inglor

54 ms·

631.
by inglor 9y ago
I've found Cloudflare's solution to be very inadequate compared to Distil or Incapsula. Both Distil and Incapsula _did_ have a small number of false positives (showing a captcha to users). We did have to write some code to overcom
632.
by inglor 9y ago
I'll clarify - it _is_ vulnerable to timing attacks (except where explicitly mentioned otherwise) - and you should take care of that in your code. It is pretty trivial to defend from timing attacks in a language like go (just race a go
633.
by inglor 9y ago
Also - We've served fake data and honey pots (invisible to a real user) a lot of times in order to detect what sites "reuse" our data and sue them :)
634.
by inglor 9y ago
If an attacker uses something like Illuminati (or just abuses Tor or another botnet) then they can (and should) distribute HTTP requests across different IPs. This is pretty cheap to do and I've seen it done before in several places I&
635.
by inglor 9y ago
Sure you can protect against this - there are several companies that use machine learning to spot small differences between selenium and real users (mouse delays etc). For example, it might detect that a mouse click is dispatched at exact i
636.
by inglor 9y ago
We've used Incapsula (cheap and works, but awful support and service) and Distil (expensive and works, great support but steep pricing). Both worked, both worked well with http downloads and selenium (and common techniques). Neither wo
637.
by inglor 9y ago
Some of these attacks are mitigated through the underlying golang crypto package https://golang.org/pkg/crypto/ - you can see what's constant time and what you have to handle yourself to deal with timing atta
638.
by inglor 9y ago
I love the README, it's very modest and I enjoy reading things like "if a function is longer than, say, 5 lines, I didn't write it myself." and "While you probably shouldn't trust random security code from the
639.
by inglor 9y ago
Just as a data point - Chrome has more code than the linux kernel - Would you say BioShock Infinite seriously has a larger code base than Chrome? I think a lot of people don't estimate correctly just how huge Chrome is.
640.
by inglor 9y ago
A whole class of problems you wouldn't have in the first place with MobX. So much code in the article for doing so little - where good design could solve the issues much more elegantly using plain function composition and JS concepts.
641.
by inglor 9y ago
"Finally, we adjure all members and the spec lead to come back to the table and communicate directly to each other instead of blaming each other through blogs and open letters!" Ouch, can anyone explain this drama and attitude to
642.
by inglor 9y ago
The downvoting is because you can have tables with single jsonb columns without schemas - call them "collections" and pretty much end up with a faster mongo up to having to fiddle a bit more with replication/sharding. No one
643.
by inglor 10y ago
Hey, here is a talk I gave about rewriting Rx with async iterators (a complex example is shown) - https://docs.google.com/presentation/d/1nAi7fTa2K9XUIDSG7Bg1...
644.
by inglor 10y ago
- FLAVOR: Ubuntu Desktop, Ubuntu Server - HEADLINE: Windows subsystem - DESCRIPTION: Windows 10 lets you install Ubuntu as a subsystem and use it without dual booting. In practice, we _need_ windows tools (like WebDeploy) or GUI tools (like
645.
by inglor 10y ago
It ships with your operating system, which you physically obtain from another computer (with hardware like a USB drive or via internal network).
646.
by inglor 10y ago
I came here to leave this comment and found you. Thanks. This is not a benchmark on any regard. I thought we were past the stage of optimizing to specific microbenchmarks and then showcasing those. If you're not going to show me real p
647.
by inglor 10y ago
Worth mentioning their factories in Israel are side by side and they already work together on projects in Jerusalem. A lot of Mobileye workers are ex-intel and sometimes vice versa. The companies are a lot more linked than it seems.
648.
by inglor 10y ago
Where are the wire calls performed? Not in the constructor but in an initialization file?
649.
by inglor 10y ago
> With compile-time DI, you make service classes accept lower level dependencies as constructor parameters. In Scala, constructor parameters are accessible from regular methods, so most of the time, these services could be completely sta
650.
by inglor 10y ago
I teach code to kids. From age 9 to age 16. What I've found that really works is accomplishments. I'm a huge fan of exercises instead of frontal introduction. I've had success with the Khan Academy program ("introduction
651.
by inglor 10y ago
Consider MobX, it's just getter-setter pairs for actual change detection. It's the declarative reactive one-way flow binder you want. It saved me a lot of time. People think redux is about functional immutable stuff. It's not
652.
by inglor 10y ago
> This requires hiring Arabic speakers, who are available in Israel. There are more than 2 million people who speak Arabic in Israel.
653.
by inglor 10y ago
In Israel, form 102 is exactly this exemption. You pay stock-market tax (25%) and not income tax (up to 25%) and you only pay the tax after you convert the options to stocks. (So, when you vest or as late as you'd like if you don'
654.
by inglor 10y ago
As an Israeli, I find it extremely frustrating that I can't help. I joined their "supporters" group and wanted to Mentor but it didn't really work out. I totally get why they weren't really interested - but it'
655.
by inglor 10y ago
I have second hand experience from friends working there. Lots of good cooperation is happening between Israelis and Palestinians. If only our governments didn't suck :) The Palestinian workers in Mellanox are well liked and respected
656.
by inglor 10y ago
I think WhatsApp and Waze are both pretty good examples of high profile acquisitions that played out this way. I also feel like (and I realize many disagree) that YouTube largely kept its "feel" and didn't turn into Google Vi
657.
by inglor 10y ago
Also, it's a spec in the making `System.import('foobar')` only that actually works with modules rather than scripts.
658.
by inglor 10y ago
Save me the Rich Hickey talk. MobX is dead simple, it's a short write and here's how it works: - observables: add a getter/setter pair in place of the property - when it gets modified emit an event. - observer: when an obser
659.
by inglor 10y ago
At that time React wasn't V1 either. Vue was used and adopted well before 1.0, I had apps for it in the v0.10 days.
660.
by inglor 10y ago
2014 was the year Angular "really took off" and 2015 was the year React "really took off" (at least, if we trust "Google Trends") Vue is, in its core, very similar to Knockout (which I think is pretty swell). I

More ›