paco3346

That's just my point- that's still a ton. (It'd be even more impressive if it wasn't all new purchases.)

The 3rd gen iPad was released 2012 ($499), air 2013 ($499), mini 4 2015 ($399), pro 2015 ($799), pro 3rd gen 2018 ($799-$999), you get the idea. If we take an higher end average (assuming she got more bold over time) and use $999 for the average (keeping in mind that she also bought Surface Pros) that's roughly 40,000 pieces of equipment she stole.

2013-2021 is 8 years. That's an average of 5,000 per year or roughly 100 per week.

Wild.

I don't disagree but I don't have faith that other drivers are properly paying attention to those types of things on their vehicles. I just don't see flattening others' tires as a good thing- it's vandalism.

As much as I dislike SUVs and think they're unnecessary I don't see how this helps in the big picture. Is someone really that likely to not buy an SUV because they're afraid someone will deflate their tires?

Even so- where we do draw the line on safety? When does this cause an accident because someone didn't notice a flat tire and drives on the freeway with it?

I'm not sure what support level you've dealt with but I've always been very impressed with AWS support (granted, my org has enterprise support). They've been able to answer some really obscure technical questions without having to escalate.

Also check out the Herman Miller company outlet store- https://www.officeoutlet.net

I agree with the author and you. I think Dominos is the exception though. Pizza places aren't nearly as painful as other places that have javascript bloated, every single interaction has a spinner, there's too much whitespace ordering apps.

Looking at you Applebee's.

Ya, this is really just the author not fully understanding `json_decode()`

Ditto. I've been doing it 11 years at this point and it's never come back to bite me.

I assume GitHub initially saw this as someone gaining unauthorized access to his account. How often does a maintainer add something like this? Without knowing it was actually him I can totally see why they'd think it wasn't a proper update.

I'm all aboard the Brother laser train as well. It truly is just as "it just works" as everyone says it is.

So really website owners are just misusing Cloudflare? How is this Cloudflare's fault?

It's not them who want it back, it's their competitors who want it.

No, we're a contracted provider for these customers. They ingest their data into our network through APIs or CSVs.

This is what my org does. Devs are allowed to pick their own OS as long as they can support it when IT doesn't know about the particulars. We've even contemplated running it on production servers instead of Ubuntu so that we don't have to wait 18 months for Canonical to publish the next version of a package.

If someone wanted to get past it they probably could. We've had a few sources of traffic that we've had to straight up block (as opposed to challenge) because of this exact issue. So far it's been a "good enough" solution that blocks enough of the bot traffic to be effective.

It was a hybrid of low-effort vulnerability scanning and targeted inventory scraping. Many dealerships in the automotive space will pay gray-hat third parties to scrape and compile data on their competitors.

The irony for us as a provider is that it's one of our customers (party A) paying a third party to scrape data from another one of our customers (party B) which in turn affects the performance of party A's site. We've started blocking these third parties and directing them to paid APIs that we offer.

I'm right there with you. I'm the lead engineer for an automotive SaaS provider (with ~6000 customers and ~4 billion requests per month) and we recently started moving all our services to Cloudflare's WAF to take advantage of their bot protection. We were getting scrapes from botnets in the 100000+ per minute range that was affecting performance.

We chose to switch to the JS challenge screen as it requires no human interaction. We now block 75% (estimated to the best of our knowledge) of bot traffic but some customers are livid over the challenge screen.

This is specifically in response to a post earlier this week about someone who made a checkbox renderer. Someone else said "you should put doom on it". It's explained in the blog.

I think of 'calories out' as including all the the what, how, where, etc. I think 'calories in calories out' is true, but I think often only things like exercise and BMR are considered in the sum of the out.

As an Arch user I wonder if this means I'll get better native support of Steam on my desktop. I wouldn't say there are any major issues right now but every little bit that makes the experience better is one more reason I can stop keeping a Windows install around.

Our parent company is an Akamai Enterprise user. We've opened a case with them as well.

In the reddit thread someone posted the recording: https://www.youtube.com/watch?v=rHxVVeM9R-M

Really good explanations here. As a Cloudflare Enterprise customer I've opened a case with them to see if any of these vulnerabilities apply to their WAF. I was a bit surprised to see the article mention that Imperva's WAF was vulnerable.

edit: Cloudflare has responded that "[they] are asking your question internally."

Admin of a 5000+ website platform (with customer inventory) here. This the exact kind of thing I've been working so hard to block lately.

Since Feb 2021 we've seen a substantial increase in scraping of our customers' inventory to the point we now have more bot traffic than human traffic. Annoyingly, only 5-10 requests come from a single IP so we've had to resort to always challenging requests that come from certain ASNs (typically those owned by datacenters).

This type of project frustrates me because it knowlingly goes against a site's desired bot action (via robots.txt).

Sadly, not really. The last time I looked the only thing I could really find was commercial grade TVs.

Transformation is the name of the game with Svelte. None of the Svelte syntax is run at runtime because it's all compiled down to vanilla JS (and therefore ships with 0 runtime libraries).

I've had the opposite experience. Ever since they switched to WebKit it actually works for me. Previous to that it was always so sluggish.

I switched because Google removed the ability to log in and sync settings, history, password, etc. (I realize that in this case I'm directly giving Google my data) but it was a super nice feature.

Brave's Sync v2 works decently well.

Mine said 60 hours. It's unclear to me if this takes the current time into account or if it's just looking at a normal, sunny day based on your location and time of day.