gdb

38 ms·

301.
by gdb 14y ago
There were a few unintentional vulnerabilities in the levels. Only one actually made the levels significantly easy enough that it was worth patching -- namely, the session cookie bug you reference (it actually affected three levels). There
302.
by gdb 14y ago
I don't have numbers on that. We did have level02-2 hitting load 100 at one point, though. Also, from the first level08 server we put into the pool: root@leveleight2:~# ifconfig eth0 |tail -n 2 RX bytes:8200746652 (8.2 GB) TX byt
303.
Securing Stripe's Capture the Flag(blog.gregbrockman.com)
135 points by gdb 14y ago|36 comments
304.
by gdb 14y ago
You may want to check out the Reading Materials section on https://stripe-ctf.com/about .
305.
by gdb 14y ago
Nope -- scaling issues. Should be fixed now.
306.
by gdb 14y ago
We just ask for your publicly readable profile information. For exactly that reason :).
307.
by gdb 14y ago
This is what I get for editing code on the fly. Should be really fixed now.
308.
by gdb 14y ago
Fixed! Sorry about that.
309.
by gdb 14y ago
Supposedly it's for load-balancing purposes. (Most people spin up their machines in 1a.)
310.
by gdb 14y ago
> Is Greg saying there is not utility in finishing college, but there is utility in attending college, perhaps? Yes, definitely. I found attending Harvard/MIT incredibly valuable. I met a lot of awesome people and learned a ton (there i
311.
by gdb 14y ago
I lurk around #stripe on freenode usually.
312.
by gdb 14y ago
No problem! Feel free to ping me (gdb@stripe.com) if you run into issues.
313.
by gdb 14y ago
That's a fair point. Even if your accept() implementation is fine, event-driven workers would instead be select()ing on the shared socket, which can also lead to a thundering herd. I think you'd need quite a few worker threads before this b
314.
by gdb 14y ago
Ah, interesting. Yeah, would love a patch!
315.
by gdb 14y ago
That's correct. In fact, at the moment Einhorn only supports TCP sockets. (That being said, I might be mistaken, but I think that Unicorn can also bind TCP sockets.)
316.
by gdb 14y ago
Yep, it will indeed work. New workers will be spun up, the old workers will get a signal asking for a graceful restart, and those old workers can hang around for as long as they need. You'll have twice as many workers alive as you might lik
317.
by gdb 14y ago
Actually, Unicorn is indeed free (you can grab the code from git://bogomips.org/unicorn.git -- looks like it's GPL). FastCGI is an open specification, with many free implementations. There's definitely a lot of cool prior art in this space.
318.
by gdb 14y ago
Yeah, it's mostly a stopgap.
319.
Stripe open-sources Einhorn(stripe.com)
173 points by gdb 14y ago|32 comments
320.
High Availability with MongoDB at Stripe(blog.gregbrockman.com)
6 points by gdb 14y ago|0 comments
321.
by gdb 14y ago
The latter. By veto, we mean that we won't hire someone over a current employee's strong objections. But we always debate and push back on those objections, and more than once we've had people change their minds after this kind of discussio
322.
by gdb 14y ago
We always look over websites and github when available, because it provides a pretty good signal and makes for the most useful phone screen. Happy to discuss your case over email, if you'd like -- I'm gdb@stripe.com.
323.
by gdb 14y ago
I think that's definitely a danger, but by being very cognizant of the peril you can work hard to make sure that candidates you reject are being rejected for the right reasons. We work very actively to recruit a diversity of backgrounds, ex
324.
by gdb 14y ago
It's definitely not an easy problem. But it's also not easy to assess how well someone is able to solve technical problems. Recruiting is about recognizing what you find most important in employees, and then trying to find ways of measuring
325.
How Stripe thinks about recruiting(gigaom.com)
31 points by gdb 14y ago|45 comments
326.
by gdb 15y ago
So, as a member of the core team who these days spends most of my time working on recruiting, I can attest that the role you describe is very much not what we're hiring for. A recruiting engineer isn't necessarily someone who works only in
327.
by gdb 15y ago
Stripe, San Francisco We make it easy to accept payments online. Now you can too--we're looking for designers and engineers to help us fix payments on the web. Ping me at gdb@stripe.com if you're interested.
328.
by gdb 15y ago
The CTF-specific room we set up is at: https://stripechat.campfirenow.com/59127
329.
by gdb 15y ago
We're taking it down on Wednesday at noon PST. We'll probably bring it back sometime in the future though!
330.
by gdb 15y ago
We'll be sending out replies within the next week or two. Don't worry, there will be T-shirts for all!

More ›