guess today is the day.
263.
by buro9 3y ago
The site and it's examples do not work with JavaScript disabled. This is a regression on graceful degradation.
264.
by buro9 3y ago
Measuring "Twitter Scale" by tweets per second seems to be not how I would measure it. Updates per second to end users who follow the 7K tweets per second seems more realistic, it's the timelines and notifications that hurt,
265.
by buro9 3y ago
> Why aren't there any images from the game?? I think there is an image of the game in the Play app store... it looks like this is a text based choose your own adventure game. https://play-lh.googleusercontent.com/nO
266.
by buro9 3y ago
Never seen an online shop accept that, nor do I know if it's open to UK citizens. But thanks
267.
by buro9 3y ago
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re... That's interesting.
268.
by buro9 3y ago
I've been experiencing the PayPal one for a while. Firefox on Windows, Linux or Android. Thankfully the app is still signed in, but I've used credit card for things that I have PayPal money just sitting there ready to spend as I c
269.
by buro9 3y ago
I didn't draw conclusions about this specific instance. Consequences should exist, and should be a deterrence against unsafe behaviour no matter the party. Consequences for corporations should be more significant than for individuals I
270.
by buro9 3y ago
3 years probation for a set of actions that resulted in a loss of life. I'm always aghast at this, we call things that happen on the road "accidents" as if it's "oops, I killed you, sorry". The language of repo

More ›