jakejarvis's comments

jakejarvis | 5 years ago | on: How HN crushed David Walsh's blog

Since the post mentions already relying on Cloudflare for help with traffic, I enabled Cloudflare's new Automatic Platform Optimization [0] on a client's website as a test last week. Thought it would be another overhyped WP caching solution but it truly feels magical. I believe it's powered by CF Workers and stores the pure HTML in KV on the backend, but all of that is handled for you and automagically updated/purged by the plugin on any site change.

Highly recommend trying it. I'm seeing the vast majority of visits now are not hitting the origin server at all — for assets or the page itself. At least it's a good stopgap until we can convince everyone to move 100% static...one can dream, right?

[0] https://blog.cloudflare.com/automatic-platform-optimizations...

jakejarvis | 5 years ago | on: HomePod Mini

Binged Schitt’s Creek over the last few weeks and David shouting “Alexis!” triggered all of my Sonos speakers. Every. Single. Time.

jakejarvis | 5 years ago | on: Spamtoberfest

> it's enough to file a Pull Request, not needing for it to be accepted

This part never made any sense to me. Such an easy fix to make.

jakejarvis | 5 years ago | on: UHS hospitals hit by reported country-wide Ryuk ransomware attack

Much of the article pulls from interesting/terrifying first-hand reports on Reddit, which are still pouring in:

> We are down in Florida. It’s a hot mess in the ER today. EMS diversion on cardiac patients because the cath lab is down.

> I work at an inpatient psych site in Philly PA. The nurses told me they asked the patients what they take for morning meds and then didn’t even distribute evening meds bc they have no record of their medications.

> We have no access to anything computer based including old labs, ekg's, or radiology studies. We have no access to our PACS radiology system. No patients died tonight in our ED but I can surely see how this could happen in large centers due to delay in patient care.

https://www.reddit.com/r/hacking/comments/j17aj1/cyberattack...

jakejarvis | 6 years ago | on: GitHub Is Down

Or Gitea, if you want to use a fraction of the resources! I use it solely as a GitHub backup — you can mirror Git repositories from anywhere and it pulls changes on a schedule. Literally set it up this week, thank goodness.

https://gitea.io/en-us/

jakejarvis | 6 years ago | on: GitHub Is Down

Even our static assets from raw.githubusercontent.com are throwing 500s. Whatever it is, it sounds like a pretty widespread failure...

jakejarvis | 6 years ago | on: Wunderlist Is Shutting Down

What a shame. But I really appreciated (and was shocked by) how long they kept it maintained after acquisition, and I’m finding Microsoft To-Do a comfortable equivalent so far.

jakejarvis | 6 years ago | on: Upcoming changes to our CDN for GitLab.com

via https://gitlab.com/gitlab-com/gl-infra/readiness/tree/master...:

> 1. Once traffic is ensured to flow though Cloudflare, we initiate decommission of Route53.

> We would disable the transfer lock and generate an auth code.

> immediately after, we move the domain over to the Cloudflare registry

I love the overall plan but this part would worry me... The most obvious contingency plan when you're putting so many eggs into one basket is to keep a kill-switch somewhere like your domain registrar, where you can abandon ship entirely by switching nameservers in the worst of scenarios, right?

Correct me if I'm wrong but when the Cloudflare dashboard went down a few weeks (months?) ago, no sort of DNS-level changes would have been possible. (Either way, I don't think you can even set external nameservers for domains on Cloudflare Registrar yet?)

Just curious about the thinking behind this particular move and why the pros outweigh the cons of leaving the domain where it is.

jakejarvis | 6 years ago | on: Apple's New Privacy Page

Don't get me wrong, I'm impressed with the progress Apple has made in spearheading consumer privacy practices — but unfortunately, half of the benefits listed here are negated by the fact that my iCloud backups are fully unencrypted (or "encrypted" with a common key that Apple holds; same thing in my view).

So, if I want convenient nightly backups (without plugging my phone in and using the "new" Catalina apps, which I'm still convinced are just new iTunes skins), Apple — and adversaries — will still have unfettered access to all my iMessages, Maps history, photos, health records, almost everything listed here and more [0][1].

Tim Cook has claimed a fix is coming for a while now [2], but meanwhile using iCloud for its intended purpose is a huge, and largely unadvertised, gaping hole in Apple's otherwise impressive privacy promises. :(

[0] https://www.theverge.com/2016/3/2/11144588/walt-mossberg-app...

[1] https://www.cellebrite.com/en/productupdates/move-your-inves...

[2] https://www.macrumors.com/2019/02/28/eff-user-encrypted-iclo...

page 1