fasterthanlime

10 ms·

61.
by fasterthanlime 4y ago
mTLS certainly seems like the the most expensive option here (not that expensive outside attacks, though). S-tier implementations include: firewall rules or a BPF program, or a VPN-based approach (like Cloudflare Tunnel). The way I did it i
62.
by fasterthanlime 4y ago
/r/rust is a great place for that, I also occasionally click through most of the https://lib.rs/ categories, just to see what the names I don't recognize are about. My twitter timeline also has tons of neat l
63.
by fasterthanlime 4y ago
Please don't downrank that one, too. I'm genuinely sorry about the week y'all have had, but this comment thread is the /only/ one asking about "the controversy" (which is dead and gone - everyone has decid
64.
by fasterthanlime 4y ago
I'm begging the comment section here to not touch on this topic today — I'm really not trying to cause a third flamewar, and intentionally didn't mention the name of news aggregators or direct links to the articles themselves
65.
by fasterthanlime 4y ago
For anyone reading this: Alex knows about the attack and has my permission to talk about it publicly.
66.
by fasterthanlime 4y ago
Grew up in a very religious, very "literal interpretation of the texts" home. They had everyone hit the books and even write reports. I guess the habit stuck with me after I left the fold.
67.
by fasterthanlime 4y ago
Mirror in case the attack successfully picks up again: https://web.archive.org/web/20220502013024/https://fastertha... As a treat, this is a testament to a logic error I made in the caching code (inserte
68.
by fasterthanlime 4y ago
This is good advice! All this stuff is very close to my day job, I just never bothered doing it for my personal website because it withstood the front page several times over the past two years. I've done most of what you mentioned (mi
69.
by fasterthanlime 4y ago
It's a kid having fun. A kid with a couple botnets, but a kid nonetheless. Definitely not representative of the "Go team" or the "Go community". If I had to guess, they don't care about Go, they just thought I&
70.
by fasterthanlime 4y ago
Some fun numbers: 25M requests to fasterthanli.me (just the frontpage, the most expensive page to do queries / render templates for), not cached by CloudFlare (they don't cache HTML unless you set up a rule specifically for it), a
71.
by fasterthanlime 4y ago
I'm gonna soften that intro. I was definitely riled up when I wrote that and I can express the same sentiment better now - as soon as I'm done tending to the DDoS attacks (sorry, unsollicited load testing) I'm receiving today
72.
by fasterthanlime 4y ago
There's nothing I can say about "this is not actually the same article" and "the two comment sections do not say the same thing at all" that hasn't already been said by many other HN users in response to this m
73.
by fasterthanlime 4y ago
> We've taken the [flagged] stigma off the title above, so as not to rub salt in any wounds. Sending it to page 2 when it's only 3 hours old and has more upvotes than almost everything on page 1 /and/ removing the [fl
74.
by fasterthanlime 4y ago
Here's a Rust example, with tokio: https://play.rust-lang.org/?version=stable&mode=debug&editio... - I don't have time to come up with Java/C++ examples, but I'm sure others will. (If your point
75.
by fasterthanlime 4y ago
Defaults matter because friction matters, but friction there is largely removed by having a decent package manager, so I personally don't think it matters (though the topic of "what batteries should be included" has far from
76.
by fasterthanlime 4y ago
That's not the only/main reason to want a newtype though - it's also about restricting what the value can be, see something like NonZeroU64: https://doc.rust-lang.org/stable/std/num/struct.NonZe
77.
by fasterthanlime 4y ago
> there's a difference between theorical ways to make bugs and bugs that happen in reality On a large enough (time)scale, no there isn't. But also, all this is rooted in years of running and/or watching someone run Go in p
78.
by fasterthanlime 4y ago
Reminder that I'm not part of /any/ Rust teams, not part of the Rust foundation, etc. etc. My site is my space, and it is specifically designed to let me post my point of view without having to bear ( ) the responsibility of
79.
by fasterthanlime 4y ago
I really don't know enough about Python to discuss it, so I usually don't. There have been some semi-recent developments re typechecking Python (see https://dropbox.tech/application/our-journey-to-type-checkin
80.
by fasterthanlime 4y ago
My site has its own search engine (just sqlite full-text search, nothing fancy) and searching for "go" is entirely unhelpful. So yes, external and internal SEO.
81.
by fasterthanlime 4y ago
It is a very minor point and could easily be removed from the article, but I had that realization while writing those samples and it stuck with me. I really think that if we follow the "zero values by default" philosophy, it would
82.
by fasterthanlime 4y ago
> As far as I know, no other popular language allows you to read from multiple queues at the same time Off the top of my head, that's certainly possible in Rust, C++ and Java - probably many others I just don't know about. That
83.
by fasterthanlime 4y ago
I moved some words around to make the nit less confused - thanks for the feedback!
84.
by fasterthanlime 4y ago
If your idea of a "grown up engineer" is one who fails to notice systemic problems and diligently, repeatedly hits themselves in the head with a rake because that's the way it's always been done, we have very different i
85.
by fasterthanlime 4y ago
What an extremely convenient template to dismiss any nuanced argument against "worse is better". You even get to question my credentials a couple times! (I apparently pick metrics that are convenient to my argument, and fundamenta
86.
by fasterthanlime 4y ago
Author here: I wrote this in 2020, have changed jobs twice since. Both jobs involved Go in some capacity, where it's supposed to shine (web services). It has not been a pleasant experience either - I've lost count of the amount of
87.
by fasterthanlime 4y ago
Here it is: https://twitter.com/fasterthanlime/status/151945555551713690... (source: am fasterthanlime). No idea what HN's policy is on posting links to Twitter, but since you asked. Also if the consensus her
88.
by fasterthanlime 5y ago
That's a very good question — I feel like the article is set up in a way that you could easily take the TCP-based, hand-written server and try to match Axum/hyper's performance — implement keep-alive, be smarter about bufferi
89.
by fasterthanlime 5y ago
This gets requested often, it's still on my TODO list. I've touched the markdown pipeline code recently (to fix alt text support) so it doesn't feel as scary anymore, but I've got a lot of balls in the air so no ETA!
90.
by fasterthanlime 5y ago
Both my current and previous day jobs involve building an edge network, which involves doing TLS termination: that means dealing with a lot of crap that comes your way - much more traffic than is valid/legitimate traffic, because on th

More ›