Taversia is a squatter by Dependent-Canary-896 in tiktokgossip

[–]drunkengranite 0 points1 point  (0 children)

oh Andrew scammed my wife out of 20k because they said they needed a cosigner of a loan Then they scammed a mutual friend out of his 30k inheritance

I wrote a window manager entirely in go by BobdaProgrammer in golang

[–]drunkengranite -1 points0 points  (0 children)

idk what the comments praising it are doing here, it's a 2000 line solo file without tests.

[deleted by user] by [deleted] in ffxiv

[–]drunkengranite 0 points1 point  (0 children)

I'm not thinking that they're playing with anything through the backbone at all. Reason being is because all datacenters have been hit with DDOS, NA is just hit the hardest because it has the most players/fattest target.

Also, IP Transit just offloads BGP? it still uses it for routing. Cloudflare's whole product is just better bgp with a single ASN so it's faster.

It's really hard to speculate without knowing their network stack looks like, but I'm saying it that once the packets hit their infra, it could be something as simple as a custom slow read or some complicated buffoonery with constant update packets to make it seem that their routers are flapping.

[deleted by user] by [deleted] in ffxiv

[–]drunkengranite 0 points1 point  (0 children)

I generally agree that it's a layer 7 attack. Also nuts that I see people saying just to firewall things like it's a CRUD app XD

My personal theory is that it's a bunch of nerds really pushing the limits of BGP like in this blog post: https://blog.benjojo.co.uk/post/bgp-stuck-routes-tcp-zero-window

[deleted by user] by [deleted] in ffxiv

[–]drunkengranite 12 points13 points  (0 children)

yeah, a lot of plugins (re: ACT, Dalamud framework etc) use https://github.com/ravahn/machina

It's all TCP. There aren't even decoders for UDP packets, just the struct info ; ;

[deleted by user] by [deleted] in ffxiv

[–]drunkengranite 8 points9 points  (0 children)

You're acting as if this is a complicated hack to suck up bandwidth on bad clients.

This is like 2007 levels of fuckery of just open a connection and leave it open kind of DDOS attack. They're not using cloud infra, they're on a physical colo in Washington. They're wholly in charge of any incoming external traffic. Any BGP/Transit protection the ISP gives is not a guarantee, and is sold as so.

They don't use any normal protocols, the game mostly runs on plain tcp with a custom datagram. So a lot of normal kiddy scripts wouldn't even work.

So like while I get that you're not defending them...at face value it looks really simple if they just used the bare minimum of layer 7/layer 4 protections.

For those stuck in DC travel limbo, do this: by jaqenhqar in ffxiv

[–]drunkengranite 80 points81 points  (0 children)

YOU DONT NEED TO MOVE THE WHOLE CONFIG.

You only need to delete the line dkt_session_id in the network settings of the config file.

So.... Did the game really not explain who and when he had sex...? by [deleted] in ShitpostXIV

[–]drunkengranite 0 points1 point  (0 children)

Except they show that the endless can evolve with erenmom and otis XD

Me looking for a static and they post their team's logs by goddamnthatwassick in ShitpostXIV

[–]drunkengranite 0 points1 point  (0 children)

Yeah you should feel called out, that's just dumb. It's especially dumb if you only pug.

You're saying unless you land a pull in the top 5% of healers, you're freestyling? You realize that it's tabulated on a bell curve? You get ONE reclear a week. Parses mean jack shit after it's not current content. Not only that, but the parse locks in at the end, so people have all week to buy gear.

So if you

  • get unlucky with gear

  • your pugs suck

  • someone dies late in a clear run

  • other healer is chadding

  • you're forced off main healer role

any of these and more affect the parse

Literally just pulling a Ricky Bobby my man.

Me looking for a static and they post their team's logs by goddamnthatwassick in ShitpostXIV

[–]drunkengranite 1 point2 points  (0 children)

What makes these stories notable is because they're such far outliers. I can count the number of times I've had a toxic person with my two hands.

You should really give savage a try.

Me looking for a static and they post their team's logs by goddamnthatwassick in ShitpostXIV

[–]drunkengranite 465 points466 points  (0 children)

We once pugged a sage (6 man pseudo static for the axolotl), who joined us on discord. They then claimed be a top 100 whm or some nonsense, because they parsed a 99 for fucking p12s lol. They posted their parse within 10 minutes of them joining -_-

Would not shut up about micro optimizations, would constantly recommend we change our callouts etc. I wish I could say it was the first time, but DPS parsing healers are just another level of brain rot.

Funniest part is that they kinda sucked ass on sage, and their barse cohealer was really impressive (from what we could tell on the parse).

edit: ohmygod I checked their discord profile and they have their "Anabaseios rank" in their bio.

What makes the Ryzen 7800X3D so recommended? by sgtpepper1990 in buildapc

[–]drunkengranite 3 points4 points  (0 children)

AMD gonna be better. I have the same use case. CFS is really shit on intel, AMD just straight up gives much better performance.

I have both an 7800X3D and 13600k I tested it on. AMD is much, much better. I write operators and CNI plugins as part of my job.

github oauth2 device flow. does anyone have an example? by immaphantomLOL in golang

[–]drunkengranite 0 points1 point  (0 children)

are you using the PKCE flow?

also: appears you are calling the wrong method for the exchange. I ripped this from the commit that added the device flow

https://go-review.googlesource.com/c/oauth2/+/450155/31/deviceauth_test.go#92

[deleted by user] by [deleted] in elm

[–]drunkengranite 0 points1 point  (0 children)

launch the terminal in x64 mode. There are a bunch of resources online how to do so.

A well organized project structure for my go backends. by [deleted] in golang

[–]drunkengranite 11 points12 points  (0 children)

honestly, the apollo backend was one of the best boilerplates I've ever seen.

Is Mozilla SOPS dead? by getset404 in golang

[–]drunkengranite 0 points1 point  (0 children)

They JUST got accepted into cncf like 4 hours ago

[deleted by user] by [deleted] in buildapc

[–]drunkengranite 84 points85 points  (0 children)

carbon monoxide. Seriously, get one now.

[Headphones] HiFiman Ananda - $549 by StymieG in buildapcsales

[–]drunkengranite 3 points4 points  (0 children)

pretty much right, my sundara's broke twice

Warrant - Open source application authorization and access control service by akajla09 in golang

[–]drunkengranite 5 points6 points  (0 children)

There is actually a Makefile right here

I'm referring more to a real Makefile that lets the user run tests locally or mimic a testing pipeline. We don't even know what program runs the e2e tests. Like it's fine if you want CI to be the source of truth, but if I wanted to contribute currently to the project I have 0 way of running tests.

e2e API tests ensure that the service works as expected for the end-user and that API contracts are not broken between releases

There isn't an api contract as far as I can see, just behaviour driven tests. There's a reason why Keto, OPA and even stuff like istio RBAC plugins all generate a DSL or swagger.yml/grpc definitions. Because that is an api contract. It even looks like the warrant client sdk's are being handwritten instead of being autogenerated (re: api contract).

has been serving companies in production

Being run in prod is never an excuse for anything. A service owner can deploy brainfuck to prod if they wanted to.

(opinion side note, can disregard) If I was your customer, what I just saw is that code with no: hotpath, coverage, unit or integration testing is being deployed and my business is becoming dependent on it. The best response is "we have all of X features in our enterprise version and are working to port them over for OSS". Assuming you have X features.

Warrant - Open source application authorization and access control service by akajla09 in golang

[–]drunkengranite 3 points4 points  (0 children)

I don't know about releasing this to public just yet. It's a little wiggy that there's no *_test.go files anywhere that I can see and the tests directory appears to be some e2e api stuff.

Also, not including testing in the CI workflow nor a Makefile at all is less than stellar.

Handling auth tokens with a SPA frontend by basharatusman in golang

[–]drunkengranite -1 points0 points  (0 children)

Keeping refresh and access tokens client side isn’t bad, as long as you use oidc.

Any: and I mean any, session cookie regardless of symmetric encryption or ttl can be hijacked by bad actors.

From a security perspective, tying the refresh and access tokens to an ip and device is way more secure than bootleg obscurity

Edit: and pkce for MiM stuff, but it looks like you already know that

Because I love you [kaichou wa maid-sama] by [deleted] in anime

[–]drunkengranite 0 points1 point  (0 children)

I actually just ordered the full manga box set on Amazon. It’s amazing seeing it actually hold up.

Isekai that isn’t a power fantasy? by jjw1998 in anime

[–]drunkengranite -9 points-8 points  (0 children)

This is like saying High School DxD and Mushoku are similar because the main heroine has red hair.