mnathani: well for one thing you wouldn't be using document.write ideally? define 'including content fro another site into my page' you would need to be allowed to access the resource via CORS if you wanted it to be done via js I typically use copy and paste to include content from other sites on mine. you either have to do server side scraping or just copy and apste if it's a third party site you have no control over ~# uptime 08:25:17 up 257 days, 1:38, 1 user, load average: 0.00, 0.00, 0.00 good job, but you're computer isn't doing anything according to your load average :P Indeed. Just running few light services. your* I can't believe I did that... that's about all mine does I am wondering what kind of restrictions for arpnetworks. not really any restrictions as long asi t's like sane and legal or whatever 08:26:31 up 203 days, 15:39, 2 users, load average: 1.84, 1.67, 1.66 lol 09:36:08 up 18:46, 2 users, load average: 0.00, 0.01, 0.05 i think my highest loaded box is my kvm server at home load average: 0.08, 0.19, 0.32 hahaha eth0 eth1 bond0 KB/s in KB/s out KB/s in KB/s out KB/s in KB/s out 215.23 1266.99 0.00 0.00 215.23 1266.99 this is entirely text traffic :( :o i still want to know what kind of service you run he ships ... text. :) well, technically just bytes unless gzipped text counts as text thats weird i just tried to grab some f/oss thing from sourceforge it gave me a malware installer Not much restrictions..probably i can test and try the exploits on it? :D Scanning another host. He he he hazardous, a "malware" installer or a real malware installer? not that's there's a difference but I read that sourceforge is trying to make money by replacing popular windows app downloads with their own installers that bundle toolbars a "shitware" installer, then Was that f/oss software Synergy? The first project I encountered with a shitware installer ^ but yeah you probably should know my feelings about tthings like this i treat it as malware because that's exactly what it is sure, i am one of the few that actually reads what i'm clicking but many people don't, and that's taking advantage opt out instead of opt in I imagine those feelings are shared by all consumers... I mean, who REALLY wants the Ask.com toolbar bundled with Java??? "Oh great, a toolbar for a website I've never heard of!" (Okay, I have heard of it... But it's so irrelevant and obsolete, it's hilarious) brycec, "consumers" don't even know. they can't tell the difference between the toolbar and the browser chrome I'm not sure about that... I mean those toolbars are a lot like a colonoscopy. Are you suggesting that "consumers" can't tell the difference between anal probing and a sunny day in the park? oh they know it got worse; just not why just that computers get slower over time Good thing Internet Explorer is playing police and proactively suggesting that you disable toolbars and addins every time you launch IE (complete with some basic profiling) I imagine those feelings are shared by all consumers... I mean, who REALLY wants the Ask.com toolbar bundled with Java??? have you noticed their word use too people might not know what ask or java are but it says WE RECOMMEND ASK TOOLBAR WE STRONGLY RECOMMEND YOU INSTALL GOOGLE CHROME WITH TOOLBAR X "Oh, well if it's recommended" another thing SF recently started offering projects the ability to add the crapware for some kind of incentive that pisses me off is tickboxes such a shame like one that's 'install shitware' one that's 'i agree' and one that's 'change my homepage to shitware.com' and if you untick i agree it greys out all 3 but keep two of the three ticked I moved off SF long, long ago and I have zero regrets. (To Google Code... which I then moved off from and on to Github because GC is, well, kinda shitty) Wow, fun "trap the user" brycec: it actually won't install it w/o the i agree but it still ticks me off to the point where i tick i agree then untick all 3 in propero rder i think my best memory was this one application that had a separate toolbar window but it later turns out that to install the application, you had to REQUIRE a toolbar anyways, in the REAL app's EULA and it installed a different one if you agreed, it would install both These projects can't be making more than hundreths of a cent on each install :/ It's really not worth pissing off users, is it? US installs are like 0.10 or something? loads in .br or .in or whatever are like 0.01 or less wow, $.10 really? That can add up on a popular project... 50 downloads and I've got lunch. installs in VM's don't count to prevent "fraud" lol nice, and smart. Sadly they still do install in a VM. no, i mean the toolbar will install yeah but ytou won't get credited for it which is just lmfao (Yeah I understood) Nice that my installs don't count... but they wouldn't anyways because I un-check that shit. (All my Windows are in VMs) hey anyone use bsd here my webserver is randomly spitting out kqueue_add: fdpoll is full ! oh dammit i keep runing out of descriptors or something Hmm does anyone in #arpnetworks/@bsdvps use BSD? :P And yes that's what that message means and there's a sysctl to up the limit (but as usual, figure out why you're hitting a normally-sane limit) brycec: well around 14000 simultaneous webserver hits per second might do it if that's what i'm guessing In theory those hits would end up in RAM increased from 11k to 50k, going to see how that pans out i guess none of it is static content every single pageload is generated fastcgi? fastcgi Hmmm cherokee / nginx + fastcgi + redis + riak Ideally fastcgi has loaded the source file and just re-runs/evaluates for each request But that's "ideally" I have never real-world tested t his yeah but the source file itself does network access itself against multiple keyval stores both localhost and across the network that may possibly be why? Hm, could be, actually. I would hate to see netstat :p $ netstat -an | wc -l 22027 other machine $ netstat -an | wc -l 11840 maybe i should acutally learn bsd instead of treating it like a linux 11 sry 12 notsry hazardous: mike-burns : I am attempting to capture both IPv4 and IPv6 addresses of clients that visit my website with a dual stack configuration and display both IP addresses Should be pretty simple you would think, but I have been struggling with it since yesterday what's your approach so far I got the v6 address using server environment variable for the v4 address, I setup a v4 only domain that displays the v4 address where ivp4only only has an A record (forcing the client to access using ipv4), and ipv6only has only an AAAA record (forcing the client to access using ipv6) what brycec said is the right way to do it (the ?uniquetoken is so you can pair the visitor, it's generated dynamically when loading www.site.com) but it sounds like you're trying that route thanks gizmoguy I would like the ip to show up within the source code not like coming from a different resource mnathani: in the source for www.site.com?? This site does it really well and fast : http://test-ipv6.com/ oh, you want to show it on the page? ajax call to ipv4only.site.com ipv6only.site.com I don't think that's even possible... Since the server, on page load, only knows the connection it's serving. where those websites just print the IP that hit them gizmoguy++ user goes to the v6 enabled site and both ip addresses get displayed (Using bypasses CSRF/XSS headaches, and you could just generate an image with the IP with GD) mnathani: test-ipv6 does it via ajax calls (so many ajax calls...) hehe yeah "124 requests" If an image can come through, then what prevents an external javascript getting loaded you can't load javascript in an image tag? I am open to javascript methods you can point at javascript, but it wouldn't be evaluated Something like : And when src'ing javascript, there are safeguards in place to prevent cross-site scripting attacks @wiki XSS oh right, BryceBot isn't in this channel :p http://en.wikipedia.org/wiki/Cross-site_scripting iframe? :P Basically, src'ing javascript from domains other than the one being visited is a major IV/security issue. You can configure exceptions, but it's a PITA gizmoguy++ clever, and hideous :) There is JSONP though that's mostly how my programming style is described :) (In fact, JSONP is how test-ipv6 handles the subdomain accesses i got it working in the end hrm, why is it 5.30pm on a friday and I don't have a beer in my hand yet :( I have one box where snmpd just starts eating CPU like there's no tomorrow :( gizmoguy: because you're waiting for the rest of the world to catch up\ lol people should stop asking me to do work ;P a user's desktop stopped working at 4.45pm gizmoguy: Play, have fun, whatever you do just don't work. on a friday? sounds like Monday's problem fixed that by 4.58pm but then I had someone else come ask how to build a cloud infrastructure that took at least 30 mins to solve I think I freaked him out a little, he was wanting to do the minimal amount of work required kinda like askign "How do I Internet?" haha yeah the original question was "how do I install a VM in my new openstack I just built" my answer turned into, install/build a provisioning system, learn puppet, write puppet, click lots of buttons, done btw theforeman is the best provisioning system I've ever used i've recently replaced my job with it ( I didn't tell my boss yet ) lol