maxgashkov

It's a typical setup, PayPal even have the automated daily bank withdrawal for merchants. What you probably fail to mention or notice that the company transferred the money once they clear the mandatory hold window.

Exact width of the window may be adjusted case by case and depends on the stuff you sell — e.g. if it's digital goods with immediate delivery it may be shorter, if it's physical goods it may be certain amount of days after delivery verified by tracking number. In my case I was working for a company that provided proxy auction participation support, PayPal forced 30d non-negotiable hold on all our transactions.

So, you may transfer it every night, but it's safe to assume that 25-100% of your monthly revenue going through PayPal is sitting there at all times.

Nausea issue is not solvable by any standalone device. We'll either have direct brain jack-in that can override full range of sensory input (so there will be no dissonance between your sense of balance and vision) or we're stuck with mostly static experiences (teleporting point-to-point instead of moving etc.) which are not immersive.

Not seeing the first one delivered within 5 years for sure and probably not within 50.

If your need is video conferencing, relatively recent ‘insta360 link’ is _very_ good. I’ve ditched my mirrorless+HDMI setup in favor of it and haven’t seen any drop in quality.

Companion app is pretty shit though, but they seem to be working on it.

> why the fake number

Backwards compatibility probably? I think having a phone number present is built so deep in the architecture that it’s easier to add a fake number than change it overnight and wait for universal adoption of new client versions.

Any exchange -> XMR -> ETH -> TON, the XMR step should provides sufficient anonymity.

My gripe is that how awkward the whole process is, especially the fact that you're locked into using Metamask to be able to transfer TON into their network via bridge.

I wonder if relatively small number of people who are able (and willing to) jump through all these hoops will stand out like a sore thumb and this in turn would actually reduce anonymity.

That's survivor's bias. You've interacted with people who wanted to interact with you and thus seemed (and probably were) friendly.

I wouldn’t have gone on the hiking trip if I had to lug fullsize camera with me ;)

I live in Japan, ticket scalping is almost non-existent here due to the local regulations and all major second-hand sales sites prohibiting resell for profit.

What we have now is lotteries, lotteries everywhere.

You need be sure to track the upcoming concerts, through all the bullshit ways the band may promote them — via twitter, facebook, their fanclub subscription (each email from it may get to spam) or whatever.

If you've missed the lottery submission period, you're screwed. If you've lost the lottery, you're screwed.

I do understand that scalpers don't create value, but I'd rather have the bands set market-based prices that avoided the necessity for lotteries.

> I am no incentivized to sell at the scalper price permanently removing the ability for my less wealthy fans to attend my show.

The only 'fair' alternative to this (even in hypothetical scenario when there are no scalpers, e.g. like it currently is in Japan) are lotteries.

I do hate the lotteries for ticket sales a lot, but I'm obviously biased (while I'm not wealthy by any meaningful standard, I'd be able to pay ~5x of the usual ticket here w/o breaking too much sweat).

Still no word on durability guarantees even for GA?

'Opt out' is not as easy as you make it sound, this is based on a particular military commissioner discretion and they are heavily incentivized not to allow it. There is an option to sue, if you have proper connections, enough money etc. etc.

There are HDMI to USB cards that emulate a USB HID camera which is immediately available in zoom w/o need for OBS, the only thing I do is turn on the camera itself which takes maybe 2-3 seconds and is non-blocking for the call (until it's ready it's just a black screen in zoom if the meeting was already started).

It doesn't really matter how many Mir cards are—they're just a home-grown Russian brand of a card.

The real issue is that all transactions inside Russia using Visa, MC or Mir are processed inside Russia by the same entity that runs Mir brand, and therefore won't stop working.

A little background on why the cards won't stop working in Russia.

After first sanctions due to Crimean & Donbass conflict started rolling out in 2014, Russian gvt saw the writing on the wall and gradually strong-armed Visa & MC to move all the local transaction processing to НСПК (National System for Payment Cards).

Here's some more info on this (you can use Google Translate):

https://ru.wikipedia.org/wiki/%D0%9D%D0%B0%D1%86%D0%B8%D0%BE...

It's funny they chose a plumber as a venue to venture to. IMO it's the closest to software engineering in terms of need to use hacky workarounds for the projects that were broken beyond repair by neglect or previous contractors (especially so in countries with less strict or non-existent building codes).

Bounty scale surprises me a lot.

I always thought that the main incentive of any bug bounty program is to make it more attractive for any severe 0-day to not get onto black market and instead be compensated fairly by the company.

Isn't $3,000 per Critical just a tiny bit too low for a service that proxies half the Internet?

My printer makes unexpected noise once every 2 or 3 weeks -_-'

That's a huge problem for companies of almost any scale. Can you shed some light on tools used internally in Cloudflare for tracing?

I see comrades you have on your team have taught you well /jk

> I have no idea how DNS worked in the 90s though.

Not sure also, but in the 00s hosting/registrar control panels were notoriously bad at updating their server configs for some reason. It was not uncommon to wait ~30-60 minutes for the changes to be pushed to the authoritative servers and my guess is that for older IT folks that's where all 'propagation' expectations come from.

I'm looking at worst cases cause they're really likely to hit you not when you have enough time to tinker and solve it, but when you have other more important things to do.

I self-host a lot, including a smart home setup that is not reliant on the cloud, but in the end looking back how much time I've sunk into this and how often it's down due to _my_ mistakes I don't really think it was worth it.

And then you've lost all your data cause an SD card was not rated for extreme write endurance. You repeat all that using better SD card or just a cheap PC with an SSD. You add backups.

Then you realize you need to access this setup while away from your home. You add port forwarding.

You run an audit to check if the system is secure enough so script-kiddies with a port scanner are not able to access your 'cloud'.

Then you realize your router is not so reliable. You add a watchdog which will reboot it once the connection becomes unstable.

Then there is a power outage. And if before you could just access all data using 4G on your phone, now you cannot. You add UPS to all critical parts of your home network infrastructure.

...

And it goes on and on. It is doable, but doing it well requires a lot of time, planning and resources. It's hardly feasible not only for a lay person but for 'power users' as well.

I was responsible for a website (one of a many of this kind) that provided access to a niche auction platform. At some point in the beginning of 2010s it became a subject of a precisely coordinated series of timed attacks designed to disrupt bidding of one of our prominent clients in the specific auctions. It was enough to bring down the service for ~5 minutes to prevent the client from winning.

Eventually we migrated behind CF and the problem was solved but I couldn't help but wonder if there are some applications for which even a few seconds disruption (I assume that's the minimum time Cloudflare needs to begin effectively mitigate the attack of this scale) will be disastrous and what could possibly be done in this case?

Yeah, in my youth all my PCs were built by hand from the components (due to cost reasons more than anything else).

But now I feel that this is not such an easy task anymore as components have to be carefully selected to not introduce a bottleneck somewhere by accident and I feel I just don't have the time for this.

> However, that experience is nothing to the cost and pain if something with the hardware goes wrong.

I have never been able to understand that. I can appreciate conviction of not using any manufacturer's products as some kind of a political statement, but this?

How often does something with your hardware goes wrong? I assume it's single-ish number of events per year, but you choose to suffer every day for the experience you deem subpar in a windows device?

Some people have smart mirrors or any other kind of 'news display', so it may be useful for them to scrape the data they may think relevant (this may be weather data, stocks, or even the new Nintendo Switch availability at their nearby retailer).

iOS updates are not exactly fast either. I've never seen latest iPad or iPhone updating in less than ~10 minutes, even for minor changes with the ~200-300 Mb update size.

Nobody will store their data _now_.

If in 2-3-5 yrs it's proven to be both durable & highly available (I'm looking at your maintenance windows, B2) I don't see a lot of reasons not to move away from S3 as this should be plug & play at this point.

There will be edge cases for highly regulated businesses of course, but for an average startup why not?

Not only that, but in Russia you may be slapped with the fine for the 'propaganda of suicide' (I shit you not it's the real law) if you even discuss suicide on more or less popular platform.

It's one thing to expect companies to act on their own initiative, but to do nothing when the problem is proactively reported to them borders on negligence.