majke

29 ms·

301.
Why Google docs forces you to use keyboard for copy/paste – ctrl+c and ctrl+v(webapps.stackexchange.com)
2 points by majke 8y ago|0 comments
302.
by majke 8y ago
There is a reason why MTU's are generally small. In early internet there was a clash (IMO unsettled) between fixed-packet-length and dynamic-packet-length networks. Compare ethernet to ATM. The benefit of ATM is bandwidth guarantees. Y
303.
by majke 8y ago
And then he wrote a book about the tooling!
304.
by majke 8y ago
Cloudflare | Warsaw, Poland | Full-time | Onsite Cloudflare is hiring in multiple locations, including San Francisco, London, Singapore, Austin, Champaign, Munich, Beijing. https://www.cloudflare.com/careers/locations&#
305.
The everything-is-a-file principle – Linus Torvalds(yarchive.net)
293 points by majke 8y ago|217 comments
306.
by majke 8y ago
should be either char dest[8] = {0}; strncpy(dest, src, sizeof(dest) - 1); or char dest[8]; strncpy(dest, src, sizeof(dest) - 1); dest[sizeof(dest)-1] = '\0'; On the same note I always wondered what "snp
307.
It ain't about the callbacks, it's about the flow control (2013)(idea.popcount.org)
44 points by majke 8y ago|12 comments
308.
by majke 8y ago
Perhaps I'm not an expert, but I always felt there are things left out by the more popular methodologies. This article scrapes the surface: https://michaelochurch.wordpress.com/2015/06/06/why-agile-an...
309.
Acephalic Agile: Worse than Waterfall?(tech.labs.oliverwyman.com)
83 points by majke 8y ago|103 comments
310.
by majke 8y ago
The "10%" is always going to be a metric of something. If you count bytes in the internet, to some approximation it's 100% netflix + youtube (with some error :P). Here, the metric probably means "unique domain names&quot
311.
by majke 8y ago
There are two! There are two ISP's that allow customers to send Flowspec to their backbone! https://twitter.com/flockforward/status/909090299724664832
312.
by majke 8y ago
I'm working on DDoS protection at Cloudflare. AMA We try to publish most of what we do, the more obvious links: https://blog.cloudflare.com/how-cloudflares-architecture-all... https://blog.cloudflare.com&#x2
313.
Abusing Linux routing to preserve client IPs in L7 proxies – by spoofing IPs(blog.cloudflare.com)
3 points by majke 9y ago|0 comments
314.
At 18k LOC in tests for 108k LOC of code, users are going to find a lot of bugs(danluu.com)
2 points by majke 9y ago|0 comments
315.
by majke 9y ago
Indeed! Conceptually REDIRECT is _very_ similar to TPROXY. The subtle difference is that REDIRECT seems to rewrite the destination-host-and-port while TPROXY keeps it the same, only does the routing earlier. In practical terms to recover or
316.
by majke 9y ago
We have a single Accept queue for all the ports. For TCP it doesn't create any problems - the new connection rate is rarely significant. For the accept-queue load balancing see these blog posts: https://blog.cloudflare.com&#
317.
by majke 9y ago
Author here. TPROXY module is pretty special, it really would have been hard to handle any inbound port without it. I guess it shows that there are benefits in keeping firewall and network stack code tied close.
318.
Jevons paradox(en.wikipedia.org)
45 points by majke 9y ago|28 comments
319.
by majke 9y ago
Behind paywall.
320.
by majke 9y ago
Cloudflare is also slowly bootstrapping low level, system engineering team in Warsaw, Poland. We're looking for self-driven, reasonably experienced programmers. Experience in networking and golang are bonus points. Reach out to marek@
321.
The real reason for large DDoS attacks? It's IP Spoofing, not memcached(blog.cloudflare.com)
104 points by majke 9y ago|34 comments
322.
by majke 9y ago
In my humble the focus should be less on memcached, which is today's problem. It should be on IP spoofing in general: https://blog.cloudflare.com/the-root-cause-of-large-ddos-ip-... We will have amplification attacks a
323.
The real reason for large amplification attacks? Not memcached. It's IP Spoofing(blog.cloudflare.com)
1 points by majke 9y ago|0 comments
324.
Memcrashed – I hereby forbid you from ever typing SOCK_DGRAM into your editor(blog.cloudflare.com)
1 points by majke 9y ago|0 comments
325.
A thorough introduction to eBPF(lwn.net)
3 points by majke 9y ago|0 comments
326.
by majke 9y ago
At Cloudflare we use BPF in firewall extensively. We blogged about this in past: * https://blog.cloudflare.com/bpf-the-forgotten-bytecode/ * https://blog.cloudflare.com/introducing-the-bpf-tools/
327.
Learning ptrace the hard way: Linux process states(idea.popcount.org)
4 points by majke 9y ago|0 comments
328.
by majke 9y ago
My first question! Anyway, if you want AVS, at some point they pubished sources, perhaps someone could reimplement AVS and AVS2? https://github.com/majek/avs
329.
by majke 9y ago
I'm quite sure this was removed in recent kernels, the "young" logic is now greatly simplified. Anyway - great paper. Thanks for digging it up.
330.
by majke 9y ago
In this case I stumbled upon a problem (trying to dig through the SYN handling code, specifically [1]) and sat down to understand it. When I finally "got" it I moved on and forgot everything. After couple of months a colleague ask

More ›