Znafon

This is exactly how the "Happy Eyeballs" algorithm in RFC 8305 works: https://en.wikipedia.org/wiki/Happy_Eyeballs

You would notice, the hash of the commit would change and you would get an error message in Git. If this is a vector attack your are worried about, you should sign Git tags with your PGP key and then you would notice any change in the history, each commit depends on its ancestors so signing a tag ensure no older commit can be changed too.

Yes but for the package to have any value the student still need to find a job.

LambdaSchool can get money on the long term, when the student get a job, and need to cover their costs now, so the packaging is not a weird thing to do. As long as the people buying them understands what they are, there is nothing nefarious going on.

There may be bad things happening at LambdaSchool but I wouldn't say that this part of the financing is one.

It would have been more accurate to said "You don't pay unless you get a job" but you seem to be bitter about it, why so?

While I trust him, how can we be sure that paymentiframe.com starts serving an iframe that steals the credit cards in the future?

In what countries can you do free electronic transactions?

Are you running one cluster per application? I've seen that a lot but it's actually quite inexpensive when you use one cluster for multiple applications.

It's just a brute force so I think it should not matter. Once you find a public key that match what you are looking for you have the same amount of work to do to find the private key.

It would be different if it was to generate a private key that matches the prefix.

You could use a domain name with an appropriate TTL.

I have one that I've been using for some time now: https://github.com/remilapeyre/terraform-provider-gmail

It should work without issues, I need to document it though. Let me know if you have some troubles using it.

What is the company?

When you post an article, please don't publish the code somewhere an account must be created in order to read it. In this case, I cannot check the full code because it is hosted at https://colab.research.google.com, a tarball attached to the article or a publicly accessible host like gitlab.com or github.com would have been fine.

There is a handshake at most every two minutes. Is it not possible to say e.g. fetch a new key if the last handshake was an hour ago?

This is a common critic of WireGuard, but it looks like those service are looking for excuses to explain why they don't propose WireGuard yet. As far as I understang it:

> What they probably need to do is to assign each customer a fixed private IP for use within their VPN, e.g. from 10.0.0.0/8.

Actually, they can set a different IP for each session and rotate them by given it to the client out of band, for example when it authenticates to the service.

> When those are not enough any more, they need to segment their VPN

Like with all other VPNs right? They could also distribute IPv6 for the tunnel and this would not be an issue.

This is absolutly not how a certificate signing request work at all. Please don't say something so wrong just to scare people, you cannot read encrypted packets just because you signed a certificate.

Guido himself said he had forgotten about this trick and since it's syntactic sugar, it does not respect dict subclasses or other mappings.

I had lot of success with Clickhouse recently for tables that are 200+ millions row and that was with the Log table engine, not the Merge tree one so I would expect it to get even faster when we change.

It's very easy to setup so you should be able to test it quickly to see if it fits your needs.

I'm not sure it's a "tax dodge", he just won't pay income tax on the money he donated.

The possibility to run py-spy on an already running Python program in production is pretty awesome. Do you think Scalene could do this?

Could you describe such scenario? I fail to find one where this would be useful.

How do you prove that the user did not modify the page before computing the hash?

Do you have documentation of how this is done?

> Importing people with wages under €50k disincentivizes employers from paying fair wages

Why would €42k not a fair wage? Looking at INSEE data, the median salary in France is €38409, 42k-50k to write API endpoints seems fair to me, what do you think would be appropriate?

I thought it was possible to embed Redis.

You can use something like Vault with the PKI backend and an audit engine set up. You will get a full trace of all certs delivered and an API endpoint to update them.

> I do not know any advantage of date-based versioning

It can be very useful for continuous improvement and handling forward compatibility. Here's how Stripe do it:https://stripe.com/en-fr/blog/api-versioning, we found that very convenient.

Can you give an example of such language so we don't have to guess?

Apparently neither Rust, Haskell nor Go fit.

How does keeping a short token in redis or other would make the application easier to DOS than any other resource?

In my experience, the idea that JWT is stateless is wrong. When your client log-out you will need to keep the token in a blacklist and check all requests against it to make sure it is not reused until it expires.

Since you need to keep a list of invalid tokens, it's not easier to just use standard token. If what's you like in JWT is the ability to store a payload that your backend gets back, you can keep that in your store alongside the token and read it at the same time you check the token is valid.

IMO, JWT only makes sense when an other entity is doing the authentication of your clients.

> The fact that different professions earn different amounts of money is, in fact, an indicator that the higher paying professions have a shortage of people able to perform the work.

If we have 2000 people, we need 1000 doctors and 1000 secretary and it takes 8 years of training to be the former and 1 year for the later, won't doctors be paid more even without shortage to take into account risks and length of studies?

Why did you not use ECS with EC2 instead of patching HAProxy? With the Amazon AMI it is pretty straightforward.