byteshock

For the query string, you don’t have to implement your own DSL. Elasticsearch supports it out of the box. You could POST a JSON object to “/_search” but you can also do a GET with the “q” query parameter. Documentation: https://www.elastic.co/guide/en/elasticsearch/reference/curr...

In the Golang library you can use the “Search.WithQuery” option. This means you don’t have to construct a JSON request body.

Here’s an example: https://github.com/taythebot/archer/blob/main/pkg/elasticsea...

Very interesting product! How does this compare to something like Nebula? Have you done benchmarks against other solutions? If i remember correctly, Nebula implements its own protocol and underperforms compared to Wireguard. Is this the same case?

Looking forward to trying it out!

Awesome, thank you for the reply. Will try out Portmaster again!

I remember trying out Portmaster on Windows earlier this year. I think Portmaster was running a local DNS server to see what connections were being made. This interfered with my VPN, Mullvad, which was trying to use a remote DNS server.

Does Portmaster still require a local DNS server? I’ve been an avid user of Glasswire for years and it works flawlessly with my VPN. But i would love to switch to a open source alternative.

I think it’s because SPN uses a different IP/node per connection you make. DNS leak detection tests will ask your browser to resolve unique subdomains. If the DNS server that requests the lookup is different from your connecting IP to the website, they will say you have a DNS leak.

https://security.stackexchange.com/questions/42752/how-does-...

I’m confused on why secret management considered secure. Maybe I’m missing something.

Why is letting a third party managed your secrets is secure? So if that third party gets compromised, they now have access to all your secrets. Amazon or other company employees can also view your secrets.

If your server gets compromised, the secrets that are accessible via that server are also compromised. Isn’t that the same impact as just keeping the secrets on your server? Maybe worse if your permissions are broad. You’re merely adding an extra step to get the secret from your secret management.

But if they have the decrypted secrets, do they really need the key?

I’m not sure I understand the value of reporting this to Microsoft? Wouldn’t it be better to submit an online tip to law enforcement? Is Microsoft doing law enforcement activity now?

The website says its secure and private, but your privacy policy contradicts it. Seems like you don’t collect usage data, but the ad providers do. Is it right to make such a privacy claim?

Privacy Policy: https://tab.gladly.io/privacy/

“Ad targeting, selection, and delivery: When you use our Services, third parties that provide advertising, to the Services, may collect or receive information about you including through the use of cookies. These third parties may use your information to provide you with advertising that is based on your interests and to measure and analyze ad performance, on our Services or other websites or platforms, and combine it with information collected across different websites, online services, and other devices. These third parties' use of your information will be based on their own privacy policies. You can opt out of interest-based targeted advertising for some advertising partners here.”

Here are the financial reports https://tab.gladly.io/financials/

If I need to encrypt a file for quick sharing, I’ll use gpg. Encrypt: gpg -c file.zip

Decrypt: gpg file.zip.gpg

However, for my personal files on my computer, I use a Veracrypt container with a strong password and custom pin.

If someone wants to watch Russian propaganda or RT, they should be free to do so. Just like you are free to browse western media sites.

This choice should be up to the individual and their beliefs.

Would using a library like Hyperscan improve Go's regex performance?

Reference: https://www.hyperscan.io/

Doesn’t Cloudflare use Hcaptcha now? They dropped Google because of the cost.

Can someone explain to me why they are mad? Is it because Mozilla is asking for donations on Twitter? Or it it because Mozilla is accepting crypto?

I don’t think a company accepting crypto as a form of donation is a bad thing tbh. Seems like they’re just trying to allow more people to donate.

A solution could be to use Cloudflare Worker scripts. You would store valid file names in their kv storage and then check if the incoming request is valid before forwarding it. This way you wouldn’t need to spend more money on infrastructure. Another good solution is to use Cloudflare’s advanced rate limiting rules. You can block users who hit too many 404 requests within a certain time frame. But this requires a business or enterprise plan.

Spending more money on increasing infrastructure rather than reading through Cloudflare’s documentation and offerings seems kind of a waste…

What about Roundcube with a calendar plugin?

Anyone can get followers on social media. But to get on radio or tv, you need connections and money. Also not a lot of people listen to radio or watch tv anymore, especially the younger generation. So if you want to target them, you need to advertise on social media.

Right but there is a difference between people posting on a social media app and the app targeting someone itself. Citizen is encouraging others to find this person. So they would be held liable.

While it's not illegal to call someone a suspect, putting a bounty on someone's head might be. You're essentially endangering someone's life. If the person was harmed, they could easily win a massive lawsuit.

Well almost everyone that gets their post hidden will object to it. Which will cause most of the posts to be reviewed by staff anyways. If you post something you want it seen by others.

Wasabi is a good option. They’re S3 compatible and don’t charge any egress or ingress fees. Been using them for a few years. Great speeds and customer support.

Whats the point of a distributed exchange if you can just deny any exchanges at will? Doesn’t that defeat the core idea of an distributed exchange?

Interesting article, but the title is kind of misleading. You’re assuming they’re doing the same thing you are by a mere suggestion from the seller to check if the gift card has balance or not.

For all we know these could have been purchased with stolen credit cards. Nonetheless interesting article.

I don’t think anyone is going to stop using YouTube because of a small downtime. There is really no alternative to it out there.

Seems like a great idea but there seems to be no sense or idea of security at all.

How are you ensuring my items will be available at the same spot in the next x months? Do you have contracts in place that mandates the host stay at a certain location for the next year or length of my storage?

You should require hosts to provide lease and income statements to verify that they will be able to pay for their storage space. You should also require hosts to have basic security such as proper locks and cameras. It would also be a good idea to require pictures of the storage boxes with dates every month or so.

As for preventing illegal items from being stored, you shouldn’t look or inspect your customer’s items. You should have them sign a contract stating they didn’t store anything illegal and that you are not responsible for any such items as they do at self storage companies. You should definitely consult a lawyer before doing all this. Having no security measures in place is a great way to get sued in the future for damages.

Finally as someone stated already you need insurance. People will never store anything with you unless you have insurance and security. It doesn’t matter if they’re giving back to the community. People want their valuables to be safe.

Sorry for the rant but I just wanted to suggest a few things as a current customer of self storage.

If you’re trying to load test then why not use a load testing tool like Vegeta or k6? You can use a list of ip addresses and have it set a special header with an IP address. Then your app could use the ip address in the header to keep track of clients.

You probably get better and faster results.

This was a reply to another comment in the thread that suggested a user use sqlite. I commented using the Octal ios app. Not sure why it didn’t post it correctly....

Awesome website. I love reading engineering blogs from tech companies. Gives valuable insight to how they handle problems.

Could you consider adding Stripe and Cloudflare?

If latency and performance is an issue there are also solutions like RocksDB or LevelDB