tquai

13 ปีที่แล้วdiscuss

It doesn't. My server is appropriately engineered to its task.

13 ปีที่แล้วdiscuss

Yeah, I think there's a misunderstanding somewhere. Some people think I believe a $5 computer could handle amazon.com's traffic, which is clearly preposterous.

I know that almost all of my downtime comes from when I overengineer things. And I don't need to "patch my kernel" because my OS doesn't have kernel holes once a week. Linux isn't the only Unix OS out there.

Today, a lot of sysadmins believe that "LAMP" is a synonym for webserver, and consequently there are a bunch of webservers serving static content on a machine with way too many moving parts. Complexity is bad.

"Things should be made as simple as possible, but not any simpler." -- Albert Einstein

tquai

13 ปีที่แล้วdiscuss

It's a lesson in overengineering. At this point my $5 Pentium 3 server has a greater uptime than Amazon.

tquai

13 ปีที่แล้วdiscuss

FWIW, Obama and Romney have both lived abroad. I think it takes a certain kind of person to want to be president, and the effect of travel is different on a person like that.

For this and other reasons, I think electoral politics is one of the least effective places to put energy, in working for change.

tquai

13 ปีที่แล้วdiscuss

I compared US-based carriers with non-US based carriers. Southwest, a US-based carrier, competes with other US-based carriers. You're right, Southwest is a great choice if you're flying in the US, but that's not what my post is about. You can't compare Southwest with Cathay Pacific or EVA Airlines because they operate totally different routes.

Same thing regarding EasyJet comments, which is another "niche" airline. Try flying EasyJet from LAX to NRT, for example.

tquai

13 ปีที่แล้วdiscuss

Just a general comment on airlines:

With US-based carriers, expect low prices, inflating awards points/miles, and bottom-level service.

With non-US based carriers, expect higher prices, no awards programs, and excellent service.

This is my experience flying in N. America, Europe, and Asia.

tquai

13 ปีที่แล้วdiscuss

The market is capitalized at $2.5 billion, but what does that mean in an economy with no production?

Does the author define "production" as manufacturing where the exclusive currency used (for raw materials, wages, utility bills, etc.) is bitcoin? If so then I'm not sure of the relevance.

One could make all sorts of clever but offtopic points about a fiat paper currency when viewed through the lens of a P2P currency like bitcoin. "The Canadian dollar is supposedly worth more than the USD today, but what does that mean when the Canadian network has zero nodes?" The wrongness of such a statement leaps out since fiat currencies are familiar to us. In contrast, bitcoin doesn't need a manufacturing base, but this is less obvious since P2P currency is a new idea that people (myself included) don't well understand.

tquai

13 ปีที่แล้วdiscuss

Recently I was offered a free flight for a weekend trip. I declined, citing the myriad displeasures of flying.

Now, should we initiate a behavior recall? Take the number of McDonalds-level staff in the air (A), multiply by the probable rate of power tripping (B), multiply by the average loss of tickets sold (C). A times B times C = X. If X is less than the cost of some basic decency training, we won't do any. Which airline do you work for? A major one.

tquai

13 ปีที่แล้วdiscuss

How is this possible?!

In any sufficiently large organization, the people who make the decisions and the people who enact those decisions are separated by distance, background, experience, or other reasons. This is why you see so much dysfunction in large organizations, and it extends to politics and other things that affect you as well. Look for it and you'll start seeing it everywhere.

tquai

13 ปีที่แล้วdiscuss

Earlier today this had 135 comments. Checked later, 200. Now 350! OMG BUY! BUY! BUY!

tquai

13 ปีที่แล้วdiscuss

The Open DNS Resolver Project has a list of 25 million open resolvers. You can query their database for your IP address or up to a /24. Their site also has information on how to reduce or eliminate the problem via a couple options (RRL, BCP38). If you run a BIND resolver, consider switching to unbound. Part of this problem is rooted in BIND combining resolver and authoritative service in one daemon, which IMO "mis-educated" a lot of people.

http://openresolverproject.org/

tquai

13 ปีที่แล้วdiscuss

Once you got black-listed getting removed wasn't always an easy process no matter how quickly you tried fix whatever caused it.

I took a job in the year 2000, at a company with 3000 email users, listed by Spamhaus. First thing I did was close the open relay they were running. The listing was promptly removed, and the mail queue was back to normal within only a few days. I'm skeptical of your claim. I've never seen a confirmed case of Spamhaus aggression, but I've seen a lot that were disproven, and even more that sound like they were written by miscreants. Like the kind who would advocate DDoS attacks cough.

tquai

13 ปีที่แล้วdiscuss

Good point; I think both of our statements are true due to ambiguous wording upstream. I also took it literally, "any filter relying on the SBL" -- I use the SBL (via ZEN) but don't use SpamAssassin. And so my mail servers wouldn't block any domain that resolves to an IP address in the SBL, as described in the link you provided.

As for DNSBL false positive rates, I haven't seen statistics in a few years, and by now they wouldn't be worth much. The only ones I saw were from 2005 or 2007. This one (linked to from the below article) from 2011 doesn't even test Spamhaus:

http://www.spamresource.com/2011/05/dnsbl-safety-report-5142...

This is just my personal experience saying (in 2013) that Spamhaus has the lowest FP rate, which isn't scientific. I'm kind of surprised there haven't been more FP comparison reports of major DNSBLs in recent years. If anyone has a link I'd love to see it.

tquai

13 ปีที่แล้วdiscuss

any filter relying on the SBL is now marking email with the url "paulgraham.com" as spam.

Impossible. The SBL lists only IP addresses; there is no content filtering at all.

http://www.spamhaus.org/sbl/

Furthermore, there's a lot of FUD in this thread about Spamhaus listing people who don't emit spam. IF this is true, then Spamhaus would have an unacceptably high false positive rate, and we would be able to observe this. In reality, Spamhaus has the lowest FP rate in the industry. Occam's Razor suggests those who claim to have been wrongly blocked are mistaken about the reason for their listings (if they ever existed in the first place).

tquai

13 ปีที่แล้วdiscuss

In some countries, like France, asking someone you barely know "What do you do (for income)?" is considered vulgar. There, you ask what people are interested in, what they like doing, and so on. I like that. A lot.

tquai

13 ปีที่แล้วdiscuss

Any ETA for allowing to block Referer header from being included in cross-origin requests?

This feature has been supported in Firefox for a long time, but you have to set it in about:config via the "network.http.sendRefererHeader" integer.

  2 = always send
  1 = send only to same FQDN (what you seem to want)
  0 = never send

IMO this is one of the best bang-for-your-buck privacy configurations. I would love it if Mozilla changed the default from 2 to 1, and at the least, it SHOULD be an option under the Preferences -> Privacy tab.

tquai

13 ปีที่แล้วdiscuss

Run your own resolver on 127.0.0.1, and your own authoritative nameserver on 127.0.53.1, and configure the resolver to ask the nameserver (returning NXDOMAIN) for

  * facebook.com
  * doubleclick.net
  * google-analytics.com
  * su (abuse)
  * 2o7.net
  * any others you want; get ideas from the MVPS hosts file

Since facebook domains (fbcdn.net, facebook.net, etc.) are all serviced by facebook.com nameservers, returning NXDOMAIN for *.facebook.com will thereby sabotage all facebook related queries. This way you won't have to play whack-a-mole with future facebook tracking hosts, so long as they use facebook.com nameservers.

Or hell, just create a list of prefixes announced & owned by AS32934, Facebook, and block all. Just to be sure.

tquai

13 ปีที่แล้วdiscuss

I did this once, too. It's so nice to hear other people appreciate the approach!

The "CMS" I wrote was about 75 lines of sh, and had slightly fewer features than the one linked here. That's the beauty of writing your own: you decide what to include, and no more. cp wc sort awk etc. is all you need. If you want it to look beautiful, that's where design and CSS come into play, both of which are outside the scope of content management.

tquai

13 ปีที่แล้วdiscuss

One of bitcoin's strengths is decentralization, and you just told people not to manage their own wallets.

How do you accept bitcoin? Please enlighten us.

tquai

13 ปีที่แล้วdiscuss

I've lived/worked in both the USA and France, and this guy's comments are so transparently uninformed. To simplify things greatly: In France, there is more time off, but people are more sérieux while at work. In France, time off is taken outside of work, while in the US, time off is taken at work -- at the coffee machine, on reddit, chatting about banal stuff with coworkers, complaining about stuff (that's usually related to working too much)...

On a different note, I've noticed numerous CEOs lately bringing up politics in reference to their work. The most common example is, "my company isn't doing as well as expected, and it's a certain politician's fault, not mine." Gotta love the personal responsibility, there.

Submissions

New Crypto Competition, CAESAR, for Authenticated Ciphers

comments