Forgot your password?

typodupeerror

Comment: Re:The consumer trend seems to be clear (Score 1) 263

by MagicMerlin (#32825464) Attached to: SSDs vs. Hard Drives In Value Comparison
I used to say the same thing, but unfortunately it's not so clear cut. The intel drives which post such great random i/o numbers only do this because they are configured in write back cache mode w/volatile cache. The x25-M in write through mode can post about 50iops writing -- I'm not kidding. Also, wear&tear on the drive is much higher. IOW, the intel controller does not perform magic -- they cheated. The x25-e drive is configured the same way -- the performance drop for going to write-through is not so high (you can eek 1000ish iops out of a drive) but the drives are expensive and the the math doesn't work out all that well. The basic problem is that flash is plain and simply lousy at random writing just like hard drives. With a small NV cache on the drive, things could be completely different (and some boutique mfg IIRC already offer this) but until you see Intel, Seagate, or WD on a drive with NV guarantee for at least semi-reasonable price you will not see serious intrusion into the enterprise.

Comment: Re:Our approach (Score 1) 244

by MagicMerlin (#32581388) Attached to: Kaminsky Offers Injection Antidote
for the cases that you can't strictly do the query, we push the logic into a function call and dyna-sql it. (to hide the internals, it's actually mostly function calls over the low security interfaces). we also wrote a libpq wrapper to allow sending and receiving extremely complicated structures over libpq protocol efficiently. (here, if you're curious: http://libpqtypes.esilo.com/).

Comment: Our approach (Score 1) 244

by MagicMerlin (#32579078) Attached to: Kaminsky Offers Injection Antidote
We use PostgreSQL. We expose the libpq not default port directly to the internet through pgbouncer. What we did:

*) Modify pgbouncer to only except extended protocol (parameterized) queries
*) Auto Generate list of allowed queries used by app to store in whitelist
*) Block all functions except auth if authenticated or to the whitelist othewise
have had zero problems. curious what you think.

Comment: Re:postgres didn't do so badly (Score 3, Informative) 157

by MagicMerlin (#32550426) Attached to: MySQL Outpacing Oracle In Wake of Acquisition
Postgres has traditionally had lousy replication options. This of course is going to change with 9.0 hs/sr. Older versions of postgres (pre 8.x) had some operational difficulties that made it an awkward fit for high transaction load web environments. Now that those downsides are pretty much eliminated, it's about the best general purpose sql database out there -- it has many niceties/features that are rare/non-existent elsewhere. Transactional ddl for example.

Comment: Re:Web Development (Score 1) 279

by MagicMerlin (#32210944) Attached to: HTML Web App Development Still Has a Ways To Go
I agree with most of what you said except for the comments on javascript. As a systems programmer you should understand that it is inefficient and silly to force the interface to refresh an entire page just to pull small pieces of data from the server and render them. There are many other wonderful things that javascript provides in terms of interface and user experience. Of course, I'd prefer a cleaner, more strongly typed language than what is probably the most informal language ever invented, but javascript is a big part of what makes the internet what it is today. applets and flash need to die though,

To err is human, To purr feline. -- Robert Byrne

Working...