ryanf323

I should and I will

Very comprehensive. However, it is missing how the client machine will ARP the gateway for the MAC address if it is not in its tables.

We cache the hell out of our WP marketing site. Cloudfront > Varnish > Apache > OPCache > MySQL Query Cache. It feels fast to visitors. People in the admin area still suffer.

Typically, you restrict countries that you receive abusive traffic from and do not have any business in.

"Is that how you want the web to generally work?"

My suggestions on ways to prevent paying for CloudFront charges from junk requests are not prescriptive. However, they are AWS best practices when dealing with DDoS.

https://aws.amazon.com/answers/networking/aws-ddos-attack-mi...

I never said WAF was free. Where did you read that?

Geo Restrictions on the Cloudfront distribution and a WAF will go a long way in mitigating against abuse and unnecessary costs.

We did.

I look at GitHub profiles to help filter / disqualify candidates. Just last weekend, I had a marketing candidate who had stolen three Wordpress projects from their current employer and post them as public repos on their personal GitHub account. In addition to the flagrant intellectual property theft, the repos contained the wp-config.php file with exposed database “root” credentials to live, client sites.

Those AWS “practitioners” who are too stupid or lazy to figure out IAM policies. Thankfully, AWS has added bright yellow labels to identify public buckets. However, labels won’t be enough to motivate some people to learn JSON.

I interned at a great company (https://qedmrf.com/) that engineers magnetorheological fluid and machines for polishing / analyzing optics. I can't imagine doing it by hand. Fascinating stuff.

Seems nice, simple, and cheap enough. I did something similar with phantomjs (no email). I agree with other comments that change detection and a slack integration would be nice.

This does not handle Microsoft office URL pre-fetching...and is written in C...