majke

43 ms·

361.
Meet Gatebot – a DDoS mitigation bot that allows us to sleep(blog.cloudflare.com)
7 points by majke 9y ago|1 comments
362.
by majke 9y ago
Transcript from Dan's talk about Bitfunnel: http://bitfunnel.org/strangeloop/ The talk itself: https://www.youtube.com/watch?v=80LKF2qph6I
363.
by majke 9y ago
There is a great demand for systems engineers. It's _very_ hard to find low level developers on the market. Don't be intimidated by stupid requirements on job ads like "linux experience" - is easy to adapt to the OS-spec
364.
by majke 9y ago
The article suggests "Fragmentation in IPv6 is unfixable", not ipv6 itself. Try running this to see if fragments get delivered to you: http://icmpcheckv6.popcount.org http://icmpcheck.popcount.org (IPv4 ver
365.
IP fragmentation is fundamentally broken(blog.cloudflare.com)
13 points by majke 9y ago|3 comments
366.
The National Security Letter Archive: Tracking Who Has Disclosed NSLs(nslarchive.org)
1 points by majke 9y ago|0 comments
367.
by majke 9y ago
Welcome to the Docker revolution. Historically it was hard to distribute software. You can't just copy over .elf files since these need dynamic libraries. Dependency hell is real, people invented .deb to solve many problems, but debs w
368.
by majke 9y ago
Ok, I understand why you might "offload" read() from disk backed files file descriptors. But why "sendfile"? I thought sendfile is properly async in linux... Unless I'm getting something wrong. "aio_write&quo
369.
Middle management: A toxin or a cancer? Bryan Cantrill [video] (2013)(youtube.com)
1 points by majke 9y ago|0 comments
370.
by majke 9y ago
Not strictly robotics, but I learned most of math required for inverse kinematics from this "David Vernon. Machine Vision" book. http://homepages.inf.ed.ac.uk/rbf/BOOKS/VERNON/toc.htm Take a look at
371.
WiFried: iOS 8 WiFi Issue(medium.com)
1 points by majke 9y ago|0 comments
372.
by majke 9y ago
I'm genuinely interested in differences between DOTS and Fastnetmon. Can you elaborate? I presume DOTS is transport, while Fastnetmon is detection, correct?
373.
by majke 9y ago
I wonder if https://fastnetmon.com/ and DOTS [1] are roughly the same thing? [1] https://datatracker.ietf.org/wg/dots/about/
374.
Tuning a PID Controller for Lego Mindstorms Robots(inpharmix.com)
1 points by majke 9y ago|0 comments
375.
by majke 9y ago
Right, sounds like our fundamental assumptions differ. For the great majority of internet users buying more capacity around the globe to sustain a 100Gbps SSDP is not an option. If you run a mildly controversial website, you don't expe
376.
by majke 9y ago
> hh.ru - Russian Linkedin I'm genuinely impressed. Do you know what is their technology stack?
377.
IP Fragmentation(labs.apnic.net)
1 points by majke 9y ago|0 comments
378.
by majke 9y ago
This is why handwaving and shouting "BCP38" is not sufficient. I could live with half-baked BC38 deployment as it is now, if only I had other tools to trace malicious actors - netflow.
379.
by majke 9y ago
You commented on two points: A) ip spoofing B) netflow On IP spoofing I said plenty already https://idea.popcount.org/2016-09-20-strange-loop---ip-spoof... . There are two major points: - We will always have DDoS vulnerabl
380.
by majke 9y ago
This SSDP problem is known for years.
381.
by majke 9y ago
Author here. Allow me to extend the post a bit. It turns out that about 2.4% of the IPs that respond to SSDP queries, do so from a weird port number! For example: IP 192.168.1.75.50950 > 239.255.255.250.1900: UDP, length 95 IP 192.
382.
How does Zeroconf compare with UPnP?(zeroconf.org)
1 points by majke 9y ago|0 comments
383.
by majke 9y ago
Technical articles get downvoted on HN a lot these days. It became super hard to promote technical stuff here. Just look at this article - it's successful (on the front page) but it's hovering around 20th place, without any chance
384.
Basho CTO Dave McCrory: The Future of the Network(blog.mccrory.me)
2 points by majke 9y ago|0 comments
385.
by majke 9y ago
Yes and no. Most of the spoofed attacks fall into two categories. A) the IPs are fake but from within the originating AS. Fake ip's but belonging to the right AS. Not much to do about it except for pressing the admins to deploy source
386.
by majke 9y ago
This blog post explains our attitude to logging: * https://blog.cloudflare.com/what-cloudflare-logs/ For attack data we do two things: * We find the attacks and log the attack metadata (dest ip, duration, unique IP cou
387.
by majke 9y ago
Author here. AMA! This post was tough, since the industry doesn't really have common language for discussing the packet floods. In this article I tried to build some language and put focus on Gbps, Mpps, Unique IP's, packet length
388.
Statistics of amplification DDoS attacks over last six months(blog.cloudflare.com)
41 points by majke 9y ago|8 comments
389.
by majke 9y ago
"data never leaves it" reference please?
390.
by majke 9y ago
That's not how it works. The process of reading your retina / fingerprint is error prone. You can't take hash out of error-prone data blob! My understanding is that matching the pre-saved template against a fresh scan is a pr

More ›