Hacker Newsnew | past | comments | ask | show | jobs | submit | ryanf323's commentslogin

Very comprehensive. However, it is missing how the client machine will ARP the gateway for the MAC address if it is not in its tables.


Perhaps you should submit a PR on the repo?


I should and I will


We cache the hell out of our WP marketing site. Cloudfront > Varnish > Apache > OPCache > MySQL Query Cache. It feels fast to visitors. People in the admin area still suffer.


Geo Restrictions on the Cloudfront distribution and a WAF will go a long way in mitigating against abuse and unnecessary costs.


Which locations are you gonna restrict from using your website? Is that how you want the web to generally work?

WAF also doesn't seem to be free, where did you read that?


Typically, you restrict countries that you receive abusive traffic from and do not have any business in.

"Is that how you want the web to generally work?"

My suggestions on ways to prevent paying for CloudFront charges from junk requests are not prescriptive. However, they are AWS best practices when dealing with DDoS.

https://aws.amazon.com/answers/networking/aws-ddos-attack-mi...


Guess we're living very different lives on the same web. "do not have any business in." is not something I'm familiar with on the web, as the part of the web I love is the one without borders. But each to their own :)


As an American expat living in Vietnam, I find it annoying when companies decided they "do not have any business" where I live.

For example, if I want to purchase southwest airline tickets, I have to use a VPN.


Tell me about it! I'm Swedish, I live in Spain but I prefer all my technology text (OS language, websites and everything) to be in English. But services don't realize this. So to buy from Apple, I need to be on the Spanish website, that doesn't offer a English version, while the Swedish version does offer English, even though they have exactly the same content and everything looks the same... Same goes for almost all shops, Amazon, PSN, AppStore, Google Play and so on. The world is not ready for a global web it seems.

Off-topic but interesting anyways, I've noticed that people who move from the US to elsewhere, often call themselves "expats", while people who move from elsewhere to the US, are called "immigrants". Why is that?


Off-topic but interesting anyways, I've noticed that people who move from the US to elsewhere, often call themselves "expats", while people who move from elsewhere to the US, are called "immigrants".

I think it depends on how you view the move. Expat (which in my experience I've heard more Brits use than anything else), implies that you still 'belong' to your home country but are choosing to live elsewhere for a (perhaps very long) while. Immigrant implies that you are leaving your old country with a view of 'belonging' to your new country.

Simplified slightly, if you ask someone where they're from and they answer "I'm from X, but living in Y" they are an expat. If they answer "I'm from Y, but was born in X" they're an immigrant.


I never said WAF was free. Where did you read that?


Sorry, assumed you hinted at that since that was the premise of the article linked here.


I look at GitHub profiles to help filter / disqualify candidates. Just last weekend, I had a marketing candidate who had stolen three Wordpress projects from their current employer and post them as public repos on their personal GitHub account. In addition to the flagrant intellectual property theft, the repos contained the wp-config.php file with exposed database “root” credentials to live, client sites.


> flagrant intellectual property theft

Granted, this seems like a case that's less malice and more adequately explained by stupidity.


Not sure either bodes well for hiring.


I use GitHub accounts to provide context, after triaging CVs. The first sentence of the article mentions data aggregation, which is very far from how I use GitHub when evaluating technical candidates.

If you have already somebody's resume, GitHub provide clues and maybe a bit of evidence for your assessment of the candidate. Older, busy working software developer? Expect not many projects, possibly an intermittent commit history. Most GitHub projects are just unfinished exercises, so a workng project is unusual, and a clue that the candidate is also unusual. It's not scientific, but it's evidence that you can use, alongside the resume, and any communication with the candidate.


I know it's not really your responsibility but did you inform those sites and/or the candidate?


We did.


Did you also report the employer's "theft", as you put it, of WordPress's GPL'd code?


that's just...that's just not at all what GPL is


The GPL is a license. If you don't abide by it, you don't get to download a copy of the software, sell it or create derivative works.

The history of WP itself enforcing the GP is instructive. More recently, Panasonic Avionics has been sued for $100M due to GPL violations.


GPL does not force you to publish anything. But if you do publish a derivative work (including a binary) you must make sources available on request.

A WordPress-generated website is likely not a derivative work of WordPress source code. (Which is why Affero GPL exists.)

The further specifics depend on GPL version employed.


Ah, I'd been thinking this was a theme. If it's a site generated with WP, that's completely different.

My reaction was largely to the poster's self-righteous attitude about "theft", which has mapped to many GPL violators I've encountered.


"if you see something, say something"


Wow talk about a scummy thing to do to their employer. I am sure it will work for them before too... because not everyone would do their DD like you have.


FYI: WordPress.com requires plugins to be GPL for their public marketplace, so there may be nothing "flagrant" going on at all.


Perhaps I misunderstood. But isn't Github help you filter out such candidates, is it? They have some big projects, but their contribution calandar should be almost empty, cuz all the code is pushed into Github at once.


No one should look at the contribution calendar and hire based on it without looking more in depth. To answer your question it's based on commit time, but because of that you have things like: https://github.com/gelstudios/gitfiti


To all the down-voters, let me rephrase my opinion again. I do take serious look on candidates Github profile, if they include that in their resume. And if they has some reasonable big projects, but they calendar seems empty, I will immediately think that the code is not belong to them. Perhaps that just forks, or, worse, that are stolen code.

I would also check they PR, issue and comments, to get some idea about how they work with stranger; what are important to them when they suggest ideas, contribute to existing code base; how they reply to critic or question from project owner, etc.

Also, just my opinion, most of us - software developers - can't live without OSS. We should contribute back when we could. That's why I usually prefer resume with a non empty Github profile than the others.


I spent the majority of my time working on closed source.


Those AWS “practitioners” who are too stupid or lazy to figure out IAM policies. Thankfully, AWS has added bright yellow labels to identify public buckets. However, labels won’t be enough to motivate some people to learn JSON.


I interned at a great company (https://qedmrf.com/) that engineers magnetorheological fluid and machines for polishing / analyzing optics. I can't imagine doing it by hand. Fascinating stuff.


Seems nice, simple, and cheap enough. I did something similar with phantomjs (no email). I agree with other comments that change detection and a slack integration would be nice.


This does not handle Microsoft office URL pre-fetching...and is written in C...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: