psz

  Location: Manchester area, UK
  Remote: Yes
  Willing to relocate: No, occasional business travel is fine
  Technologies: Go, TypeScript, Rust, PostgreSQL, PL/pgSQL, Kubernetes, cd8ks, Terraform, Redis, GitOps, CI/CD pipelines, DevOps, SRE
  Résumé/CV: https://www.linkedin.com/in/patryk-szczyglowski/
  Email: patryk@patryk.net

Backend and platform engineer. Spent ten years at Cloudflare building, scaling, and securing the public REST API and the systems behind it.

My work involved modernizing, optimizing and maintaining foundational control plane systems, including participating in 24/7-style on-call rotations, defending against DDoS attacks, abuse mitigation. DevOps, SRE in the past. I'm generalist.

Systems Engineering from A to Z: technical specifications, implementation, deployment, maintenance and integration.

You read it wrong. Egress from R2 is free. https://developers.cloudflare.com/r2/pricing/

Why you think so? Keep in mind that revoked certs are not included in CRLs once expired (because they are not valid any more).

acme.sh has a list in their Wiki: https://github.com/acmesh-official/acme.sh/wiki/CA

Set Linux to interpret RTC as local time, or set Windows to interpret RTC as UTC (possibly better, as it won't adjust to DST). https://askubuntu.com/a/1377011

Maybe they like paying AWS. ¯\_(ツ)_/¯

For .pl the transfer is free, but it also does not extend expiration period (it stays the same).

How will you prevent someone sending emails on behalf of my domain?

Yeah. You can pull drives out and mount them in regular Linux. Synology uses standard Linux tools.

https://kb.synology.com/DSM/tutorial/How_can_I_recover_data_...

SVG should be able to be embedded anywhere the regular images can be, at least in browser contexts. The advantages: vector graphics, so infinitely scalable, editable and smaller file size.

It begs for SVG export.

Serving videos (cached or not) is only allowed by using Cloudflare Stream or as a part of Enterprise contract.

My guesses: a) Amazon.com/co.uk/etc traffic is too big even for CloudFront. b) They don't want Amazon.com traffic to evict AWS customers' cached items out of CloudFront, the very reason customers buy CloudFront in the first place. c) Legacy, they just didn't move from Akamai yet.

You may consider https://www.backblaze.com/b2/cloud-storage-pricing.html then.

"Can't provide a response" should be SERVFAIL.

Your DNSSEC signatures expired: https://dnsviz.net/d/deutsche-cyberberatung.de/dnssec/

Because the author using a niche browser (QT wrapped in an app), this might be Browser Integrity Check. It's purpose is to block non-browser like behaviour common for spammers/malware.

That would also explain switching to Chrome fixes the issue.

https://support.cloudflare.com/hc/en-us/articles/200170086-U...

Enable DNS zone, you don't even need to use it. Then, you'll be able to set custom DS records on a domain.

I asked them. It's not a bug, it's a feature!

Not only. There is also minimum 90-day charge for objects. https://wasabi.com/pricing/pricing-faqs/

Looks like Eddy Nigg was recently attending the cabforum minutes: https://cabforum.org/2016/06/09/2016-06-09-minutes/

There is a proposed solution for this scenario: https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...

It will allow for pinning certificates (self-signed too) to records in in DNS with DNSSEC.

Why bother? Isn't it better just to donate these icons to Fontawesome?

platform.twitter.com is hosted at Amazon S3 (via an additional CDN).

All S3 files by default can be distributed with torrent, if the URL is appended with ?torrent

S3 servers will act as a tracker and seeds.