Hacker Newsnew | past | comments | ask | show | jobs | submit | buren's commentslogin

> [...] Nameservers responsible for archive.is (ben.archive.is, anna.archive.is) are returning answers tailored to the IP address of the requestor [...]

From this thread https://community.cloudflare.com/t/archive-is-error-1001/182...


That's "how" not "why". Most major services tailor queries based on the source IP, for some reason when archive.is does it to cloudflare queries it's either broken or purposefully broken. At first I thought it might be something to do with 1.1.1.1 in the archive.is network but then I noticed cloudflare queries on behalf of clients don't even source from that IP.


See here: https://twitter.com/search?q=from%3Aarchiveis%20cloudflare&s...

Archive.is intentionally returns bad results to Cloudflare DNS, because Cloudflare don't send them the EDNS Client Subnet Header. Archive.is haven't said much about why, but what they have said appears to accord with this blog post: https://www.sajalkayan.com/post/cloudflare-1dot1dot1dot1.htm...


Apparently he discards requests from DNS servers that don't send EDNS in their requests: https://twitter.com/archiveis/status/1018691421182791680


weird... that link is blocked for me in the UK (redireting to contentcontrol.vodafone.co.uk). Wonder what thats is about since its basically the network topology of a, albeit crazy, home network..


It's probably blanket blocking of imgur as opposed to the image itself.


Newer vodafone contracts have contentcontrol enabled by default (because the UK is now a nanny state), you have to call them up to get it turned off.


Is that the adult content filter?


I must say I really appreciate your hard work FooBarWidget. It seems, to me, that anytime something like this gets brought up, you've already addressed/fixed the problem or never even had it in the first place.

I've deployed a few large apps using Phusion Passenger, that years later are still running with incredible stability. Thank you!


Couldn't agree more. Sandi Metz has an excellent talk touching on this topic. Developers exaggerated willingness to keep things DRY and elaborates a bit on why: it's one of the easiest things for a not-so-experienced developer to identify and one of the easiest things to teach.

Edit: One of the best quotes from that talk is (paraphrased): "The wrong abstraction is a lot more expensive than duplicated code". https://youtu.be/OMPfEXIlTVE


"In a fourth embodiment of the invention, the service provider is a lender. When an individual applies for a loan, the lender examines the credit ratings of members of the individual's social network who are connected to the individual through authorized nodes. If the average credit rating of these members is at least a minimum credit score, the lender continues to process the loan application. Otherwise, the loan application is rejected. "


While IANAL, I am fairly familiar with the Fair Credit Reporting Act (FCRA). This would seem to be completely illegal under FCRA as only those with a "valid need" are allowed access to your file. Depending on how this is done it could also be significantly damaging to an individual's social network if the inquiries made are "hard inquiries" as those directly affect an individuals score for a period of two years. (source: https://www.consumer.ftc.gov/articles/pdf-0096-fair-credit-r...)

Additionally, I know of two people directly in my circle of friends who have had their identities stolen in the last couple years. As part of that I know from talking to them their credit took a significant hit and they have been working to clean it up. While this patent claims to take the average, that average can be directly impacted by something like identity theft if the sample is small.

I believe a better credit scoring method would be to utilize bills and banking that are paid more often, yet not reported to agencies. For example, I pay my rent, cable, cell phone bill monthly. I also keep a balance in my bank account for rainy days. On the other hand, I only have one credit card and only use it in extreme emergency and rarely have a balance on it. My credit score is good, but could be better because of this. I would rather be judged on the bills I pay monthly rather than the bills I pay rarely. The irony of things like rent, cable, cell phone, etc... is that they don't report unless it goes to collections. There should be an "all or nothing" law. If you don't report timely payments you can't report untimely ones. That to me would be a better use of the credit reporting system.


Looks pretty cool, though it is a pretty daunting task to convince all gem developers to test/make their gems compatible.

Perhaps this could make http://devblog.avdi.org/2015/08/11/what-its-like-to-come-bac... easier ;)


I don't expect to convince all gem developers by any means, but it doesn't hurt to ask nicely if the brave few would give it a try. ;)


I certainly will :)


AWS supports Windows too :) http://aws.amazon.com/windows/


Yeah I thought about including AWS in my comment :) but I feel that Azure is the default choice for .NET cloud platforms so I (and I think many Windows devs) benchmark Google/Amazon against Azure.


One important distinction between AWS and GCE is price.

GCE and Azure both have per-minute pricing while AWS is hourly (which matters a lot for build bots or scaling up and down your website). GCE even charges for Windows per-minute and at a lower rate than AWS ($.04/vCPU/hour vs $.063/vCPU/hour) [0] that matches the "Windows" price on Azure [1] ($.04/vCPU/hour on the A7 "Standard tier" VMs).

[0] https://cloud.google.com/compute/pricing#premiumoperatingsys...

[1] http://azure.microsoft.com/en-us/pricing/details/virtual-mac...

Disclosure: I work on Compute Engine, but not on anything related to this Windows support.


We switched to GCE because of two main things:

1. Speed. Everything is faster on GCE. From the not-terrible portal, to VM start times, to the machines themselves and storage.[1]

2. Price. Google was a half to a fifth of the price of Azure. Even with an Azure enterprise agreement GCE was far better.

Great job. I didn't think I'd like a Google product, and I came in very biased against Google, but you totally won me and others over thru a flatly superior product.

1: Azure still has an embarrassingly bad SSD story. Even when talking to them they don't seem to realize what a useless offering they have. I guess their plan is to focus on software on top of Azure, cause as IaaS it's simply not competitive.


The one thing I'm confused about with Google is what product do I select if I want a server to host a website on? Azure has the smallest VM at around $13/month, and on that I can host a website, database, services, etc. Does Google have a similar option? GCE's setup and pricing doesn't seem geared towards that.


Are you just looking to have a single VM running Windows Server?

We definitely have individual VMs that cost less than that (the f1-micro would be about $5/month for the VM, the g1-small about $13/month). You can hook them up to Autoscaling, Google Cloud DNS and Google Cloud Load Balancing (which Azure's "Basic tier" VMs don't seem to support; I'm not familiar with them, just reading what it says).

That said, I'm not sure I'd try to run Windows server on such a small instance (we apparently allow it and only charge $.02/hr in those cases). For example, Chrome's Clusterfuzz team runs Windows bots using the n1-standard-2 (2 vCPUs and ~8 GiB of RAM). Maybe someone can comment as to whether Nano Server would improve this situation...


Good info, thanks!


Cool! The author of the post you linked, also linked to this paper https://www.cs.princeton.edu/~appel/papers/memerr.pdf. From the paper: "..experimental study showing that soft memory errors can lead to serious security vulnerabilities in Java and .NET virtual machines"


The first author in the princeton paper is my brother!!


They've changed get their display name to just that: https://mobile.twitter.com/hackingteam


They're probably not the ones who made that change though...


You think?


Company: Trialbee Location: Malmö, Sweden Role: Full Stack Engineer / developer PM:@buren


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: