if you imagine my packet stream as a sinusoidal wave (which is a pretty accurate depiction of how it should look), I have 2 - 3 second valleys where zero packets get through in either direction, and these valleys occur about 9 times per minute
gonna try to eliminate the potential of it being wifi by doing USB tethering
it's 802.11ac (both the client and the phone) on 5 GHz, so I have a hard time believing that the problem is wifi, especially since 5 GHz is extremely un-crowded in my area
Incidentally, I've had similar latency spikes (~2 seconds with nothing going through) on WiFi here. I think switching from a Ralink to Intel chip fixed that.
DotA is basically Dawngate with fewer interesting things to do. DotA / DotA 2 is a first-generation MOBA. first-gen MOBAs are inherently more limited and less interesting and varied than second-gen MOBAs.
DotA / DotA 2 is the past; Dawngate is the future.
playing DotA 2 today is like playing... I dunno.. Everquest. or Everquest 2. instead of one of the modern MMOs
> One thing the TPM can do by the way it works is to make it so that only a specific signed bootloader or OS can boot from the hardware. IIRC, that's not a function of a TPM. That's a function of UEFI firmware, "Secure Boot". — Bob10 secs ago
I still don't like rolling a 2-million-sided dice, but I realize I do it every day when I drive
(I figure that driving is about as safe as flying for me, as long as I'm not fatigued, considering I have a very safe car and reactions like a fighter pilot)
40k miles on my new car, not to count the miles on my old car, 99% of them driven by me, and I've been in like 30 situations where if I didn't react someone would have hit me... merging into my lane without seeing me, etc
what really conquered my fear of flying, I think, is watching Air Crash Investigations and learning about how planes work
instead of it being an unknown, it became a known quantity
it's therapeutic to play KSP and X-Plane... even when I play KSP, I obsess over aircraft, and I don't care much about rockets, because I always want to see how the aircraft react in various situations
it was very scary flying from home out to our vacation spot this year, but when I returned from the vacation to home, it wasn't NEARLY as stressful
my stress level went from near-panic to just slightly unnerved
funny thing is, I thought originally that the noises the plane makes would freak me out and make me want to ask to get off, but when I heard the hydraulics moving the flaps and such, I actually knew in my mind from my experience with KSP and ACI that those were flaps and I knew what they did, etc
it gave me a degree of control or at least awareness about what was happening, when I could sit there and say, hey, that's no mystery! those turbofans are giving the plane thrust to increase lift on the airfoils. those flaps are helping it take off. etc
now I'm in love with planes and would fly more if I could afford it, but it's hugely expensive
maybe in the next two years I hope to fly on a 787 Dreamliner
I want to say I've left my little corner of the world
wings seemed to flap, duct tape on the wings (seriously) and the aircon broke down midflight. Also, there seemed to be an airborne retirement village as the flight staff.
@Bob One of the "experts" of the ATSB in this video said that the turbine disc flew apart with "infinite energy" -- if that were the case, we could blow apart turbine discs in power plants and stop mining coal and uranium :)
@Bob well it's a physically incorrect assertion, because a baryon with infinite energy would be traveling at the speed of light... but, I guess from an engineering perspective you can put air quotes around "infinite" to mean "humans have never designed a material that could withstand that amount of energy"
until it travels far enough for air resistance to bring it down to a reasonable amount of kinetic energy, of course...
Oh, found the link. Warning: uh... rather NSFW, and it's almost guaranteed to mess up your search results: http://www.amazon.com/Natural-Harvest-collection-semen-based-recipes/dp/1481227041
Amusingly, my amazon recommendations are local stuff in LA (????), computer hardware, and crappy romance novels (which my mom gets me to order for her)
Natural Harvest is one of those links that gets passed around the internet from one link aggregator to the next and every month the circle repeats itself
...I should buy a couple of copies for birthday gifts
@Mokubai that's more correct than you know... @CanadianLuke revealed to me the other day that his first name really is Canadian, so his last name, being Luke, is the same as CajunLuke's! they're from the famous Luke clan of... er... somewhere probably in western Europe or North America. :S
@Hennes, the insufficient data meme is now part of my slides, thanks. It is indeed stepping on my nerves and I hope it will do so for my students and teach them a lesson
I need to run a Tcl/Tk graphical program.... which would run fine on Windows, but it has weird dependencies (among them, gcc), and I don't want to install cygwin... bah
> Spin is an on-the-fly LTL model checking system for proving properties of asynchronous software systems, and iSpin is a Graphical User Interface for Spin written in Tcl/Tk.
$WORKWORK[0] is web app testing, $WORKWORK[1] is technical writing, $WORKWORK[2] is dev, $WORKWORK[3] is security testing, $WORKWORK[4] is admin, and $WORKWORK[5] is desktop support :D
Would it be okay for me to block the entire Chinese IP range 36.248.0.0/13, or do I risk blocking legitimate users? All of the accesses I've seen within this range are automated spamming attempts, mostly with IPs in the ranges 36.248.160.0/19 and 36.250.160.0/19.
@DragonLord of course you risk blocking legitimate users, any time you block any IP... even a single IP block could be blocking a NAT of large number of users, or maybe the IP changes hands from an attacker to a well-intentioned user who wants to learn from your site
IPs aren't bound to people, not at any point in time
you have to weigh the risk of your site being attacked versus how willing you are to have users who legitimately want to visit your site without being malicious, get accidentally blocked
however, if they are trying to perform a DDoS, and you force them to proxy/VPN/tunnel elsewhere to set up their attack, the throughput will be significantly reduced, as they'll likely be bandwidth limited by whatever levels of indirection they use
assuming that their "real" IPs are the ones they started out with
in my opinion, it doesn't (shouldn't) really matter just how slow the final backend httpd and its hypertext processor are... I mean, they can be really, really slow, but as long as the predominant use of your site is read-only, caching reverse proxies can eliminate the vast majority of your CPU/disk load by rarely ever touching the slow backend.
if you get 1000 comments on every post and SU-like voting, that's a lot of writes; but if the primary use case is visit webpage and read it, that's perfect for a caching reverse proxy
Squid is known to be pretty efficient at that, too
(in case nginx isn't to your taste)
Wikipedia ran with Squid as their front-line httpds for years
typically in configurations like this, the user-facing daemon -- in your specific case, Varnish -- would be configured with your SSL certs, and then your origin server (Apache) would listen on localhost only, and on a port such as 8085 or something, and not use HTTPS. but the connection would still be end to end encrypted across the public Internet.
I'm sure anyone could simply fork Varnish with HTTPS support and they'd do a fine job, but the real Varnish is the Varnish maintained by its original author (as long as he is committed to the project), so it's hard to recommend a hostile fork unless it gains tons of traction and acceptance
@DragonLord it's really a lot simpler than you think it is
the config file example Bob posted above is literally all you'd have to do, aside from modifying like 3 lines of your Apache config to disable SSL in Apache and listen only on localhost
@Bob do you know of any caches with some kind of backchannel from the origin server to the proxy frontend telling it "uhh, I think now would be a good time to update your cache; I just made a new blog post" or something like that?
he could set his automatic cache purge time to like 6 months and then just have Apache ping nginx whenever something actually changes
