dedalus

I see one reason why: I was running my whole thing on Cloudflare whereas I do need one MCP proxy all the time and if I run that one thing on GCP it suffers from latency so moving all my stack there now. The extra cost is for control of docker/kubernets which gives me on prem as well. So I kinda answered my own question of how to deploy both on CF as well as move away from it

Can I create a new company based out of this platform i.e do we know if anyone builds on top of this as a platform?

This author actually sells his time for $275 per hour for career advice and I can tell you thats the absolute waste of both your time and money. I did the mistake and he is cargo culting PM stuff. Anyways not surprised at his take on AI

This is Vannevar Bush's Memex in action using the cloud

https://www2.math.upenn.edu/~kazdan/425S11/Drum-Gordon-Webb.... is a great paper on hearing the shape of a drum

Life at Low Reynolds Number makes you think of things which arent visible but move :https://www.damtp.cam.ac.uk/user/gold/pdfs/purcell.pdf

There are more but lets see if the above two work for you first

Andrew misunderstands the purpose of including CloudFlare in the cert. He thinks its to easily identify the CA. The ICA is not used that way. In this case, Cloudflare is the one managing all of the certificates issued off this change. If you have an issue with the certs, you know Cloudflare is the one managing it. He says “its completely useless for human consumption”, but that’s just more of the same misunderstanding. Afterall, would you rather know that all the sites are being operated by Cloudflare or know that DigiCert issued the cert? The average person doesn’t care who issued the cert – they care about who is managing the certs.

The name of the root is to indicate ubiquity, not to provide identification of the CA who is operating it. If you need to know whether a cert will work on an older platform, you look at the name of the cert embedded, not the serial number. Its faster and easier to do so. You also want to know when things will expire and when you might need to migrate CAs. That’s best done with the name of the root. Plus – this is how browsers track which roots are trusted. Browsers could tie to the serial number, but they use the subject info of the cert for identification purposes on what roots are included and what roots are audited.

In summary, he has misguided notion about why these values are in the certs and the value they provide. He sees no value in them because he assumes people will be looking at the ICA and root purely to contact the CA, when that is rarely the case. I dont think there is a security or real issue with the information.

The extension simply rewrites the URLs and there's a way to "swoosh" your links which works transparent for the end user: https://web.archive.org/web/20050111015750/http://redswoosh....

Quite an honor to see Matthew Prince (CEO of Cloudflare) chime here.

Akamai acquired RedSwoosh precisely on the same economics promised and if this were economical/viable they would already have deployed it, no?

I did hack with Travis on RedSwoosh code base optimizing his TCP Zipper algorithm which was pretty cool BTW

“Life is nothing but an electron looking for a place to rest.” Although life is more complex than a single electron, Szent-Györgyi's quote emphasizes the importance of energy and metabolism in all living systems and he got a Nobel for isolating Vitamin C among other cool experiments. In this memoir he summarizes his research career and also the times from the viewpoint of a Hungarian Jew (WW2 era)

"Autobiography of a Yogi" by Paramahamsa Yogananda as its a book thats on one level about a chockful of miracles in India and weird bugs about reality (like what you see if not what you get) but on a deeper level about reality in the way that steve jobs felt compelled to hand it as his parting gift at his funeral

Thanks a lot for this, any idea why there is not a desktop equivalent of this?

The issue though is that for the same identical cache content wouldnt you prefer it to be on your local laptop than a cloud somewhere purely for the expediency aspect much less the offline experiences that it may provide?

To get the stats you want, you'd probably need to write a plugin using one of the hooks that lets you see all the requests (which are being phased out, but such is life).

Hmmm. So there lies the rub that we dont know as of now (will try to write an extension as you said)

If you run an app like gmail for example, you can store most everything in cache, >and local storage (browser), including logos, button graphics etc. Resulting to >an app that loads almost instantly most of the time as it's coming from disk >(relatively speaking, many would argue that disk access is extremely slow).

Does this extend to other thick client apps like SAP or even ftp just for thinking's sake?

This information stored should obviously not be time sensitive. But if you're >running a client for social networks or such, it's perfectly a good idea to cache >the last 10 posts seen for example, so that when the user loads the page, he >instantly has something to look at while the browser is fetching the fresh >content.

Correct but now this is why I say an API because each app can have its own way of caching the last few items (http objects, files, posts whatever might be tagged)

One key consideration is security: do not cache things on the browser that may be >private or sensitive information, unless encrypted, but even then the argument >could be made to not do it at all. That said, storing your application graphics >and most of the UI bits in local storage can certainly improve the user >experience greatly.

Is it because of the browser? Say I remove it out of the browser and place it somewhere else, encrypt it store it and wont display until I verify the end user with SSO etc, would that take away this concerns. Depends on the user(most UI bits I agree need be cached and harmless either way) for what bits might be cacheable

Firefox, for example has `about:cache`

May I ask whats the equivalent for it in Chrome as majority of users are on Chrome for me.

> as my enterprise I want to push objects to my employee's cache using an API

Well, theoretically you can do it using Service Workers today (https://developers.google.com/web/ilt/pwa/caching-files-with...) but I want to do it in a automated way so that I minimize the thundering herd when everyone comes tomorrow on Monday morning apart from enabling an offline experience (users in some countries have crappy connections so asynchronously pushing it is a way to solve it)

Combine it with some basic packet capturing of new TLS connections and I could push arbitrary JS that did event capturing on all the sites that employees visited.

Hmm..I need more on this but the idea is they are SRI checked and come from a supply source thats trusted (but I get your drift on solar winds kind of lateral attack), but if I am right then what you say can even be done with the service worker API I mentioned above

Look at request inspectors, log files, etc. Network behavior is easy to observe.

Correct but do you know of any way to look at the cache hit ratio, stuff that didnt fit into the browser cache and other stats? I understand you can do it on a page level but I want to accumulate all of sessions and look at it aggregate and yet to find a easy way to see under the hood

Make sure as much of your corporate intranet stuff as is reasonable counts as >same domain for purposes of cache sharing, and standardize on a single version of >your frontend libraries, etc, and you might actually get cache hits naturally. >Standardizing frontend libraries is hard, but if shaving the couple of ms here >and there is important, I'm sure you can find a way.

Correct but there is no guarantee its in the cache whereas my effort is to publish my app's shell/versions of frameowrks before I enroll users to my app

Now, maybe you've got a lot of work from home with terrible networks; that's >pretty common today, or maybe you're work from the field and have had terrible >networks forever. In that case, it might make sense to do something like wrap >your web pages in electron where all the html/css/js is included and you only >need to fetch data and you've got full control over the caching. Nobody on HN >likes electron, but it would solve your enterprise problem. You might consider >actually making an application, but that's unfashionable these days.

Now, this is new, I need go learn this electron thing

Correct but how do I know what my browser cache is doing . To be clear my context is coming from this article here: https://infrequently.org/2022/03/cache-and-prizes/ which clearly makes sense as a browser vendor but as my enterprise I want to push objects to my employee's cache using an API

The same technique was extrapolated to images in this paper where a CDN's corpus of cached images were classified and apply the optimizations for each image as the exemplar for it bucket.

What do you say about this : https://www.economist.com/science-and-technology/2020/11/07/...

- Arthur Conan Doyle's Sherlock Holmes (All 4 Novels and 56 short stories) --> read multiple times since childhood

- "Be Here Now" by Ram Dass (read once and listened to audiobook twice)

- Flatland by Edwin Abbot Abbot --> read multiple times to understand whats going on in different levels

- Some PG Wodehouse stuff because it ages well (specifically the bibilical references)

- Midnight's Children by Salman Rushdie which is absolute verbal wizardry

- Treasure Island by RLS which is a kids favorite for adventurism

TLDR here: https://blog.acolyer.org/2020/01/29/narrowing-the-gap/

what if the cachekey to use is sent as a response header

http://tomcat.apache.org/tomcat-3.3-doc/AJPv13.html

Google uses this all day multiple millions of times to price their "adsense" ads. This is the basis on which the price and value are quantified to make sure that the general strategy for advertisers is to make sure they bid the "true" price as any other game will increase their counterfactual value thus demoting them

The reason I submitted this now albeit dated is due to the fact that now GDPR is alive, CCPA is in the works and overall privacy environment has changed to kill the cookie in advertising as we know it. So there will be a need to explore alternatives to do the same stuff without using cookies (e.g analytics systems such as GA)

beautiful article. this connects the dots for me when I read Half Asleep in Frog Pajamas which is arguably fiction but takes a lot of the material mentioned here:

https://en.wikipedia.org/wiki/Half_Asleep_in_Frog_Pajamas

https://techcrunch.com/2019/03/11/f5-acquires-nginx-for-670m... is a much better rationale and details on how it went down

Absorbing Uncertainity and Emitting Certainity is what leaders do, so I think the ask here is to not quantify the uncertainity not explain dimensions of it but give an output of what can be done given all the uncertainities

Yes. It will be a while before they disappear

Yes