Hacker News: 0xbkt

New comment by 0xbkt in "Cloudflare Global Network experiencing issues"

0xbkt — Tue, 18 Nov 2025 14:08:04 +0000

It always is.

Brace Expansion in Bash

0xbkt — Wed, 07 Aug 2024 21:07:43 +0000

Article URL: https://www.gnu.org/software/bash/manual/html_node/Brace-Expansion.html

Comments URL: https://news.ycombinator.com/item?id=41185532

Points: 1

# Comments: 0

New comment by 0xbkt in "Ask HN: Startup Devs -What's your biggest pain while managing cloud deployments?"

0xbkt — Wed, 27 Mar 2024 12:38:25 +0000

> I can't deploy as often as I want because some Sidekiq jobs run for several days, and deploying code means disrupting those jobs

Sounds like a use case for Cadence/Temporal-style fault-oblivious stateful execution with workflows. At last job, we did Unreal Engine deployments with pixel streaming at scale on a huge fleet of GPU servers, and the way we could persist execution state so hassle-free that the code would magically resume at the line right where it got interrupted was so astounding.

Comparing TCP and QUIC (2022)

0xbkt — Fri, 02 Feb 2024 14:21:07 +0000

Article URL: https://blog.apnic.net/2022/11/03/comparing-tcp-and-quic/

Comments URL: https://news.ycombinator.com/item?id=39228762

Points: 3

# Comments: 0

Why is the CHF so strong?

0xbkt — Mon, 15 Jan 2024 00:58:35 +0000

Article URL: https://old.reddit.com/r/Switzerland/comments/18pxboh/why_is_the_chf_so_strong/

Comments URL: https://news.ycombinator.com/item?id=38996144

Points: 4

# Comments: 0

New comment by 0xbkt in "Good times create weak men (2019)"

0xbkt — Tue, 24 Oct 2023 12:37:53 +0000

This read, for some reason, reminded me of Farnam Street's “Why Life Can’t Be Simpler”[0].

[0] https://fs.blog/why-life-cant-be-simpler/

Ask HN: Where does authentication happen in BFF?

0xbkt — Wed, 10 May 2023 13:22:31 +0000

I am building an internal monolith exposing a bunch of gRPC services that I am planning to put to use as the core of my system (i.e. containing all business logic).

More, the client is interested in a having a Web application as the entry point to the system, but also showed interest in a JSON API in the future. So, I thought BFF could be the way with a server-rendered Web “frontend” (using cookies) and in a later time a JSON API frontend (using API tokens) where the client requires programmatic access.

The question: where do I do user authentication and authorization? The internal monolith is pretty much an unrestricted API at present as it is only supposed to be used internally. I want to have a clear separation of concerns so I have quite mixed feelings about putting the authn/authz logic in there. In frontend, OTOH, I would be duplicating a lot of code and it would potentially open it up to bugs given that I'd have to update both frontends in case I change the logic.

TLDR: Should it live in the frontend or backend?

Comments URL: https://news.ycombinator.com/item?id=35886966

Points: 1

# Comments: 0

New comment by 0xbkt in "Update: The Swedish authorities answered our protocol request"

0xbkt — Wed, 03 May 2023 00:53:27 +0000

> but has this been tried in court?

Yes, it seems: https://torrentfreak.com/ovpn-wins-court-battle-after-pirate...

New comment by 0xbkt in "Why is OAuth still hard in 2023?"

0xbkt — Thu, 27 Apr 2023 00:55:49 +0000

Tangentially related: what do you use today to make authn/z work for your web sites/applications where you only do first party login (i.e. you don't do social login etc.)? Create a `users` table in your database and implement the logic on your own? Or proxy to stuff like Ory Kratos and act as a translation layer through a network call?

New comment by 0xbkt in "Ask HN: How do I stop card testing attacks on my Stripe account?"

0xbkt — Mon, 24 Apr 2023 17:39:12 +0000

If possible, collect fingerprint information through a side channel such as WebRTC or WebTransport, and use the info to correlate payments. Or, if the attack is executed from a non-browser environment, you can pattern match the order of TLS cipher suite to that sent by the attacker and block them straight away.

New comment by 0xbkt in "OpenBSD: Viogpu(4), a VirtIO GPU driver, added to -current"

0xbkt — Fri, 21 Apr 2023 18:11:20 +0000

Does anybody know about the current status of SR-IOV for graphics cards? It is highlighted for NICs but I want to know if there is anything upcoming for GPUs too.

Type Punning

0xbkt — Fri, 21 Apr 2023 03:02:04 +0000

Article URL: https://en.wikipedia.org/wiki/Type_punning

Comments URL: https://news.ycombinator.com/item?id=35649342

Points: 1

# Comments: 0

New comment by 0xbkt in "static_assert is all you need (no leaks, no UB)"

0xbkt — Mon, 10 Apr 2023 14:05:15 +0000

What's going on in this code for someone completely alien to C++?

New comment by 0xbkt in "Announcing WCGI: WebAssembly and CGI"

0xbkt — Fri, 07 Apr 2023 01:57:25 +0000

I think the closest thing to "nanofunctions" today are V8 isolates.

New comment by 0xbkt in "Ask HN: Someone is proxy-mirroring my website, can I do anything?"

0xbkt — Mon, 12 Dec 2022 15:45:59 +0000

You can be able to identify those requests by inspecting the TLS cipher. Cloudflare Workers has that value in `request.cf.tlsCipher`[0]. Keep in mind the collateral damage it may have, though.

[0] https://developers.cloudflare.com/workers/runtime-apis/reque...

New comment by 0xbkt in "Tell HN: Cloudflare and Scaleway have a peering issue"

0xbkt — Tue, 06 Dec 2022 12:13:05 +0000

I had to resolve a similar connectivity issue for a client a couple months ago. The server was in Canada, but for some reason, Cloudflare's Asia-Pacific PoPs didn't want to reach this server and returned 525 SSL Handshake Failed error instead. So, I went ahead to install Cloudflare Tunnel, because I know that instead of waiting for Cloudflare to move through the Internet up to the last mile to the origin, I could establish long-lived connections to them over multiple PoPs so that the traffic from entry PoP(s) would stay in Cloudflare's network perimeter. This is assuming that your Tunnel connections are healthy no matter what. And the problem was gone.

The path basically transitioned from:

Entry PoP <----> Origin

to:

Entry PoP <----> Tunnel PoP <----> Origin