nocarrier

13 ms·

61.
by nocarrier 11y ago
It's not clear from your question if this hopefully hypothetical database server is exposed to the internet or if it's on a private network, but: Yes, it's still a problem, because then you have to depend on the whitelist sta
62.
by nocarrier 11y ago
How is the New York Times an ecommerce player? I've never heard anyone suggest that before and now I'm quite curious.
63.
by nocarrier 11y ago
I think Luke's work on Snabb is impressive and it's cool to see efforts to make a marketplace for Snabb based solutions. I don't know if it will work out since companies can be fickle when choosing solutions, but I'm roo
64.
by nocarrier 11y ago
I think people focus too much on Uber replacing consumer transportation. I think they're going to branch out into transport of goods and eat into the trucking industry in a major way, in addition to whatever they do with consumer trans
65.
by nocarrier 11y ago
You're right, Netflix does a great job of tracking state and knowing where you are in an episode. And their streaming is pretty solid too. Maybe I gave HBO too much credit. Still, I do think Netflix has a bit of a Craigslist/Amazo
66.
by nocarrier 11y ago
This was a fun read. Stuff I found interesting: 1. The shift from cheaply produced, low quality content, to higher quality "must see" shows. It is definitely the must see shows that have drawn me to HBO and Netflix. I don't j
67.
by nocarrier 11y ago
This is an excellent explanation of how private key offloading works, thank you. BTW, you can store private keys in a HSM on your private key server and that's an additional layer of protection, but nobody uses TLS accelerator cards an
68.
by nocarrier 11y ago
Here's some techniques to address #1: 1. Store your private keys in a separate process, either on the same machine or a remote, more secure host. Offload private key operations to the private key service. This obviously requires an enc
69.
by nocarrier 11y ago
It's cool to hear someone using it, but it's still doomed to be relegated to use inside private networks versus being used as a general use internet transport protocol, which was the point I was making.
70.
by nocarrier 11y ago
I'm guessing everyone who works at a big company and used Secret was hoping that said big company didn't acquire Secret's assets when they folded. It does always make me think twice before committing to using a startup's
71.
by nocarrier 11y ago
I'm in favor of Dragonfly removing SCTP. It was okay on paper but never saw adoption and was basically doomed after most firewalls were configured to block it--this is why people are building their own transports on top of UDP these da
72.
by nocarrier 11y ago
Google shared some details about how they do leap smearing and the adjustments were smeared over a long enough time to be small enough to not affect their applications. They've been doing this for a while with no ill effects AFAIK. I&#
73.
by nocarrier 11y ago
I like that they clearly describe how FreeBSD handles leap seconds, but when I read the headline I was hoping they were announcing support for leap smearing.
74.
by nocarrier 11y ago
Yeah, you're right. We certainly had different problems when Joe came on board and he was a great fit to lead us through fixing them. And I'm glad him and Mat and others are working to fix similar problems with Uber. I just commen
75.
by nocarrier 11y ago
Respectfully, you don't sound very well informed and your reply is pretty emotional and negative. Did you actually work on or with FB's Security team? If so, when?
76.
by nocarrier 11y ago
It's true that Joe's background is on the legal and policy side of things, but he presided over the softwareification of Facebook's security team. I worked closely with him for many years and he saw the need for more technolo
77.
by nocarrier 11y ago
I'm excited about this. Facebook has aggressively evolved its Security org over the years and they have given security a whole new level of focus in the past few years. I was there for 8.5 years and watched them grow and reinvent thems
78.
by nocarrier 11y ago
We didn't get serious about load balancing and create a team dedicated to it until fall of 2011. At the time, Facebook had 800 million active users per month. We had run out of runway on commercial and open source options, and needed a
79.
by nocarrier 11y ago
It's a simple, fast DNS server that is straightforward to extend if you need to. The genius of Cartographer is that the backend that calculates where to assign traffic is separate from the DNS server frontend. This let FB use a known-g
80.
by nocarrier 11y ago
This stuff seems basic at first glance, but it's not easy to get right, and you're discounting a ton of effort that went into getting feedback loops and demand prediction to work properly in Cartographer for example. Maybe it&#x27
81.
by nocarrier 11y ago
I built Haystack with two other engineers and then founded the Everstore team which works on Haystack/F4/Cold Storage. I moved off of managing Everstore to focus on Traffic in fall of 2011, so F4 and Cold Storage happened after my
82.
by nocarrier 11y ago
I’ll talk about one abstract thing and two concrete things that I think show that Facebook has been able to solve Hard problems that required the development of new capabilities rarely or never seen before. I find these three things to be v
83.
by nocarrier 11y ago
It would be cool if you could share when you worked at FB and what general area of the infrastructure you worked on. Your statements don’t match the Facebook infrastructure I know. I recently left after spending 8.5+ years on infra, so I sa
84.
by nocarrier 11y ago
Carlos, you are mistaken re: Haystack. I don't think it was ever planned to be replaced, it's always been in use as a hot blob storage engine since it was launched. There are three storage layers for blobs at Facebook: hot (Haysta