Hacker News: lxxvii

New comment by lxxvii in "Security advisory: Critical remote code execution vulnerabilities, update now"

lxxvii — Wed, 21 Oct 2026 08:23:07 +0000

Note that Cloudflare rules are case-sensitive. I'm not sure whether PHP's parsing of "multipart" is or not, but you might consider:

  any(lower(http.request.headers["content-type"][*])[*] contains "multipart")

Also, unless your server is specifically set up to only accept requests from Cloudflare, someone could likely send a request directly to your IP, so you might consider blocking multipart requests at the server level. For Nginx I added the following to all /server blocks:

  if ($http_content_type ~* "multipart") { return 403; }

Luckily our service doesn't use multipart for any critical requests.

New comment by lxxvii in "Making money building Shopify micro-SaaS apps"

lxxvii — Mon, 24 Aug 2020 20:01:39 +0000

> The best data have found indicates about $50M a year total to App developers

The Shopify Developers homepage https://developers.shopify.com/ (scroll down one screen) claims $90M in 2018, unless you have some reason to doubt their claim?

New comment by lxxvii in "Ask HN: Is UK government insane or genius?"

lxxvii — Sun, 15 Mar 2020 05:09:52 +0000

> Among people under 50, the best data we have is that the fraction needing ICU care is something like 0.2%

Any chance you remember where you found this statistic? I have been looking for any details on hospitalization rates by age range, but haven't had luck so far.

New comment by lxxvii in "Cloud Run – Newest member of our serverless compute stack"

lxxvii — Tue, 09 Apr 2019 18:03:53 +0000

Just tried creating a service with the sample image and love the quick deployment time compared to AppEngine Flex.

I noticed that the console shows a traffic percentage for each revision, but no apparent way to change it. Any plans to support traffic splitting, or at least a one-click way to re-activate (or re-deploy) an older revision?

New comment by lxxvii in "Launch HN: Shogun (YC W18) – Storefront Builder for ECommerce Sites"

lxxvii — Tue, 06 Mar 2018 19:42:45 +0000

Looks useful!

I noticed you have quite a few reviews in the Shopify app store - is there any particular strategy you use there? Do you encourage reviews in-app or with email?