patrakov

14 ms·

211.
by patrakov 2y ago
It's worth noting that the logic in the article only applies to idempotent requests. See this article (by the same author) for the non-idempotent counter-part: https://habr.com/ru/companies/yandex/article
212.
by patrakov 2y ago
To counter the avalanche of retries on different layers, I have also seen a custom header being added to all requests that are retries. Upon receiving a request with this header, the microservice would turn off its own retry logic for this
213.
by patrakov 2y ago
I have also seen a prohibition to have a local copy of the code coming from cybersecurity guys worried about laptops being compromised, for example, through an email with a malicious link. "Here is a web-based editor; please develop ev
214.
by patrakov 2y ago
You don't need to write Python unit tests for spelling mistakes. A good IDE will highlight them on the fly, and static analysis tools such as pyflakes or pylint will flag them on demand.
215.
by patrakov 2y ago
To add to the article: both circuits are mere converters of a single analog input to PWM, which is not the best way to drive DC motors. A good driver would also take the current consumed by the motor into account and adjust the duty cycle b
216.
by patrakov 2y ago
Please trace where the cybersecurity requirement comes from. The answer is usually either a contract with a "special" customer whose industry is affected by regulations and who must pass these requirements onto contractors, or the
217.
by patrakov 2y ago
There is another pitfall in the layered support structure: how would you hire, train, or otherwise produce L2 support engineers? You cannot hire someone directly as L2, as there is a learning curve for company- and product-specific issues,
218.
by patrakov 2y ago
Not really true. Please also consider the case where the user and the attacker are one and the same person trying to reverse-engineer your mobile API. Then the certificate is misissued from the viewpoint of the app developer but not from th
219.
by patrakov 2y ago
And the only one time where I have seen this (in a private discussion of the mobile app with a bank employee), they said that they see no valid use case for a managed MitM against their production website. Preventing proxies like Charles an
220.
by patrakov 2y ago
Thanks! Added this example to my training slides.
221.
How can a jigsaw have two distinct solutions? [video](youtube.com)
80 points by patrakov 2y ago|31 comments
222.
by patrakov 2y ago
No. The most effective way to remove HDD noise is to remove HDDs and add SSDs. I don't have any HDDs since 2016. P.S. I also talked to a customer in the past who stored their backups in an SSD-only Ceph cluster. They were citing higher
223.
by patrakov 2y ago
Just in case, you could have also mentioned that the Philippines has ratified the International Covenant on Civil and Political Rights (ICCPR) (1966). Article 26 prohibits discrimination on any ground, including national origin.
224.
by patrakov 2y ago
The web-based experience is subpar: * You can't share your screen in a way optimized for text clarity. In the native app, even without nitro, you, effectively, have the "source resolution, 5 fps" option. With the web app, you
225.
by patrakov 2y ago
I don't buy this "narrowcast mediums like mobile phones" argument. Please watch any video of any Debconf 24 session. You'll hear how the mobile phones of all participants at the same time start reading emergency alerts (
226.
by patrakov 2y ago
LanguageTool is not open source; it is open core. There are proprietary "premium rules," and you won't get them in a self-hosted version.
227.
by patrakov 2y ago
Ed25519 is not just about performance. It, unlike other elliptic crypto, was explicitly constructed to avoid data-dependent branches and memory access patterns that could be exploited as side channels via timing.
228.
by patrakov 2y ago
Not only good off-grid solar setups are expensive, but installers also cut every corner possible and impossible in order to drive the cost down no matter whether the result is safe. For example, they will sell you an inverter with a step-ap
229.
by patrakov 2y ago
Hire an auditor who confirms that (based on the lack of transactions and invoices), then close the company and all accounts.
230.
by patrakov 2y ago
Comply first. Otherwise, you won't have a business bank account where you could direct the money from the first sale.
231.
by patrakov 2y ago
See https://www.reddit.com/r/uBlockOrigin/comments/tie7un/ublock...
232.
by patrakov 2y ago
Since 2020, Tele2 Russia (now "t2") is a wholly owned subsidiary of Rostelecom.
233.
by patrakov 2y ago
Is the server on OVH? This is a known "feature" of their DoS protection that cannot be turned off.
234.
by patrakov 2y ago
Related to https://news.ycombinator.com/item?id=41434637 The exact analysis for n=13 (instead of n=100) is presented--or rather, just the answer from the exhaustive search. The answer for n=100 is still unknown.
235.
by patrakov 2y ago
And in China, using ad blockers is illegal. Go figure.
236.
by patrakov 2y ago
Plot twist: some ISPs implement countermeasures [0], only to be threatened with license revocation [1]. [0] https://lifehacker.ru/provaidery-obxodyat-zamedlenie-youtube... [1] https://www.forbes.ru/tekhnolog
237.
by patrakov 2y ago
The conclusion is (or, rather, was) invalid for Soviet Russia. The reason is that a song for children by Eduard Khil specifically mentioned 6x8=48. https://www.youtube.com/watch?v=WLMHWtregmw (at 1:38).
238.
by patrakov 2y ago
They don't even bind the port. Instead, their client gives special treatment to packets arriving on port 22 over the tunnel instead of giving them to the kernel over the tailscale0 interface.
239.
by patrakov 2y ago
Not to be confused with the largest bank in the Philippines, which is also named "BDO" but has a different logo.
240.
by patrakov 2y ago
The authors claim that they came with a formalism that reconciles quantum mechanics and general relativity. My personal opinion is that this work is too wild to be true. The key ingredient of this work is the treatment of the Ricci curvatur

More ›