ademarre
Joined 13 years ago
Karma
1,355
Submissions
338
Member since
Oct 1
Andre DeMarre / demarre.com / [first] at [last].com
View on Hacker NewsRecent submissions
Comment · 3 months ago
This reminds me of "Why So Many Control Rooms Were Seafoam Green":
[0] https://bethmathews.substack.com/p/why-so-many-control-rooms...
Comment · 10 months ago
I am all for using proper typographic symbols, but it is unclear what place the precomposed ellipsis U+2026—what I assume you mean by “true ellipsis”—has in that canon, especially with the compressed form it takes in most fonts.
Comment · 11 months ago
Only if they are able to block the siteverify check performed by our backend server. That's not the kind of attack we are trying to mitigate with Turnstile.
Comment · 11 months ago
I integrated Turnstile with a fail-open strategy that proved itself today. Basically, if the Turnstile JS fails to load in the browser (or in a few specific frontend error conditions), we allow the user to submit the web form with a dummy challenge token. On the backend, we process the dummy token like normal, and if there is an error or timeout checking Turnstile's siteverify endpoint, we fail open.
Of course, some users were still blocked, because the Turnstile JS failed to load in their browser but the subsequent siteverify check succeeded on the backend. But overall the fail-open implementation lessened impact to our customers nonetheless.
Fail-open with Turnstile works for us because we have other bot mitigations that are sufficient to fall back on in the event of a Cloudflare outage.
Comment · 1 year ago
Gandi was sold to a private equity firm in a leveraged buyout in 2019 [0,1]. Nothing good has happened with Gandi since.
[0] https://www.crunchbase.com/acquisition/montefiore-investment...
[1] https://news.gandi.net/en/2019/02/futureofgandi-the-adventur...
Comment · 1 year ago
ISPs aren't helping either. Ziply Fiber only provides IPv6 with their 10 Gig and up plans, starting at $300/month.
Comment · 1 year ago
Neutraface has some similarities, including the low crossbar height. Fittingly, it appears to be used in materials published by the Frank Lloyd Wright Foundation.
Comment · 1 year ago
The lettering on the proposal is very interesting. I assume it was hand drawn. I can't find any typeface quite like it. Google Lens suggested it is similar to Copperplate Gothic, which it is and at once is not even close.
Comment · 2 years ago
This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it:
https://www.cloudsek.com/blog/compromising-google-accounts-m...
Comment · 3 years ago
> it would be highly likely that multiple systems around the world would generate the same number.
"Highly likely"? No. You are ignoring probability. See UUIDv4, which does not use time or NIC/MAC but does use 122 random bits.
Comment · 3 years ago
Shazam-like fingerprinting for text. The complete LLM outputs wouldn't need to be stored, just the fingerprints along with some mechanism for trusted timestamping (could be Blockchain).
Comment · 3 years ago
> I let it expire for a few days, now they are charging me $100/year!
It sounds like your domain name entered the redemption period. The high fee to restore a domain in the redemption period is mandated by the registry, not the registrar. So Gandi is not price gouging; they are required to collect that fee for restoring the domain.
Comment · 3 years ago
Speaking of billing, are there any good resources or examples for an engineer who gets thrown into this domain?
Comment · 4 years ago
Those are good words to use. That's how people should think of these redirects and use them, as long as you are careful to use explicit cache directives.