AtNightWeCode

7 ms·

241.
by AtNightWeCode 3y ago
Yak shaver?
242.
by AtNightWeCode 3y ago
Another thing. Queues often lack prioritization of messages; for instance, the importance of a new user signup may be overlooked compared to an address update.
243.
by AtNightWeCode 3y ago
Next project can be a service for planning a walk in a city based on how much time one would like to spend in the shadow or in the sun.
244.
by AtNightWeCode 3y ago
And a public endpoint is any Internet facing endpoint including the ones where the user needs to be logged in. People seems to forget that.
245.
by AtNightWeCode 3y ago
I would put something like Cloudflare in front of a service like this. Bot protection may handle it and if not a technician can fix it in 5 minutes.
246.
by AtNightWeCode 3y ago
Looks like it. I used to work with it some years ago. I will never use it again or any other actor model based platform with remoting and magic schedulers.
247.
by AtNightWeCode 3y ago
Just by switching from Scrum to Kanban one can improve progress a lot. For being two very similar pull based systems the difference in effectiveness is just incredible.
248.
by AtNightWeCode 3y ago
I believe that the most valuable aspect of Scrum is the retrospectives. These are recurring meetings where we assess what has been effective and what hasn’t. If the retrospectives consistently focus on the same issues, such as ongoing compl
249.
by AtNightWeCode 3y ago
Any benchmarks for implementing caching in fib in a lang with a good compiler? A long time ago I worked on a mathlib in C/C++ and when reviewing the assembler output it often did some really clever things.
250.
by AtNightWeCode 3y ago
Egress bandwidth costs have been discounted for years. Including GCP. Bandwidth Alliance... Like 10 years ago traffic cost was a real problem with the cloud. Today there are other areas that are expensive.
251.
by AtNightWeCode 3y ago
Exactly, I had the best performance review ever at a corp I worked at. Did not make much difference when they reorganized.
252.
by AtNightWeCode 3y ago
Public DNS servers use rate-limiting in various ways. It should not be possible to do a large brute force attempt.
253.
by AtNightWeCode 3y ago
Biggest? How about serving TLS certs when doing direct IP access? Or how about leaking sub domains in TLS certs? I, as a mediocre hacker, cough, security advisor, cough, use certs to find vulnerable subdomains all the time. Or at least. I g
254.
by AtNightWeCode 3y ago
Using emails like this is usually found during pen tests. Not Googles fault I would say even though I think OAuth is overly complicated. This is along the line of sending secrets in the token. Tokens are signed, not encrypted.
255.
by AtNightWeCode 3y ago
The irony. You can ask chatgpt4 if it was the right decision to fire the guy and it kinda confirms it.
256.
by AtNightWeCode 3y ago
This biz have basically driven me insane. Some comments. The problem with time estimates is that you often have to estimate not what to do but a vague vision of something. We want it to be easier to do X. How many hours? I agree with what t
257.
by AtNightWeCode 3y ago
I believe the PersonClass should be sealed in a 1-1 comparison.
258.
by AtNightWeCode 3y ago
They most likely lie about the power outage. Azure does this all the time. I am so fking tired of these services. Even minor data centers in Europe have backup plans for power.
259.
by AtNightWeCode 3y ago
I also wonder how the heat maps looks like during these tests. Let me guess, there are none...
260.
by AtNightWeCode 3y ago
Don't hire this guy, I guess. Mobile first problems was solved like what, 10 years ago? The problem the other way around is still way more prominent. The amount of sites that still can't function normally on any mobile is just sil
261.
by AtNightWeCode 3y ago
We sell CF with every customer. Not the point...
262.
by AtNightWeCode 3y ago
You and all the others did not get it did you. The size of the outcry corresponds to the user base. If you fked something up that was really used at scale this thread would have exploded.
263.
by AtNightWeCode 3y ago
I wonder what was really achieved when we left basic auth with sessions and moved to web tokens. None of these jwt services handles logouts as far as I know. It is just a more complex way of doing just about the same thing.
264.
by AtNightWeCode 3y ago
The way that certbot works with let's encrypt the only surprise is that this does not occur more often. We have monitoring on several certs used for TLS. We should probably add an alert if an A-record changes as well. I assume the root
265.
by AtNightWeCode 3y ago
Posix is actually pretty terrible. It is funny how Linux people still defend it. My criticism. Inflexible. Poor ACL management. All this recursive bs that I still can't wrap my head around. User groups, not a flat hierarchy? Poor obser
266.
by AtNightWeCode 3y ago
If this is true than the design is problematic. What makes it even worse is that cancellation of requests typically does not work in cloud environments. It is a bit laughable that Azure for instance recommend the use of cancellation tokens
267.
by AtNightWeCode 3y ago
This is just Google bs. There is no way in hell they can't mitigate anything at the edge of this nature. If this was a real problem it most likely originated from within GCP. The article does not even state where the traffic comes from
268.
by AtNightWeCode 3y ago
I think most corps allows known bots. To allow all traffic to a major site is not possible. The problem is bigger the other way around I would say. That Google, AWS, Azure and so on use the same AS numbers for private and public cloud. It i
269.
by AtNightWeCode 3y ago
I don't get it. If it is over http then you can play around with anything in a proxy. You have no TLS tunnel so it is not encrypted. It is by design.
270.
by AtNightWeCode 3y ago
It is not just a CVE problem. Many sec standards feels really random and difficult to work with. You can get better scores on some of these sec scans if you open up some ports in the firewall.

More ›