majke

55 ms·

1. 571.▲
   by majke 12y ago

   Not a bug! The crash is as intended! (at least in chrome) https://code.google.com/p/chromium/issues/detail?id=432559
2. 572.▲
   by majke 12y ago

   There is no way to view the data on the HN website. Please add a link to a source, or at least https://news.ycombinator.com/user?id=whoishiring
3. 573.▲
   by majke 12y ago

   Sir. Edward does not expose anything. It's the journalists that choose the material. He made it very explicit from the start. > You have to be naive to think the Russians are harboring him Can you please provide a source? The qualit
4. 574.▲
   by majke 12y ago

   Is there any data on the size of the traffic? Anyway, even assuming the traffic is infinite, (to my understanding) most of the flooding IP's are from china. If that's the case it would most likely only affect the datacenter handli
5. 575.▲
   by majke 12y ago

   I must say I wonder a lot of the volume of generated traffic. Is that hundreds of connections? Thousands? Millions? What is the number of unique IP's hitting them, bandwidth, etc. Does anyone have any data on that?
6. 576.▲
   by majke 12y ago

   Usually no. There are generally two types of floods against DNS infrastructure: - Flood of "valid" requests, to a large number of open DNS recursors. To avoid caching they usually contain random prefix. Flood against large number
7. 577.▲
   by majke 12y ago

   Unfortunately, as the Firefox ANY saga shows, this is not the case. Many many programmers around the world misunderstand ANY and its limitations.
8. 578.▲
   by majke 12y ago

   Are you running dig against your recursor or directly against Authoritative server? Oh. You said you are running nslookup. Most likely you are running it against a recursive server in which case ANY gives you what is in cache. So not what y
9. 579.▲
   by majke 12y ago

   May I ask what exactly you want to debug using ANY? (assuming you are hosting DNS on cloudflare of course)
10. 580.▲
    by majke 12y ago

    I had very similar experience, but was able to convince the immigration officer that Hacker School has nothing to do with Hackers nor Schools (which require F1 visas). That was a fun experience and added to the charm of the original name :)
11. 581.▲
    by majke 12y ago

    HAMT by mr Bagwell are great: * https://idea.popcount.org/2012-07-25-introduction-to-hamt/ I was mostly surprised not by the CPU, but by the memory efficiency. From my experimentation it turns out that if you want to s
12. 582.▲
    by majke 12y ago

    Well spotted. We're working on the fix. Please do keep on scrutinising us :)
13. 583.▲
    by majke 12y ago

    I hate blog posts without dates. Is that a new blog post or old? Anyway, to the merit: > But the only trick is that there is no trick Yes a thousand times. Very well put. This is my understanding of the "Premature Optimization"
14. 584.▲
    by majke 12y ago

    Thanks for escalating. We'll try to trace it down.
15. 585.▲
    by majke 12y ago

    Unfortunately it's not complete: > The maximum length of the queue for incomplete sockets can be set using /proc/sys/net/ipv4/tcp_max_syn_backlog. Yes, but: * http://livegrep.com/search/
16. 586.▲
    by majke 12y ago

    CloudFlare are hiring in both San Francisco (SF) and London UK. No remote, VISA sponsorship for good candidates. We have a range of positions, most of which can be found on our website: * https://www.cloudflare.com/join-our-
17. 587.▲
    by majke 12y ago

    Citation needed.
18. 588.▲
    by majke 12y ago

    Are you suggesting using TCP_QUICKACK more often? Can you give examples on when it is desired or not.
19. 589.▲
    by majke 12y ago

    Thanks for feedback! 1) Indeed. I tried to speak only about MTU but well, MSS creeped in a few times. OTOH I don't want to get into details, I want to keep the article short. 2) Point taken. 3) It's more complex. In IPv4, as menti
20. 590.▲
    by majke 12y ago

    [citation needed] But more seriously, PMTUD usually just works, so people tend to forget about it. This is actually good - it's a sign that things have stabilised. It's only the unusual setup at CloudFlare caused the problems, not
21. 591.▲
    Lars Andersen: Everything you know about archery is a lie(truthseekerdaily.com)

    1 points by majke 12y ago|0 comments
22. 592.▲
    by majke 12y ago

    More than that. They look for outgoing connections that look like Tor, and then, few minutes later they actively scan it: https://idea.popcount.org/2013-07-11-fun-with-the-great-fire...
23. 593.▲
    by majke 12y ago

    I suspect this device can't do TLS. Blame POODLE for killing SSLv3: * https://blog.cloudflare.com/sslv3-support-disabled-by-defaul... Also RC4 is about to die: * https://blog.cloudflare.com/killing-rc4-
24. 594.▲
    by majke 12y ago

    Another exciting thing with the new PCI-Express standard is the Direct Cache Access, especially useful for high speed networking: http://web.stanford.edu/group/comparch/papers/huggahalli05.p...
25. 595.▲
    by majke 12y ago

    With fluxcapacitor it will run in fraction of a second! https://github.com/majek/fluxcapacitor#basic-examples $ ./fluxcapacitor examples/sleep_sort.sh 1 4 20 3 55
26. 596.▲
    by majke 12y ago

    Citation needed.
27. 597.▲
    by majke 12y ago

    And you are totally positively confident that I can actually pay for stuff? I'm not sure what is your taste, but majority of the movies I want to watch are unavailable in any shop I know.
28. 598.▲
    by majke 12y ago

    Oh, it's the botguard we know from the gmail thread: https://news.ycombinator.com/item?id=8275970#up_8277858 Great analysis!
29. 599.▲
    Sysdig: Linux system level troubleshooting tool – strace replacement(sysdig.org)

    4 points by majke 12y ago|0 comments
30. 600.▲
    by majke 12y ago

    I still don't understand how queueing signals works. For example, signalfd() is really cool, and you can indeed read() a signal from it, but only one of a kind. If you get, say, two SIGINT's you may as well just be able to read()