Viewing profile — aaron42net

Cloudflare uses JA3 and now JA4 TLS fingerprints, which are hashes of various TLS handshake parameters. https://github.com/FoxIO-LLC/ja4/blob/main/technical_details... has more det…

Will Prowse's favorite large panels are cheaper than that, including a 370w bifacial for $111 each in small quantities: https://signaturesolar.com/all-products/solar-panels/ Relate…

By default, many compilers include things like local filesystem paths, build server hostnames, or build timestamps into their binary artifacts. These will obviously differ build-to…

Over the years, I've had direct knowledge of or involvement with maybe a dozen or so events that have ended up in the mainstream news. And in almost every case it has been inaccura…

On cell networks, video content is by far the largest consumer of bandwidth. And the default for video generally is to auto-adjust the resolution to the highest quality that the ne…

The default region for global services including https://console.aws.amazon.com is us-east-1, but there are usual regional alternatives. For example: https://us-west-2.console.aws.…

Enabling Warp via the "1.1.1.1" Android app gets me an 8.x.x.x VPN address, at least. This /24 appears to be routed to my city's Cloudflare node, so presumably there's a /24 per ci…

It's not edge location count that matters, but Cloudfront doesn't use BGP Anycast but rather does a more traditional DNS-based routing and tries to spread the requests across multi…

We weren't having issues solved by basic documentation. In the most recent example, we were occasionally hitting Java heap OutOfMemory under our workloads and wanted tuning or even…

Not much value at all, from my experience. Having given Elastic's support two tries at different companies, it doesn't surprise me that their business model is failing. Their suppo…

Based on reading the LinkedIn of the Parler execs, their code is node.js and some Go with Cassandra and Postgres for storage and RabbitMQ for queuing. That sounds like it will run …

Where did you see the "per month" for Travis? The 10,000 free credits are a one-time trial from what I can see.

Wasn't it only has of version 3.4 that Jepsen stopped finding single-node data loss bugs in MongoDB? So it's been 3 years that MongoDB has been suitable for single-node data storag…

Skimming the bucket code, it appears that the rate-limiting information is stored in a map. It doesn't appear to implement an LRU or attempt to clean up stale entries. If I feed th…

Previously when the Wired article was mentioned on HN ( https://news.ycombinator.com/item?id=5089703 ), I did some digging and found that aaronsw.com and tor2web.org were hosted on…

Recent Android on T-mobile US uses IPv6-only transport. T-mobile's DNS servers are only asked by these devices to translate hostnames to IPv6 addresses. If they can't find an IPv6 …

That was an explicit goal of OpenBTS when I was following it years ago. The GSM vendors want something like $250k per base station, which is unreasonable for third-world or very-ru…

There's a TPM-like mode with hardware isolation built into ARM for years, used for disk encryption keys, DRM, auth keys, fingerprints, etc on IOS and Android. See: https://en.wikip…

Do they just strip the color profiles? Or do they apply them and convert to sRGB?

That depends on how you define fair, I guess. If this isn't a hardcoded bonus for "google.com" and instead all established, high-PageRank sites receive the same benefit, is it stil…

The lack of provider competition isn't a natural monopoly. It's a government-created monopoly/duopoly in a given market. Instead of regulating the one or two providers in a market,…

That depends on how you define "wide scale infrastructure sabotage". I believe that this is resulting from: https://blog.torproject.org/blog/tor-security-advisory-relay... January …

I grant the docker.io build and private repository service access to my github repo, drop a Dockerfile at the root of my git repo, and the build server does the checkout outside of…

We're moving all of production in EC2 from an old CentOS 5 image managed by capistrano to CoreOS, with fleet deploying images built by the docker.io build service and private repo.…

I'm doing this, but starting with the minimal 80MB debian:stable image and then using apt-get to grab my dependencies. The 80MB covers the dependencies for apt-get. I believe the c…