#yarl — Public Fediverse posts

YARL: как мы развиваем распределённый Rate Limiter

Привет, это Всеволод Иванов и Артём Икчурин из Yandex Infrastructure — в нашей инфраструктурной команде Cloud Storage Services мы занимаемся разработкой хранилищ, которые внутри компании используются самыми разными сервисами. В Яндексе есть несколько систем хранения для разных задач, в том числе объектное хранилище для неструктурированных данных. Несколько лет назад мы искали способы ограничить нагрузку на внутренний сервис S3 — так появилось наше собственное решение Yet Another Rate Limiter, или YARL, о котором мы уже писали на Хабре . Сегодня расскажем, как развивается наш лимитер. Так что если вам интересны высокие нагрузки, рекомендуем ознакомиться с предыдущей статьёй и затем вместе с нами отправиться под кат за продолжением.

https://habr.com/ru/companies/yandex_cloud_and_infra/articles/1034852/

#yarl #rate_limiter #rate_limiting #балансировка_нагрузки

The #python library #aiohttp uses #yarl for URLs internally, and yarl normalizes URLs by default. It silently decodes some %-encoded characters in the query string that do not strictly need to be encoded.

Sounds harmless, but it isn't. Changing the URL breaks any protocol that signs important aspects of a HTTP request for security.

Took me a while to find this bug. I usually expect an HTTP client library to not silently manipulate the URLs before sending a request. Smarter is not always better

The #python library #aiohttp uses #yarl for URLs internally, and yarl normalizes URLs by default. It silently decodes some %-encoded characters in the query string that do not strictly need to be encoded.

Sounds harmless, but it isn't. Changing the URL breaks any protocol that signs important aspects of a HTTP request for security.

Took me a while to find this bug. I usually expect an HTTP client library to not silently manipulate the URLs before sending a request. Smarter is not always better

I do not have sympathy for the cowardice of old white men.
Fear doesn't justify murder.

Every woman, every day, and multiple times a day, is confronted by a man who is physically stronger, who may offer her violence.

Does she try to kill him? No. She is forced to trust in his good intentions, even if she is justified in NOT trusting his good intentions.

If a woman killed a man every time she felt threatened, or wary of his intent, the world would be covered with corpses.

#Yarl #Gillis

@UberZeitgeist @Nigel_Purchase All of that is true but without guns, none of these shootings would’ve happened.

#kansas_city #yarl #upstatenewyork #rural #city #guns #homicides #schools #guncontrol #GunViolenceCrisis

@UberZeitgeist @Nigel_Purchase All of that is true but without guns, none of these shootings would’ve happened.

#kansas_city #yarl #upstatenewyork #rural #city #guns #homicides #schools #guncontrol #GunViolenceCrisis