rmdoss

10 ms·

61.
by rmdoss 9y ago
That's an interesting concept. Do you do only the design/mockups or you build the frontend (HTML/CSS) as well? I will forward the link to a friend that was looking for something similar.
62.
Slack went down, and the workers of the world unitedon Twitter(mashable.com)
2 points by rmdoss 9y ago|0 comments
63.
by rmdoss 9y ago
OVH is one of the few hosting providers that used to offer DDoS protection for free to everyone - and a good one. The issue is that it became a refugee for sites that could not stay online on other providers due to DDoS - so they were getti
64.
by rmdoss 9y ago
Too much content without addressing the real problem with most startups: They do not solve a customer problem. Solve their problem, make their life better and you will do well.
65.
by rmdoss 10y ago
I recommend watching this video by Fast.ly on some real metrics comparing HTTP/2 and HTTP/1: https://www.youtube.com/watch?v=0yzJAKknE_k Overall, the performance gain is not as much (if any) compared to the hype w
66.
Tell HN: Ycombinator.com Blacklisted by Norton
63 points by rmdoss 10y ago|37 comments
67.
by rmdoss 10y ago
That's from a CloudFlare DNS Engineer -- someone that knows and likely handles DDoS on a daily basis.
68.
by rmdoss 10y ago
I can see that. I just tend to engage on threads about ddos/security where I share what I do and tools I use.
69.
by rmdoss 10y ago
I love CloudFlare, but understand the concern some people have. With the amount of sites they have behind them, and the amount of visibility and data they can extract, it is actually a bit scary to think what will happen if they get comprom
70.
by rmdoss 10y ago
Because I am not. Just like their service and use it along with CloudFlare (which I always recommend).
71.
by rmdoss 10y ago
That's a great move by Hetzner. Glad to see that OVH is not the only main player doing it anymore. The only issue with both is that they don't handle l7 DDoS, which seems to be getting more common. I also don't like that they
72.
by rmdoss 10y ago
Fun read. If you ever get hacked, I recommend just destroying the server and starting from scratch and a clean backup. If you try to find all backdoors and left over rootkits, you will end up forgetting one and being re-compromised.
73.
by rmdoss 10y ago
Depending on the size of the syn flood or HTTP flood, there is no way you can handle it locally. Some syn floods can generate millions of packets per second, which is way more than a dedicated linux server can handle. Good video on the topi
74.
by rmdoss 10y ago
Yep, we suffered through it. To be fair, they all have some downtimes from time to time.
75.
by rmdoss 10y ago
To summarize the discussion here so far: 1- For small attacks you can optimize your stack, cache your content and use a provider that allows you to quickly scale and add more servers to handle the traffic. Do not use Linode or Digital Ocean
76.
by rmdoss 10y ago
I do use OVH and recommend them from time to time. The main issue is that I lost a bit of faith in their support and reliability. vracks going down for hours with no updates. Connectivity issues. Servers disappearing. Besides that, their DD
77.
by rmdoss 10y ago
Surprised to see anyone mention defense.net. How has been your experience with it?
78.
by rmdoss 10y ago
That's a good point. CloudFlare, Sucuri and friends only handle HTTP/HTTPS/DNS traffic. If you have custom protocols, you have to get a full /24 mitigation and so far nobody can beat Arbor into it. Very expensive, but wo
79.
by rmdoss 10y ago
We need to divide DDoS here in two categories: -DDoS you can handle (small ones). That anything up to 1 or 2Gbps or 1m packets per second. -DDoS you can not handle. Anything higher than that. For the smaller DDoS attacks, you can handle it
80.
by rmdoss 10y ago
Very good article with the unnecessary click bait headline.
81.
by rmdoss 10y ago
Yep, agree 100% very short sighted view of security. Their grades doesn't mean anything, other than confuse people thinking they are secure.
82.
by rmdoss 10y ago
Their description doesn't really match what they do: "Observatory by Mozilla is a project designed to help developers, system administrators, and security professionals configure their sites safely and securely. " All they ch
83.
by rmdoss 10y ago
Thanks, mis-read it.
84.
by rmdoss 10y ago
Ah, good point. Thanks for the info.
85.
by rmdoss 10y ago
Don't think their numbers are right. I manage 3 different sites with AAAA and A records. site 1: tech site: 12% of the traffic is via IPv6 site 2: mixed/funny site: 7% is IPv6 site 3: company site: 9% is IPv6 I asked around a few
86.
by rmdoss 10y ago
PagerDuty is the kind of cool company that I am surprised haven't been bought yet. After Atlassian acquired StatusPage, I can see them going after PagerDuty (or similar) to complete their devops solution.
87.
by rmdoss 10y ago
Very interesting bug. People forget some times how expensive a regex can be compared to simple pattern matching.
88.
Airtel is censoring CloudFlare’s traffic in India and doesn’t even know it(medium.com)
1 points by rmdoss 10y ago|0 comments
89.
by rmdoss 10y ago
Not really, just looking for alternatives. Atlassian so far has been leaving a bad taste for us.
90.
by rmdoss 10y ago
As a happy StatusPage user, I am worried about this acquisition. Been more and more frustrated with Atlassian and recently we had to move away from HipChat due to multiple issues (constant downtimes). What are the good alternatives to Statu

More ›