• 5 Posts
  • 37 Comments
Joined 8 months ago
cake
Cake day: November 17th, 2024

help-circle






  • I can outsource things like ddos protection to my cdn provider, but that would still be just kinda hoping I didn’t have any attackable surface I didn’t think of prelaunch.

    In that case, I wonder if your money would be better spent on contracting a security review. If you’re worried about unknown attack surface, I’m not sure that funding organized crime to rent a botnet would help. Botnet operators rely on you to tell them what to attack, so you’re unlikely to discover anything new here. Better to hire a professional and get a fresh opinion.


  • Is this something you’re self hosting for fun, or is it some kind of business?

    If you’re running web services for a business, you should look into existing load test tooling/infrastructure. Some of it can be fully managed, or other solutions might have a degree of setup involved (eg spinning up worker nodes in AWS or whatever). The hard part is designing your load test to match IRL traffic patterns, but once you have that down you can confidently answer questions about service scalability.

    A load test is not a DDoS test. Load tests tell you how much legitimate traffic your services can take. DDoS consists of illegitimate traffic which may not correspond to what your web services expect.

    Usually you don’t test your systems for something like a DDoS. You would instead set up DDoS protection through a CDN (content delivery network) to shield yourself and let someone else handle the logistics of blocking unwanted load. It’s a really hard problem to solve.

    Depending on what you want to learn, running your own DDoS is unlikely to be very instructive. Most “DDoS as a service” networks are not going to tell their customers how anything works, they just take your bitcoin and send some traffic where you tell them.







  • Whether or not you’re wasting your time in college is only something you can answer. However, there definitely are jobs out there for junior software devs right now. If economic outlooks improve, I’d expect demand for juniors to rise also.

    Anecdote: I saw stats shared on social media by a CS professor at my former college. Enrollment for their classes is way down this year, when “back in my day” they were packed. Make of it what you will, but it’s possible young people might no longer be seeing software development as an easy career to get into. That could make it a more attractive prospect for someone who’s in it for more than just money.







  • At my last job, there was no planning of work/projects. Like, there was a general plan of “We need feature X by Q3 and here’s what it should do”, but nothing about breaking work down into smaller units or prioritizing different tasks.

    The manager would drop an email: “Hey, can you do …” and that was it. Now it’s another thing to throw down the waterfall. Big surprise, the same bastard would harp about how the project was underperforming!