hak8or

Looks like another instance, I am dealing with a very similar issue. I didn't even notice any sort of tiers, as I had 17 grand in costs accumulate at a similar pace.

I (a hobbyist running a small side project for a dollar or two a month in normal usage, so my account is marked as "individual") got hit with a ~$17,000 bill from Google cloud because some combination of key got leaked or my homelab got compromised, and the attacker consumed tens of thousands in gemini usage in only a few hours. It wasn't even the same Google project as for my project, it was another that hasn't seen activity in a year+.

Google refuses to apply any adjustments, their billing specialist even mixed up my account with someone else, refuses to provide further information for why adjustments are being rejected, refuses any escalation, etc. I already filed a complaint with the FTC and NYS attorney General but the rep couldn't care any less.

My gripe is not that the key was potentially leaked or compromised or similar and then I have to pay as a very expensive "you messed up" mistake, it's that they let an api key rack up tens of thousands in maybe 4 hours or so with usage patterns (model selection, generating text vs image, volume of calls, likely different IP and user agent and whatnot). That's just predatory behavior on an account marked as individual/consumer (not a business).

Be very careful about using googles apis as a consumer, they have poor rate limiting and ineffective anomoly protection.

I (a hobbyist running a small side project for a dollar or two a month in normal usage, so my account is marked as "individual") got hit with a ~$17,000 bill from Google cloud because some combination of key got leaked or my homelab got compromised, and the attacker consumed tens of thousands in gemini usage in only a few hours. It wasn't even the same Google project as for my project, it was another that hasn't seen activity in a year+.

Google refuses to apply any adjustments, their billing specialist even mixed up my account with someone else, refuses to provide further information for why adjustments are being rejected, refuses any escalation, etc. I already filed a complaint with the FTC and NYS attorney General but the rep couldn't care any less.

My gripe is not that the key was potentially leaked or compromised or similar and then I have to pay as a very expensive "you messed up" mistake, it's that they let an api key rack up tens of thousands in maybe 4 hours or so with usage patterns (model selection, generating text vs image, volume of calls, likely different IP and user agent and whatnot). That's just predatory behavior on an account marked as individual/consumer (not a business).

And this is why I am immediately shifting to bunny from cloudflare at this point.

A week ago I (a hobbyist running a small side project for a dollar or two a month in normal usage, so my account is marked as "individual") got hit with a ~$17,000 bill from Google cloud because some combination of key got leaked or my homelab got compromised, and the attacker consumed tens of thousands in gemini usage in only a few hours.

Google denied a rate adjustment, and haven't reached back out to me for a good few days now. My credit card denied the charge because it was over my credit limit by a good few thousand dollars and they suspected fraud, but now I am terrified of being taken to collections and ruining my prospects of renting an apartment due to my credit score/history being ruined, or them just taking me to court.

I am never going to use "use now pay later" services, especially with cloud portals where it's so hard to put in a actual cap, and the cloud provider not having any sane rate limits. I am fine paying if it was negligence or a mistake on my part as a very expensive lesson in security, but 17k is brutal.

The fact they don't have an easy way to hard cap usage (especially for an individual account) and have ineffective rate limits (how on earth is an account that pays a few dollars a month able to run up tens of thousands in just a few hours), makes me never want to use their (or any use now pay later with no easy caps or rate limits) service ever again. Or even a phone number to call.

I was curious what instruments this use, looks like a special form of radar? Does this mean it effectively gives us very accurate height maps regardless of cloud coverage, and is able to differentiate between what surface material it's seeing?

> Radar instruments can image Earth’s surface through clouds, precipitation, regardless of sunlight, making them particularly well suited for monitoring polar regions. The Sentinel-1C and -1D satellites also carry an Automatic Identification System (AIS) instrument – improving the mission capacity to detect ships and sea pollution. The Sentinel-1D AIS was also activated as the satellite passed over Antarctica capturing the presence of ships in these extreme areas.

Mikrotik makes some very capable routers. The Rb4011 is incredibly powerful and very low power, and has an SFP+ port, so you can use a sfp+ to rj45 if needed, or straight modem -> sfp+ connection, to get faster than 1 gig speeds.

It has a steep learning curve though, albeit it's extremely rewarding and powerful once you gwr over that curve. It should handle routing 1 gig with zero issues, and is under $200. You can do bonding, vlans, esoteric ip rules, and tons of "misc" functionality.

Do not go with ubiquiti, their hardware is very poor and their UI is very buggy and simply poorly designed, it's focused on people who know a bit above an average person about networking, which I suspect is not the case for most people here.

Thank you, I could not agree more. These companies exist because their services and products are being bought by someone else, and in the end the consumers are either actual consumers or governments (who consumers vote for). I place minimal blame on companies, because clearly consumers don't care, and instead want to buy the cheapest products possible.

If it applies or not us irrelevant, what only matters is to what degree is it able to be enforced (and in practice) against companies that have no assets under EU jurisdiction. From what I gather, it's very little, so most smaller companies simply don't care.

I switched all my home machines' shell to fish, and my work computer also to fish, and it has been an amazing productivity boost for myself. The extremely ergonomic way it represents history (old commands) is what does it for me.

If I need to script something, I always do it in bash (which is easy to transition to from bash). I don't use the fish language for any scripting because of incompatability, but as a command line interface to my systems it has been a massive boom to my quality of life. I could not reccomend it more.

Can someone find this poster? I would utterly love to buy it and hang it somewhere, but I can't find it when googling.

Ah sequel. I did a stint of ruby on Rails work many years back, and remember seeing sequel for the first time. It's documentation web page is honestly probably the best "what is this" and "getting started" page I have ever seen for any library.

I don't know if it's the library itself or the documentation contents or the documentation website theme, but it jives absurdly well for me. I also really like the simplicity+flexibility of the library itself, and have yet to find anything even close to it in the c# or c++ world.

How does the number of packages in nixos compare to, say, arch's aur? Looking around, I see a decent selection, but I figured I would get more feedback from the community.

Also, what don't you like about nixos?

This looks like a great command line alternative to git diff or diff, but I have to admit that I greatly prefer meld when I need a quick diff against non version controlled files, or sublime merge when using revision controlled files.

This is an absurdly impressive writeup, and it's great that it shows that there are SIP's out there for such low pricing (sub $5 for a ic whuch includes a decent few MB of dram is great, albeit single core).

Many years back, I also did a writeup (much less intense) that goes more so into what it took for me to get Linux running on an IMX6 based Soc on the software end, including how I found a bug in the USB clock tree in the kernel for the IMX6, how I debugged it, and how I mainlined it (my first and only kernel commit to mainline). https://brainyv2.hak8or.com/

Such projects are increadibly satisfying to work on, it makes you feel much more competent when working with embedded systems. There is much less "black magic" going on.

I wouldn't say "very tiny". For example, does it run (and can do something useful) on a 8 KB cortex M0 with 24 KB of flash?

If you can point to one specific thing you are most interested in, or happy to check out, from vue 3, what would it be? And what's the closest another framework (or vanilla js) has to said feature?

Is, erm, is this satire?

If you are genuinely able to be genuinely self sufficient without interacting with currency while still bieng able to have power to go on a computer with an internet connection, I have to say, props to you.

I just hope you do not get hit with a serious medical issue. Or have a fire and then get hit with a fire Marshall tearing you a new one over your unpaid property bieng not up to code.

Bieng able to declare variables after statements in a function is huge, letting you make them const as needed.

Also declaring the index variable in a for loop like for(int i =0; i < 10; i++) is extremely helpful.

Those two alone are extremely beneficial.

This is precisely why I argue that those who don't use an Oxford comma have incorrect grammer and are doing a disservice.

Do you have any examples of such packages that were missing? I've been using arch for maybe five years at this point and am an embedded developer. I had maybe oneor two times that I had to install something that was not in the aur.

Are you affiliated in any way to the nerves project? I skimmed the home page and couldn't find out what it is exactly. Is it an elixer framework and related bootstrap code targeting towards running on mmu-less arm cortex m microcontrollers? Or on an embedded liux system? Or is this just a rest endpoint somehow?

Yeah, the court basically wants to have one of the biggest companies on the planet divulge a large part of their core IP (money maker) to a person who's interest align to game that IP.

I wouldn't be surprised if Google were to just flat out deny this and tell the country to pound sand at that point.

What if you want to do an equality operation, but the greater than or less than operators require lots of computation? If an object only defines the space ship operator, then isn't it very likely that you will get a lot of extra computation when all you care baout if the two objects are or aren't equal to each other?

I used markdown for my documentation of a embedded liux system years back (https://brainyv2.hak8or.com/) and have been very pleased. While it's not a book, it's also not a single page document.

The rust official docs are also written in markdown and thrown at mdbook (https://rust-lang.github.io/mdBook/) to generate documentation of a similar style, but it's much more book like.

I am pretty much all in for markdown based documentation for almost everything. It does what I need and nothing more.

If I need more control over styling, that's a different story, but thankfully almost all my use cases are good enough without such control.

You might as well go for vt at that point. It's the total global market. The USA is a massive portion of this anways, so it's just extra diversification.

> If you don't find yourself studying 6 hours a day, you're not getting an elite education.

This is absolute nonsense and a garbage mentality, akin to gate keeping.

My understanding is that pcie devices incur a very high latency for getting data to and from them, due to the pcie device itself and setting up a dma descriptor. Sadly this article doesn't look into that.

Can someone comment on what sort of latency would be involved in something like this? For example, latency to send to pcie device, latency to react to and manipulate the data in a warp(Nvidia?), and latency to send the data back to the host system?

It helps make the effort to buy a product much lower, therefore increases sales.

1.3 mill for donation processing expenses? What tge heck? Well, I surely am not donating to them anymore, that is terrible.

You are going to vote though, correct? Lesser of two evils and all that.

If you do not make your voice known, you will be out into the same camp as voter apathy, at which point why should those running care about you if you don't vote?

Emphasis on notable percentage. That percentage is likely so small that it is easily enough to ignore. It is also not close enough to a "protected class" under USA law (and I assume many other countries too), that is totally fine in the legal sense to ignore those people for the purpose of programming language awareness.