laz

We're definitely talking about different things. The open internet is hostile and you'll always need load shedding when the clients misbehave.

If you control all clients and servers and are on a closed network, you can do all sorts of fun things... though load shedding is helpful for when your good clients turn bad due to a code bug. A self DoS is the worst kind of outage.

If your clients are all this well behaved, then you’re definitely not exposed to the public internet.

The global edge networks that I’m aware of all use L4 LBs and L7 LBs. Cloudflare picks anycast over DNS LB, but DNS LB is still widely used.

I don’t see these things changing.

IME sports doctors and physios have incentives aligned with returning to high functionality. I think this causes them to clinically converge on effective treatments. It’s also possible that they have clientele who are willing to put in the work to recover.

Regardless, if you’re optimizing for outcomes this is the way.

Having strong muscles around the joint won't fix a structural problem, but they definitely won't hurt.

When I tore my ACL doing bjj, I was surprised to see that some pro MMA fighters will continue to fight with a torn ACL. They double down on muscles to support the joint and postpone the loss of a year of competition to the reconstruction surgery.

Sounds half baked. What context does this function run in? Is it an interpreted language or an executable that you provide?

Inotify is the way to shovel these events out of the kernel, then userspace process rules apply. It's maybe not elegant from your pov, but it's simple.

git ls-files | entr pre-commit

No. You sit on the call and wait to restore your service to your users. There’s bullshit toil in disabling scale in as the outage gets longer.

Eventually, AWS has a VP of something dial in to your call to apologize. They’re unprepared and offer no new information. The get handed to a side call for executive bullshit.

AWS comes back. Your support rep only vaguely knows what’s going on. Your system serves some errors but digs out.

Then you go to sleep.

The worst SEV calls are the one where you twiddle your thumbs waiting for a support rep to drop a crumb of information about the provider outage.

You wake up. It's not your fault. You're helpless to solve it.

The Facebook "little red book" had a quote in it along these lines:

When you don't realize what you can't do, you can do some pretty cool stuff

Do Cloudflare's floating egress IPs probe in a way where you can easily geolocate them?

https://blog.cloudflare.com/cloudflare-servers-dont-own-ips-...

Google, Apple, and Meta (maybe others?) have the data to build a complete GeoIP dataset. None of them will share because there are only downsides to doing so.

When FB was rolling out ipv6 in 2012, well meaning engineers proposed releasing a v6 only GeoIP db (at the time, the public dbs were shit). Not surprisingly, it was shot down.

I see a single IP for all 3

While I'm here: Google uses edns0 client subnet to geo target your client IP.

Try a dig -t txt o-o.myaddr.l.google.com @8.8.8.8 vs the others to see the src IP of the packet sent to Google's DNS server, and any edns0 info that came along with it.

It depends on how long they're above the speed limit and you're below it.

If you want to win the race, max acceleration, max speed, max deceleration. Anything else is sub optimal.

Amusing that they don't mention xds at all.

How did they "win" when xds, envoy's config, is becoming the defacto interface to LBs? Sure, Gateway API is kinda xds by not, but it's envoy all the way down.

Onavo was the vpn app turned competitive intelligence tool

10 years ago at Facebook we had a systems design interview question called "botnet crawl" where the set up that I'd give would be:

I'm an entrepreneur who is going to get rich selling printed copies of Wikipedia. I'll pay you to fetch the content for me to print. You get 1000 compromised machines to use. Crawl Wikipedia and give me the data. Go.

Some candidates would (rightfully) point out that the entirety is available as an archive, so for "interviewing purposes" we'd have to ignore that fact.

If it went well, you would pivot back and forth: OK, you wrote a distributed crawler. Wikipedia hires you you to block it. What do you do? This cat and mouse game goes on indefinitely.

I worked on the laser printers in the early 2000s when they transitioned to Linux for the OS. They were hiring Linux nerds and I fit the bill. It was a fun place for a while, but the IBM legacy was an albatross. I left for Google and didn't look back.

Google was available at google.stanford.edu before they spun up the company.

I saw Sergei give a talk at my university in 96 or 97 and switched from Alta Vista.

Aktiia makes a continuous optical blood pressure monitor that is available in the EU. It's like wearing a fitbit, but for bp. You calibrate it with a pressure cuff once a month.

I'm pretty sure they're going through fda approval in the USA now.

You don't need full blown workspace, which costs money, you can set up "cloud identity free" and claim the domain.

When you're setting it up, you can choose what to do with any existing accounts that are part of your domain: kick them out or merge them in.

Exactly what an NSA puppet account would say!

Don't believe the hype. Remember the smiley from "SSL added and removed here"

https://blog.encrypt.me/2013/11/05/ssl-added-and-removed-her...

I'm using rules_distroless+rules_oci with bazel to build small Ubuntu based images. It takes some effort, but ends up being pretty nice.

Non-Koreans who live and work in South Korea pay South Korean taxes

Uber works in S Korea now.

It also accepts non-Korean credit cards, while most online apps in South Korea do not.

When did Kakao Bank start offering accounts to foreigners with ARCs? Last I checked it did not.

https://xoogler.co/ has a xoogler slack

That was not the hourly rate

No.

The environment takes a toll on everyone, some more than others. The things I've seen ... you cannot un-see ;)

DNS load balancing isn't all bad. Google uses it to host www.google.com for example ;)