lyse @lyse.isobeef.org
 (6d ago)

(#adtubxa) Thank you, @movq@www.uninformativ.de! Luckily, I can disable it. I also tried it, no luck, though. But the problem is, I donā€™t really know how much snakeoil actually runs on my machine. There is definitely a ClownStrike infestation, I stopped the falcon sensor. But there might be even more, Iā€™ve no idea. From the vague answers I got last time, it feels like even the UHD/IT guys donā€™t know what is in use. O_o

Yeah, it is definitely something on my laptop that rejects connections to IPv4 ports 80 and 443. All other devices here can access the stuff without issue, only this work machine is unable to. The ā€œConnection refusedā€ happens within a few milliseconds.

Unfortunately, I do not have the slightest idea how it works. But maybe I can look into that tomorrow. Kernel modules are a very good hint, thank you! <3

Youā€™re right, it might be some sort of fail-safe mechanism. But then, why just block IPv4 and not also IPv6? But maybe because the VPN and company servers require IPv4, there is zero IPv6 support. (Yeah, donā€™t ask, I donā€™t understand it either.)

#yzc4yxa
movq @www.uninformativ.de
 (6d ago)

(#adtubxa) @lyse@lyse.isobeef.org Oh gawd. This is the point where computing stops being fun. šŸ˜‚

  • Can you disable the snakeoil junk temporarily? Probably not, eh?
  • Have you verified with an external device that it really is your laptop thatā€™s dropping the packets? Like, what does tcpdump on your router see?

If this works reliably in the office, then it feels like some kind of fail-safe mechanism of the snakeoil stuff. If it canā€™t see its control server (which might only be reachable from the office?), then it shuts down web traffic? Something like that?

Any idea how the snakeoil works? Maybe it does LD_PRELOAD magic to hijack syscalls like connect()? Does it use kernel modules?

#kmcdnma
lyse @lyse.isobeef.org
 (6d ago)

Fuck me dead, what a giant piece of shit. On my Linux work laptop I have the problem that some unknown snakeoil ā€œsecurityā€ junk is dropping any IPv4 connections to ports 80 and 443. All other ports and IPv6 seem unaffected. I get an immediate ā€œconnection refusedā€ when trying to estabslish a connection.

I had this problem four weeks ago on Friday morning the very first time at home. On Thursday evening, everything was perfectly fine. Eventually, I plugged in the LAN cable in the office and everything got automatically fixed. Nobody can explain whatā€™s happening.

Then, last week Friday morning out of the blue, the same issue was back. So, I went to the office yesterday and it got fixed again by plugging in the network cable. This evening, I have exactly the same bloody problem again.

What the hell is going on? Does anyone have any ideas? Iā€™m certainly not an expert, but I donā€™t see anything suspicious in iptables or nft rules. I also do not see anything showing up in /var/log/kern.log. Even tried to stop firewalld, flush the iptables and nft rules, but that didnā€™t result in any changes.

#adtubxa
prologic @twtxt.net
 (6d ago)

Problem 2: Your SSD-backed database has a usage-pattern that rewards you with a 80% page-cache hit-rate (i.e. 80% of disk reads are served directly out of memory instead of going to the SSD). The median is 50 distinct disk pages for a query to gather its query results (e.g. InnoDB pages in MySQL). What is the expected average query time from your database?

Share your solution via Twtxt and how you arrived at it and Iā€™ll share my solution tomorrow!

#napkin-math

#7yfkzjq
prologic @twtxt.net
 (1w ago)

(#dy3n2cq) Also interesting:

edit_hash: When a message is edited, a new message is createdā€“ this field holds the hash of the modified message. The client follows the chain of edit hashes to end up at the final, edited message to display. This lets us keep an ā€œundoā€ history (not yet implemented) and is a marker so the client can display a marker that the message has been edited.

#b6rmqpa
prologic @twtxt.net
 (1w ago)

(#pldqlcq) My solution to:

How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?

  • 512 bytes logged per request
  • 100,000 RPS
  • ~50MB/s
    • ~4TB/day
  • $0.02/GB Blob Storage
    • $0 ingress
  • 90 days retention
    • ~400TB
    • $8k Blob Storage
  • Costs:
    • ~$88/day
    • ~$2.6k/month
    • ~$32k/year
#rz3oelq