eastdakota

11 ms·

61.
by eastdakota 2y ago
I may have gone to the Taylor Swift show in Lisbon, wondered how they were able to precisely control these without carefully handing them out, gathered a few from my fellow concert goers, and presented them to John last night over dinner wi
62.
by eastdakota 3y ago
Baby steps toward truly free egress.
63.
Cloudflare beats "patent troll" tying cloud services to old router hardware(arstechnica.com)
2 points by eastdakota 3y ago|0 comments
64.
by eastdakota 3y ago
The name has nothing to do with where we believe the attacker came from. We borrowed it from Google. At Google they have a procedure where, in an emergency, they can declare a Code Yellow or Code Red — depending on the severity. When it hap
65.
by eastdakota 3y ago
This came up before and it was super confusing to me because I had no idea what it was referring to but I also believe Tavis isn’t one to make something up. So I took some time to investigate. Turned out, no one on our management, legal, co
66.
by eastdakota 3y ago
I was the one who made the call to bring in CrowdStrike. It had zero to do with PCI/DSS or any other compliance obligation. It was to 1) bring in a team with deep experience with a broad set of breaches; and 2) to make sure our team di
67.
by eastdakota 3y ago
We have very good relations with our network vendors (in this case, Cisco, Juniper, and Arista). The CEOs of all of them 1) immediately got on a call with me late on a weekend; 2) happily RMAed the boxes at no cost; and 3) lent us their mos
68.
by eastdakota 3y ago
I think that’s unlikely. São Paulo was a new, not fully provisioned facility that didn’t have all our security hardening in place. That’s why the threat actor likely targeted it. That it was in Brazil is most likely incidental.
69.
by eastdakota 3y ago
Had customer data been impacted we would have disclosed it immediately.
70.
by eastdakota 3y ago
100%
71.
by eastdakota 3y ago
This is so awful. Carta is the Facebook of B2B software (i.e., hoover up user data then find lots of ways your users don’t expect to monetize it). Their business model has always been premised on a bait-and-switch. It’s how they’ve justifie
72.
by eastdakota 3y ago
If you're building your own facility, there's a lot of things you can do with design. In our case, these servers need to go into other people's facilities (e.g., ISPs around the world) so we need to live within their constrai
73.
by eastdakota 3y ago
We use both. This post was about the x86 version of our edge servers.
74.
by eastdakota 3y ago
I was surprised we didn't get a single question about it from an analyst or investor, either formally on the Q3 call or on any callbacks we did after. One weird phenomenon we've seen — though not so much in this case because the i
75.
by eastdakota 3y ago
Of the incident? Someone on my team called me about 30 minutes after it started. It was challenging for me to stay on top of because it was also the same day as our Q3 earnings call. But team kept me informed throughout the day. I helped wh
76.
Post Mortem on Cloudflare Control Plane and Analytics Outage(blog.cloudflare.com)
486 points by eastdakota 3y ago|231 comments
77.
by eastdakota 3y ago
Thank you for providing product roadmap. Label all the above: coming soon.
78.
by eastdakota 3y ago
Yup. Bandwidth at scale is effectively free. The greatest trick AWS ever pulled was convincing the world you needed to pay for bandwidth.
79.
by eastdakota 3y ago
Not abuse. Thanks for being a customer. Bandwidth at scale is effectively free.
80.
by eastdakota 3y ago
Not impacted.
81.
by eastdakota 3y ago
From some first-hand experience over the last few months… these suggestions and patch will help prevent a single client from overwhelming an NGINX server, but it will do little to stop even a modest botnet from generating enough requests to
82.
by eastdakota 3y ago
It's effectively a unit of time benchmarked to what we can accomplish in that time as of Sept 27, 2023 (launch). The challenge here is that because we're abstracting away the underlying hardware it's not the same as renting a
83.
by eastdakota 3y ago
That was our early alpha cooperation with NVIDIA. We've learned a lot since then. Not to mention, the AI ecosystem has grown up a bunch. But you are correct: this is something we've been planning for for a loooooooong time.
84.
by eastdakota 3y ago
I think the confusion is what is meant by "in the Worker." From a hardware perspective, the GPU may be in the same machine as the CPU that's powering the Worker. Or they may be across different machines in our network. We are
85.
Cloudflare's 2023 Annual Founders' Letter(blog.cloudflare.com)
3 points by eastdakota 3y ago|3 comments
86.
by eastdakota 3y ago
But that’s easy to solve for to get to the crux of the issue: what if you realized it and then, on behalf of and with the blessing of your employer traded on the information?
87.
by eastdakota 3y ago
Yup.
88.
by eastdakota 3y ago
¯\_(ツ)_/¯
89.
by eastdakota 3y ago
Think the super unsatisfying answer is: ¯\_(ツ)_/¯ I think a lawyer would advise that that trade would come with a ton of risk. But the law isn’t clear. Generally, the SEC’s goal is to make sure markets are “fair.” What makes a market f
90.
by eastdakota 3y ago
Yes. The one bit you’re missing is that a call option is the right to buy a stock at a certain price typically on or before a certain date. To make the numbers simple, imagine a stock trades at $10/share. If someone came to you and sai

More ›