pfooti

9 ms·

61.
by pfooti 3y ago
So is hola vpn: https://www.theregister.com/2015/06/10/hola_gets_holes_poked... At this point one must assume that any "free" vpn software is free because it uses its install base for DDoS / ot
62.
by pfooti 3y ago
i like hover.
63.
by pfooti 3y ago
That is more or less what I landed on myself. (Not quite, but similar reactive configs based on traffic thresholds). For a while, we had to just set off pagers when global traffic exceeded a threshold and manually toggle the extra hardening
64.
by pfooti 3y ago
Yeah, "recaptcha" in this case is shorthand for a lot of stuff we did to harden the endpoint that ultimately represents a minor shift in balance from no friction to some friction for otherwise legitimate users, but a pretty signif
65.
by pfooti 3y ago
Mostly works, but there do exist a couple of botnets that contain 1 million compromised machines. If each makes one request before hitting backoff, spread evenly throughout the day, that's about 10 QPS alone before they use an IP numbe
66.
by pfooti 3y ago
See sibling, but the endpoint was part of a signup funnel, so short of rearchitecting it completely to put that check after customer creation, there's no real persistent key to rate limit on. Any one IP ended up getting rate limited to
67.
by pfooti 3y ago
Endpoint was invoked in our signup funnel, so there was a bootstrapping problem for quota enforcement, the attackers weren't making a whole signup, just getting to the point where the domain search ran.
68.
by pfooti 3y ago
I run a system at my employer that occasionally gets scraped by malicious users. It can be used to infer the purchasability of a specific domain, which is a moderately-interesting API endpoint, since that requires talking to domain registri
69.
Tornado DAO subject to hostile takeover(web3isgoinggreat.com)
9 points by pfooti 3y ago|2 comments
70.
by pfooti 3y ago
> But the point is, unless you are technically skilled, you probably can't tell whether you're about to go to a trusted file or download something random. Under what circumstances would a link you click on a website or an email
71.
by pfooti 4y ago
Or maybe layoffs.
72.
by pfooti 4y ago
The threshold for "obese" and all such labels has changed over the years, in such a way that makes it seem like people are fatter, when in fact the labels have changed. Some history. https://elemental.medium.com/th
73.
by pfooti 4y ago
Curious about the tradeoff between index builds on insert and general hotspotting if you have sequentially increasing primary keys. I had always thought the latter was a bigger problem (to the point where I would need to reverse the bits of
74.
by pfooti 4y ago
FWIW, if you're the administrator of the organization, you can disable 2FA from the admin console for that user's next login. I've done this a few times for similar reasons.
75.
by pfooti 4y ago
That's the neat part, you don't. The problem, ultimately, cannot be solved without disassembling neoliberal capitalism. It is more or less endemic to the system. To a large extent that short termist, get returns and move on before
76.
by pfooti 4y ago
On the one hand, I absolutely love working with rxjs on a fairly large angular app as a side project. It affords me the chance to be clever with code, to reason about coordinating multiple asychronous streams, and so on. Firestore gives me
77.
by pfooti 4y ago
I think there's a pretty clear difference between chatting about interesting puzzles between friends and asking annoying puzzle questions in a job interview. The power dynamic is very different, although honestly I don't often lik
78.
by pfooti 4y ago
dell xps laptops are (a) pretty nice and (b) do ship in some models with ubuntu as the main OS. personally, i use an xps15/windows/WSL, mainly because i also use the laptop for video games and so on.
79.
by pfooti 5y ago
If the viewport meta tag includes user-scalable=no, then it won't scale on mobile. Personally I don't like that setting much, since it is bad for a11y. It does also prevent accidental zooms when users intend to scroll, so maybe th
80.
by pfooti 5y ago
It's just a mobile thing due to pixel scaling. In the overflow menu, of the browser bar, check the "desktop site" box and you can zoom in.
81.
by pfooti 5y ago
there's also banks.
82.
by pfooti 5y ago
Most companies do both. If just asking users questions was strictly better than passive tracking, that's probably all they'd do - analytics have a real cost to use, that cost wouldn't be paid if the information gathered was u
83.
by pfooti 5y ago
The problem at hand, though, is that the only reason I can see people working on crypto is precisely for the money. I mean sure, there's some small number of purists out there, but I get DeFi recruiter emails all the time. The only thi
84.
by pfooti 5y ago
Roll back prod?
85.
by pfooti 5y ago
I mean, I don't know if you can do this with modern c++, but I would occasionally do this when I was being aggressive in my c++ tweaks: #define private public #import <something.h> then you can interact with your cla
86.
by pfooti 5y ago
Just use SWALE, it hasn't done me wrong yet.
87.
by pfooti 5y ago
Matsutake are delicious. You can get them online in october-november usually if you look around. I've gotten them from www.oregonmushrooms.com. Not cheap online; the dried version are also pretty good, but not as much. I personally wou
88.
by pfooti 5y ago
Best hope you don't end up releasing 2.100 then
89.
by pfooti 5y ago
Can't tell from your UI screenshot, but quite often loading a page with devtools open will disable the cache. I forget if this is the default behavior or not.
90.
by pfooti 5y ago
One thing you should consider (not an infra eng myself, but I know a lot at the FAANG where I work) is that the infra team gets a lot of requests for stuff like that. There's a general dislike of special-casing all build deploy run pip

More ›