a notebook is a great column oriented database for when you cannot bring technology with you. I don't think there is any useful scenario for one otherwise
I would think that a good command-line is one that responds to me within milliseconds on a crapbox i386 machine, and I can COMMAND it what to do.
A good command-line is not a binary blob that cannot parse simple instructions correctly.
At the same time, siri seems to be getting slower and fatter every iteration so perhaps it is becoming more human ;)
This happens all too often and furthermore is a problem beyond the chicken realm. Attention to detail is an integral part of human life and it is disgusting to see mere humans pretend to comprehend the intricacies of escaping beyond their mortal self, just for internet points.
I never really understood Cloudflare's intent, because from the marketing material it seems that you get DDOS "protection", free TLS certs, everything in a monthly package, affordable, bla bla bla.
But from some basic calculations I get that R2, Workers and egress bandwidth beyond a few terabytes costs just as much as Oracle cloud / Alibaba.
But what I dislike the most is how little control you have over what's going on there. Like: If you haven't setup TLS on your webserver, why do they allow unencrypted traffic to flow between the server <-> Cloudflare and encrypt it to the end users and pretend that is secure?
Why can't they forward all my server's headers? Why <XYZ> ?????????
Read some horror stories on Hackernews and you'll quickly find out what their "unmetered bandwidth" really means. You get very little if any transparency about the pricing, which I would except from tiny cloud companies, but this is supposed to be a major one!
I think the ability to put TLS in front of a non-TLS'd website comes of a few properties:
1. It's probably better than nothing.
2. It's a legacy thing.
A company like Cloudflare has to make a choice - how frequently do we break users who've set up their site in a way that is no longer in line with security best practices? It looks like the decision they've made is to break infrequently. Certainly the site I set up in 2014 when their free TLS was new still runs, and I haven't made changes.
I believe that you can set up strict TLS between Cloudflare and the end host if you choose, but it's up to you. I think in that instance, your 'little control you get' is actually more control, no?
And, if you look back even a few years, TLS was both uncommon and expensive. Cloudflare was a pioneer by offering free TLS certificates in I think 2014 (only 8 years ago!). LetsEncrypt started in 2015 and was niche for quite some time. I think even now you can find Linux distros preferring to ship their data over HTTP with GPG-keys recommended for the security. Of course in 2022 even simple sites should be TLS'd, but Cloudflare's existed for a while.
And, TLS to the client but plaintext from CDN to site is still better than cleartext the whole way, because it (generally) stops the ISP from snooping on its customers.
I think even now you can find Linux distros preferring to ship their data over HTTP with GPG-keys recommended for the security.
This isn't really to solve the same problem though. The GPG key thing is so you can use mirrors for hosting that are distributed but still trust the package came from the real source. TLS termination of where the packages are retrieved is separate.
Yes, the gpg piece provides that functionality nicely. However, it’s exceedingly common for the mirrors to not be provided over TLS for cost reasons. Netflix switched to serving video over TLS for no other reason than to promote the usage of TLS (after a lot of custom engineering (pki on cpu, crypto on nic iirc?) to reduce the overheads of doing this.
A few TB/mo is quite enough for a lot of smaller companies, and DDoS protection is something that a smaller company can see as a pretty valuable thing. A CDN with thick worldwide presence does not hurt either. So using Cloudflare is a no-brainer for a smaller business, especially with the prices they offer. Not using Cloudflare means either buying separate DDoS protection (likely offered by your cloud provider), or risking an extortion attack.
Some competition exists, but it's both more expensive and less reliable and convenient.
> But what I dislike the most is how little control you have over what's going on there. Like: If you haven't setup TLS on your webserver, why do they allow unencrypted traffic to flow between the server <-> Cloudflare and encrypt it to the end users and pretend that is secure?
I don’t get the issue here. The traffic between client and Cloudflare is secure. SSL is terminated at Cloudflare. You can choose to have end to end security if you want.
If you set up your own frontend that terminates SSL, but choose not to secure the traffic to your backend, the end client will still see the connection as secure.
Sorry if I am missing something here. Cloudflare gives flexibility to their customers. That seems right.
Cloudflare enterprise is pretty transparent if you've gone through the sales process. They tell you exactly what the limits are. For average person, on free plan, they are not obligated to provide details of where the limits are. That's no different than BackBlaze unlimited storage plan.
> If you haven't setup TLS on your webserver, why do they allow unencrypted traffic to flow between the server <-> Cloudflare and encrypt it to the end users and pretend that is secure?
The only use cases I have seen for units larger than 'petabyte' are those representing the maximum allowed file sizes for ZFS, Btrfs and such. I also don't see a point in inventing more prefixes so that statisticians don't have to use scientific notation for large numbers. What use is that? How many people know how much a yottabyte is? If they need to Google the answer, that defeats the point.
1e12 terabytes seems easier to digest than 1 whatever-the-hell-,-I-don't-know-what-this-unit-is-meant-to-represent-byte. Not to mention, easier to read.
Hmm, why would you mix 1e12 terabytes instead of saying 1e24 bytes? Why do we talk about 200k USD salaries instead of 2e5 USD? Or why isn't a US postage stamp marked as 6e-1 USD?
Also: in the past 25 years, "tera-scale" (TB and TFLOP) went from a prognostication about future high-performance computing into something you find in affordable consumer products. When campus computing centers are now deploying hundreds of petabytes, it seems myopic to think the PB threshold is anything but a signpost flying by the window...
At this point you could stir up hysteria over anything. Your cloud provider, ISP, operating system support team, XYZ SaaS provider could also just invent a new billing policy to screw the customer over.
At the same time, ^ the big providers have profitable revenue streams, so they don't have much incentive to change their billing. VC startups of course on growing instead of verifying that their business model actually works, and end up either:
- locking the software behind a paywall
- locking the software behind a paywall
- inventing a proprietary + open-source + pay us royalties license
- pretending that their software is free whilst employing a proprietary + pay us royalties for anything bigger than a hobby project license
the biggest productivity milestone we've ever hit while doing freelance programming work was to just don't. there certainly already is a solutions for what we were trying to solve, because clients come and go, but the problems are generally the same
