HNHacker News
TopNewBestAskShowJobs

thresh

578 karma · joined November 22, 2012

submissionscomments
thresh··on Dav2d
Of course, static websites is the best solution to that problem.

Our documentation and a main website are not fronted by this protection, so they're still accessible for the scrapers.

thresh··on Dav2d
You cant really cache the dynamic content produced by the forges like Gitlab and, say, web forums like phpbb. So it means every request gets through the slow path. Media/JS is of course cached on the edge, so it's not an issue.

Even when the amount of AI requests isnt that high - generally it's in hundreds per second tops for our services combined - that's still a load that causes issues for legitimate users/developers. We've seen it grow from somewhat reasonable to pretty much being 99% of responses we serve.

Can it be solved by throwing more hardware at the problem? Sure. But it's not sustainable, and the reasonable approach in our case is to filter off the parasitic traffic.

thresh··on Dav2d
I'm all ears on how we can fix it otherwise.

Keep in mind that those kinds of services: - should not be MITMed by CDNs - are generally ran by volunteers with zero budget, money and time-wise

thresh··on Dav2d
We had to set it up on the parts of VideoLAN infra so the service would remain usable.

Otherwise it was under a constant DDoS by the AI bots.

thresh··on Native ACME support comes to Nginx
Just use the official packages from https://nginx.org/en/linux_packages.html#Ubuntu

nginx-module-acme is available there, too, so you don't need to compile it manually.

thresh··on Nginx introduces native support for ACME protocol
I'm currently working on getting the Trixie packages uploaded. It'll be there this week.

As you've said Debian 13 was released 4 days ago - it takes some time to spin up the infrastructure for a new OS (and we've been busy with other tasks, like getting nginx-acme and 1.29.1 out).

(I work for F5)

thresh··on Why does the U.S. always run a trade deficit?
Is that correct? My understanding is that the SWIFT transfer will go through a US correspondent bank in this case.
thresh··on The extraordinary lives of coast redwoods
Uh, Siberia and Russian European North.
thresh··on Nginx Security Advisory
Hi!

The official nginx docker images ship with HTTP3 module enabled - and we have released the updated ones earlier today - so please update to stay secure.

You can also launch something like: $ docker run -ti --rm nginx:latest nginx -V

to check which modules are compiled in to the binary you're running.

Thanks!

thresh··on Chrome Removing Theora Support
VLC has a port to WebAssembly: https://code.videolan.org/jbk/vlc.js#vlcjs-vlc-for-wasmasmjs

(it's actually usable to some extent)

thresh··on HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
nginx: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...
thresh··on HTTP/2 Rapid Reset: deconstructing the record-breaking attack
Read this: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...
thresh··on The future of AlmaLinux
> We will also start asking anyone who reports bugs in AlmaLinux OS to attempt to test and replicate the problem in CentOS Stream as well

So what's the point of running Alma then?

thresh··on Bitcoin miners in Abkhazia are causing blackouts in remote villages [video]
The electricity there isnt just cheap, it's virtually free. They just dont shut you off it you don't pay.
thresh··on A Technology Preview of Nginx Support for QUIC and HTTP/3
Is HTTP2 in the paid version different than the opensource implementation?
thresh··on Climate Change Is Killing Alpine Skiing as We Know It
Even the bloomberg article states:

> Already, the summer generates 60% of the tourism intake, according to Garmisch Mayor Sigrid Meierhofer.

Indeed, hiking doesnt require you to spend moneys on rental equipment. It's a bit different for mountain biking - most of the time you need lift passes to enjoy the mountain. And with the explosion of electric bikes rentals in the last years, and there are lots of growth opportunities for generating revenue there as well.

And it's not only about hiking/biking, of course.

Of course, having more places to ski is better than having less places - my main concern is people and their jobs, and not specific resort activities per se.

thresh··on Climate Change Is Killing Alpine Skiing as We Know It
I don't think there's much culture lost in moving a few ski lifts to a higher altitude place.
thresh··on Climate Change Is Killing Alpine Skiing as We Know It
So they'll just convert the lower altitude resorts to more "summer" activities like hiking and mountain biking.
thresh··on Mirantis acquires Docker Enterprise and Docker raises $35M
Finally they found someone to get sold to. Only 750 customers, so low.

And no info on the price.

thresh··on Docker Hub Registry is down
No, you should rewrite your CI not to depend on external stuff, if you want sane evenings.
thresh··on KDE is adopting GitLab
How do people self-hosting gitlab CE for the open-for-all projects fix the spam problem?
thresh··on Debian 10 “Buster” Released
"sudo su" is "launch su with superuser privileges", which is eh... weird to say the least. You probably wanted "sudo -i".
thresh··on How the United States threatens our security
Implying US-based companies don't have links to the US government and intelligence services?

Implying US doesnt spy, censor or mind-controls its own citizens?

thresh··on Report deems Russia a pioneer in GPS spoofing attacks
That does not happen all the time though. I would say geolocation works nicely pretty much all the time.

Not sure why it's not possible to order a taxi, since you're not supposed to provide your own coordinates but rather a point where you want to be picked up.

thresh··on Npm Layoffs
Why would someone who wants you out help you find another job?

What kind of mess is in the head of a person that thinks everyone owes them a helping hand?

thresh··on Dockcross: Cross compiling toolchains in Docker images
We do that quite easily for all VideoLAN projects, using https://code.videolan.org/videolan/docker-images/tree/master...
thresh··on Designing Headers for HTTP Compression
It's all fun and games until we realize our web designers put a four megabyte jpeg on the index page.
thresh··on Nginx Security Advisory (CVE-2018-16843, CVE-2018-16844) – in HTTP2 and MP4
The MP4 SA is available at http://mailman.nginx.org/pipermail/nginx-announce/2018/00022...
thresh··on 2018 Mac Mini Review
The review doesnt tell you that you cannot upgrade or replace your SSD.
thresh··on KDE Connect 1.10 released
KDE Connect is just one of the greatest tools ever. What I really did not expect is that it worked out of the box without any shenanigans to set up. Great job!
Page 1 of 3Next →