Instagram story viewer> @marko.ski> Post
Marko Markoski(marko.ski)'s profile avatar

Marko Markoski

@marko.ski

6 years ago
Photo by Marko Markoski on April 03, 2021.
Photo by Marko Markoski on April 03, 2021.
Download
0
Posted On: April 3rd 2021, 06:07 pm
Tagged Users:
@nikoneurope
nikoneurope
@igor_angelov
igor_angelov
Igor Angelov portrait
Several years ago :)
.
.
.
.
#throwback #portrait #portraitphotography #actor #actorportrait #blackandwhite #blackandwhitephotography #makeiticoniceu Nikon D700

More posts

मोदी शाह को तिरंगा से क्या दिक़्क़त हैं जब जब मोदी डरता है पुलिस को आगे करता है #delhi
رغم مرت اكثر من ٣٥ سنة، بس بعده هذا الطفل مسيطر على كل تصرفاتي.. بعده متحكم بقراراتي، بمخاوفي، باحلامي، وحتى بالاشياء اللي تضحكني. بعده يفرح باشياء تافهة، ويزعل من اشياء أتفه، ويوزع ثقة هنا وهناك رغم صارلي سنين احاول اقنعه يبطل هالعادة الجايفة! كبرت، وتغير شكلي، وتغيرت افكاري وخسرت ناس، وربحت ناس، وشفت من هالدنيا اكثر مما جان المفروض اشوف بهواي.. بس الغريب، كلما اكبر اكتشف اني مو داحاول اصير شخص جديد، اني بس داحاول احافظ على هذا الطفل من الشخص اللي الدنيا تريد تحولني اله.. اليوم صار عمري ٤٢ سنة، وهو بعده بنفس العمر. والظاهر راح اموت واني بعدني احاول اخليه يتغير! عيد ميلادي سعيد… اله مو الي.. ملاحظة: اليوم حبيت اشارككم اللي دا احس بيه وعليه: الميمز ممنوع بهيج لحظات بيها مشاعر جياشة او مسموح عادي بكيفكم
Plashiya @makani.lw Pic @delvecchio21
🚨 Interview question: 10,000 bots are hammering your login API. How do you stop them without locking out real users? Most people say "just block them." Here's why that fails 👇 ❌ Blocking IPs doesn't work. The bots come from thousands of different IPs, each sending only a few requests, so no single source looks suspicious. ❌ Login is expensive on purpose. bcrypt is deliberately slow so attackers can't guess passwords quickly. But that means every fake attempt burns real CPU, and enough of them turns an attack into an outage. ❌ Rate limits don't catch it. Attackers use email and password pairs leaked from other sites, with only 1-2 tries per account. Your "5 attempts" rule never triggers. ❌ Lockouts backfire. Now attackers can lock real users out on purpose. ✅ The real fix: decide earlier. Put a cheap risk check in front of the expensive one, and only spend CPU on requests that look real. What the risk check looks at: 🔹 TLS fingerprint: a real iPhone app and a Python script connect differently, even if both claim to be an iPhone 🔹 Failure rate: a client failing most of its logins is suspicious 🔹 Known device: have we seen this device before? No single signal is enough, so you combine them and respond in proportion: 🟢 Low risk → straight through 🟡 Medium risk → CAPTCHA 🔴 High risk → dropped before it touches bcrypt Real users barely notice. Bots get expensive. 💸 Interview answer in one line: score each request cheaply, challenge the doubtful ones, and protect the slow, expensive step behind them. 📌 Save this for your next system design interview 💬 Comment "SECURITY" if you want the next one on rate limiting ➕ Follow for more backend concepts explained visually Hashtags: #systemdesign #softwareengineering #backend #cybersecurity #codinginterview techinterview programming developer bcrypt webdevelopment learncoding computerscience botprotection apidesign tech
JOSÉ MOURINHO HAS TURNED REAL MADRID TO PRIME REAL MADRID AGAIN 😭🔥🤯🚨 arda Guler goal today Mbappe goal today real Madrid goal today #ardaguler #realmadrid #realmadridfc #laliga #guapmotion
the moments before… w/ @xingerxanger team @mrenriquemelendez @thetonyabrewer @bykileyfitz
back to up