HN user

omani

68 karma
Posts8
Comments125
View on HN

only downside to LE is the attack surface presented by CTLs (Certificate Transparency Logs). as soon as you request a cert, you will get attacks on the endpoint/subdomain you have registered by countless IPs trying to login etc.

hey michael, long term phind user here. phind became absolute sh*t. almost every answer is wrong. web search should be on by default to get accurate info. but even then is ends up hallucinating a lot.

if every response starts with "You're absolutely right -- ..." you know phind is hallucinating and you can immediately close the tab.

one way to mitigate DDoS is to enforce source IP checks on the way OUT of a datacenter (egress).

sure there are botnets, infected devices, etc that would conform to this but where does the sheer power of a big ddos attack come from? including those who sell it as a service. they have to have some infrastructure in some datacenter right?

make a law that forces every edge router of a datacenter to check for source IP and you would eliminate a very big portion of DDoS as we know it.

until then, the only real and effective method of mitigating a DDoS attack is with even more bandwidth. you are basically a black hole to the attack, which cloudflare basically is.

one way to mitigate DDoS is to enforce source IP checks on the way OUT of a datacenter (egress).

sure there are botnets, infected devices, etc that would conform to this but where does the sheer power of a big ddos attack come from? including those who sell it as a service. they have to have some infrastructure in some datacenter right?

make a law that forces every edge router of a datacenter to check for source IP and you would eliminate a very big portion of DDoS as we know it.

until then, the only real and effective method of mitigating a DDoS attack is with even more bandwidth. you are basically a black hole to the attack, which cloudflare basically is.

so someone decided to build around docker + wireguard + a web UI dashboard + use buzzwords like serverless (which it isnt btw) + wrote some third-party API handlers and this is it? this is how you make $50 (once) per customer?

haha

laptops are the best. cant go back to desktops anymore. tried and it is awful. sitting in front of it like an ape. I rather lie down or chill in a comfy position and be location independent.

"Why you're bad at giving feedback"

why you're bad at choosing titles.

EDIT: the title has changed to "Delivering actionable feedback". this is much better. someone listened.

yeah regular blockchain, with proof of relay (data transmit) rather than PoW. it is limited to ipv4 though. no it cannot be run on isolated networks because every node needs to be able to be reachable by a static IP.

thanks for mentioning yggdrasil, looks interesting.

ChatGPT Search 2 years ago

ikr. see this is the status quo of the HN audience. that and the ever increasing suspicious feeling that half of all comments are coming from bots.