slownews45

Sure. Cloudflare can give away free services as a marketing effort. AWS gives away 1TB/month of cloudfront bandwidth, 1 million lambda calls per month, 1 million SNS notification per month, 25GB of DynamoDB capacity, 1 million Simple Queue queries per month and plenty more. So does google.

But what, again, is the pricing of cloudflare's "competitive CDN offering"? That seriously all I am asking for.

If you are going to go on about pricing (cloudflare does) have the courtesy to list yours publicly and don't have gag orders in your agreements.

The context of all of this is Amazon supposedly obfuscating their pricing to waste budgets. With cloudflare, you can't even FIND their pricing and will need to talk with a salesperson.

Anyways, for those stumbling around with this, minimum I've heard cloudflare doing is $24K per year on their paid stuff, and then they added Argo at around 10 cents per GB in the pay as you go offerings. Cloudfront is 2 to 9 cents per GB, google 2 to 10, fastly is around 8 to 12 cents, keycdn 4 cents etc. Not claiming AWS or Google are the cheapest, but pricing is pretty darn upfront.

Also have heard of folks getting busted by cloudflare if too many folks in asia/non-USA use the service, this seems far fetched, but AWS does charge differently by geo area so not sure if cloudflare has some rules like that tucked away.

Yeah, it'll be interesting especially positioned against facebook's META / Oculus products.

On HN folks trash apple (closed systems, supposedly phones don't hold value etc). Reality for most folks outside of HN, Apple is just far far more trusted. Facebook has a ton more users, but I'm not sure about trust levels (though we will see if that matters, for facebook so far they have done fine).

Umm, this is what is such a gimmick about these "free" services.

I run a video website on AWS, no one cares what I am doing, they charge me and done. I distribute software updates, no one complains, they charge me and done.

I run a video website on cloudflare, they say, oh, you are not running a website, you are distributing content, that's against the rules. Similarly if I host my software, my software updates, my management layer with firmware update service etc. Heads ups, when I visit these sites, for most normal people I am visiting a website.

Do folks not realize when they keep on repeating that egress is "free" on cloudflare that is a total lie? Hello, it's not free. You will get a call and they will squeeze you.

The streaming product is useful finally because we have at least a rough idea of price. Youtube avg video is 700MB/hr or so (mobile video is huge these days). That get's us to about 9 cents per GB.

Interestingly, this was I think the egress pricing they had for workers back when they were public about it.

AWS is 5 to 9 cents as well depending on usage so same range.

AWS Cloudfront is 2 cents to 9 cents depending on usage.

OK, so we are within the normal range of things now with egress pricing.

In my own experience with this type of player, you still get the call if you optimize for their pricing (ie, you run your 4K content through them, and your other content via another platform) because despite their claims bandwidth is "free" they are actually losing money on it, and if you use enough of this "free" stuff their marketing budget can't handle it and they just shut you down.

It's just not worth dealing with.

You'll know Cloudflare has a competitive CDN offering when they are willing to give you the pricing publicly of providing a CDN service that can handle any type of content. That is the proof point.

Cloudflare does have Argo which I think runs in that 5 to 9 cent range again per GB.

Back to the claim that AWS has hidden pricing (especially relative to cloudflare). I still find that ridiculous. Cloudlfare seems to be a heavily marketing based org with very hidden pricing (everything is call for a quote). Does anyone know what % of expense cloudflare has in marketing / selling? I'd imagine pretty damn high.

The reason people need / use high egress (ie, far above the 1TB etc AWS gives per month) is for things like video sites, software updates / distribution etc.

I've been burned (too many times) by these "free" claims.

Will you absolutely guarantee (and pay me if needed) that I can host a large video website on cloudflare with no egress? This will be in PB not TB.

What I have found is that these sites with "free" are inevitably scams, that the types of loads that actually need high traffic egress result in that middle of the night email to squeeze you into some high cost plan (which does in fact have an egress price).

That said, if you will cover overage charges - I'll spin up a website on cloudflare. Do you understand bandwidth needs of video hosting sites? I'm sure porn sites are in 10-15PB per day range (ie, > 300PB/month).

Digital Ocean is really serving a different market. The folks recommending them tend to be running smaller workloads (so DO can have relative lower perf per vCPU etc).

The best I've found - run the workload you actually plan on running. Even on AWS etc, the perf differences are getting pretty meaningful between instance families even at similar price points.

Most of these third parties are using official API's to get pricing data, if there is something with a hidden price do ask and someone can probably help you figure it out. One reason AWS got popular is that it actually was historically much HARDER to get pricing from your internal IT team / vendors like IBM etc. So AWS wasn't the cheapest (by any means) but was pretty clear on cost. So it's interesting to hear that AWS is purposely hiding pricing and making price complicated to "waste company's budgets".

"mostly to make it easy for developers to waste the company's budget."

Is this the case? I can't even find cloudflare's egress pricing online AT ALL. With AWS I can find pricing for anything I want.

Is there a specific instance price that you are trying to find and can't, you may be able to post here and someone can help you. The prices are on the AWS site, and also exposed via API's so there are a ton of third party services for them as well.

I wasn't aware that AWS had set up pricing "mostly to make it easy for developers to waste the company's budget". If you need help saving money AWS offers some services for this directly and again third parties can help you if you are struggling.

FTC has been a bit schizo.

Some of their tech industry cases and gas cases seem comically bad. The administration works flat out to stop domestic fossil fuel production (fair enough). Gas prices rise (good for environment as it may depress usage) - then they announce a big investigation into the price of gas?

This is the FTC announcing this gas investigation, not some politicians making noise.

In CA at least, price of gas is heavily influenced by govt rules which includes taxes (state and local), state level blending requirements (14 different blend requirements), federal blending rules (ethanol) etc.

Annoyingly, they don't link to actual complaint in these puff press releases, but the bones of a case like this seem so much stronger than some of the recent crap.

Exactly - and they are talking / working with at least some boring accountants in all of this who don't care if things are curated by Jay-Z in their point of sale and merchant clearing systems.

What I'm not understanding is that by most commercial radio standards, these guard bands are huge. 400Mhz? 20Mhz?

Can they not just do a test with 50 planes and get some hard data?

DDG is a gimmick.

They claim to be running their own search engine, never checked out for me.

More covered here:

https://news.ycombinator.com/item?id=4817576

Anyone seeing them crawling your site?

Is bing the best alternative? I've seen some pretty compelling evidence DDG copies / uses / has a deal with bing.

Good lord.

Pity the poor person out there trying to understand what is going on / what is block.xyz.

At least we are told nothing will change with TBD54566975 (?).

https://twitter.com/tbd54566975?lang=en

The bitcoin world is crazy.

Google search is going downhill in my experience.

My question: What is the alternative?

Concurrency issues / bad program flow feel a bit different don't they? I mean, I can store the action to take on a record in a string in any language, then if I'm not paying attention on concurrency someone else can switch to a different action and then when that record is processed I end up deleting instead of editing etc.

I mention this because in SQL folks not being careful end up in all sorts of messed up situations with high concurrency situations.

The trick is not that the language support a safe approach (C++ has smart pointers / "safe" code in various libraries) in my view but simply that you CAN'T cause a problem even being an idiot.

This is where the GC languages did OK.

That's what I'm trying to understand.

Let's ignore idiomatic code, people do crazy stuff all the time.

What's the go example that gets you from for example an overflow to exploit? That's what I'm trying to follow (not being an expert).

Go has an unsafe package.

Is there an example of even "bad" go code that gets you from a overflow to an exploit? I'm curious, folks (usually rust folks) do keep making this claim, is there a quick example?

I thought it was pretty clear the pilot had some pretty major issues.

- Flight simulator data from his home computer matched pretty closely the doomed plane took when it went off course (covered up by ATSB of course).

https://nymag.com/intelligencer/2016/07/mh370-pilot-flew-sui...

- His wife and kids had just moved out, marriage was in trouble?

- Some kind of call just before flight from a number purchased with fake ID docs?

What's the exploit path assuming no use of unsafe?

I can see situations where I could probably get go to crash, but not sure how I get go to act badly.

Note: Not a go / Haskell / C# expert so understanding is light here.

What's somewhat interesting is memory safety is not a totally new concept.

I wonder if memory safety had mattered more, whether other languages might have caught on a bit more, developed more etc. Rust is the new kid, but memory safety in a language is not a totally new concept.

The iphone has gone down the memory unsafe path including for high sensitivity services like messaging (2007+). They have enough $ to re-write some of that if they had cared to, but they haven't.

Weren't older language like Ada or Erlang memory safe way back?

Wow.

We continue to be reminded that it's hard to write fully memory secure code in a language that is not memory secure?

And by hard, I mean, very hard even for folks with lots of money and time and care (which is rare).

My impression is that Apple's imessage and other stacks also have memory unsafe languages in the api/attack surface, and this has led to remote one click / no click type exploits.

Is there a point at which someone says, hey, if it's very security sensitive write it in a language with a GC (golang?) or something crazy like rust? Or are C/C++ benefits just too high to ever give up?

And similarly, that simplicity is a benefit (ie, BoringSSL etc has some value).

False.

T-Mobile for example had a major device theft issue with their mailed in device place for the upgrade program they used to run. No surprise, the process was to unlock phone, turn of find my iphone and send in the phone WITHOUT TRACKING to this random low bidder.

This was early in program, you couldn't turn device in at store (I tried). So I filmed myself mailing the device, because without a tracking number on the pre-printed label and an unlocked phone - 100% for sure these were getting jacked along the way.

If you use a brain dead process like this, you have to be bulletproof every step (mail pickup, sort, deliver, warehouse workers handing $1K+ devices etc).

Of course, the phone was reported as never having been received. Tired of the runaround and with the video I had I simply said, fair enough, I will persue this legally and part of that is going to be asking how many complaints you've received like mine (phone reported not turned in). Bamm, 2 days later I had my money.

Thankfully they then let you turn in at a store and I think started sticking at least tracking numbers on things so they'd have SOME sense of what was supposed to be coming in.

The initial pitch pre Ajit's decision was a private auction by the CBA. Ie, the corps behind these sats would themselves auction and keep the $81B.

Supposedly this would be "better" for the taxpayer, but I always thought that was bogus. In the US the taxpayer has rights already to this spectrum, we don't have to buy it back from these folks.

Anyways, thankfully that all fell apart, public auction generated $81B (a staggering sum showing the potential value of this spectrum for this use). Folks clearing spectrum still getting a massive windfall.

Technically, a 400Mhz guard band is ridiculous. That's guard in initial roll-out. If planes have issues with stuff 400Mhz away that is ridiculous.

Also ridiculous would be that they can't figure out their height using other means. Airports should report baro pressure for standard baro altimeters. They should look into GPS and RNAV style navigation used internationally - all this is common overseas. Idea that planes can't figure out there height seems bogus.

My understanding is even later in roll-out there will be 20Mhz guard band around the airplane frequencies - do these airplane systems have no clue about filtering? This is plenty in most applications.

This smells political or interagency related. This auction and use has been years and years in the making, and last minute we get this stuff.

I'm interested in this as well.

c6gd.16xlarge instance for example.

Even going through the order flow - nothing actually shows up for pricing which is a bit unusual for an AWS service. Must be somewhat manual on the backend still?

Not exactly the same, but the anywhere stuff (ECS etc) - I've found it pretty enjoyable to use. You basically can throw some beefy local servers into the pools and away you go with your standard jobs. When you need to maintain things locally, you can (usually) migrate loads pretty directly to an AWS region.

Pricing locally is really good in many cases vs AWS and the ECS Anywhere fees themselves for example are pretty modest. $8/month range per machine (which can of course host a fair bit).

OK, that makes sense. That exit was not huge, would be interesting to compare price they wanted from AWS vs market price they got. AWS may have missed out if they were willing to go with AWS for less than they got.

I'm not THAT blown away by AWS offerings, they feel like copies of a couple of players offerings and at least when I last looked not THAT polished up. That said, plenty of folks will use AWS because they are already there. But it does feel like space for other still here maybe.

A bit of background. Biden moved Robb (former GC) out, is going for the more explicit pro-union approach in NLRB.

Obama did same thing in being explicitly pro-union.

Basically the GC's then took pretty aggressive positions

" Solomon pushed a case against Boeing in 2011 for trying to open a factory in right-to-work South Carolina. He argued this was retaliation against unionized workers in Washington state even though none had been laid off. He demanded Boeing abandon a $2 billion investment and move all production to Washington state."

Here's the letter from the Former GC - who was forcefully removed - so the agency is a bit less independent from the administration than one would think from the act itself.

https://urldefense.proofpoint.com/v2/url?u=https-3A__aboutbl...

What is interesting is that even Trump allowed the (dem) GC to serve out their term, so this Biden approach is a bit new.

I mention just because a lot of posts are mention the NLRB is a "neutral" govt agency. Biden has promised that it will be the most "pro-union" ever, and has taken steps to make that happen.

Interesting, didn't Soracom end up going to KDDI in 2017? Is KDDI even getting rid of them / are they even for sale now or was this an old deal?

$187M for an exit is not that large. Were they offering a price in that range to AWS?

It feels a bit like some of the AWS IoT offerings are throw stuff at wall style.

Fascinating. You'd think you'd have to be in some kind of security type role to be able to do this if they had access / control over an extension on google employee computers.

Kind of funny seeing maybe some google naivete and the "do no evil" thing come back to bite google.

When I was in high school I had a fair bit of fun going outside the permitted guidelines. By college I'd developed a reasonable sense of boundaries with other folks equipment / jobs with a trust element.

If I pushed a pop-up notice out company wide with a message my employer didn't approve of, I'd definitely be expecting to be going out the door rather than doing the litigation process.

Having worked a bit in govt interesting to see the NLRB pursue this, in govt my experience was a REDICULOUSLY dim view would be taken of something like this.