JoachimSchipper

9 ms·

31.
by JoachimSchipper 4y ago
Not really , but several ports do have OpenBSD-specific documentation added by the port maintainer. I agree that it would be nice to put this information in the port.
32.
by JoachimSchipper 4y ago
"On the metal" was indeed lots of fun; I understand that it's been "succeeded" by Oxide's Twitter spaces, https://github.com/oxidecomputer/twitter-spaces
33.
by JoachimSchipper 4y ago
You may want to take a second look at Tailscale - it can be used as a classic VPN ("exit node"), but it really wants to broker host-to-host connectivity secured by ACLs and SSO.
34.
by JoachimSchipper 5y ago
Your parent comment has an autocorrect error, and meant to write demise (death).
35.
by JoachimSchipper 5y ago
Ehm, doesn’t Tesla have famously bad quality control in several areas, e.g. fit of body panels? EVs, as a category, need less maintenance - but Tesla’s are not an example of a trouble-free product! (They are legitimately cool though!)
36.
by JoachimSchipper 5y ago
Concretely, imagine a sensor node sampling a lot of low-quality sensors frequently. You can afford some setup (to share an AES key, generating as much shared (pseudo-)random as you want), but you want your per-measurement overhead to be sma
37.
by JoachimSchipper 5y ago
... I don't know how to ask this nicely, but: is the missing ingredient really a better system for publishing code reviews? Via the installation instructions, I can find https://github.com/dpc/crev-proofs/tr
38.
by JoachimSchipper 5y ago
A good point, but one addition: nobody directly uses PGP. While Debian and other package signing continues to use PGP (and yes, Debian may move away, and signify/minisign is preferable) there are lots of “infrastructure” uses.
39.
by JoachimSchipper 5y ago
cperciva's spiped is, at least, deliberately old-fashioned; and I'd be inclined to trust it over most newer designs. (Wireguard does appear to be pretty awesome.) I do agree that lots of legacy cryptosystems just aren't ver
40.
by JoachimSchipper 6y ago
tree.h is production-proven and available under a very liberal license (ISC). tree.h is also fairly extensively documented (e.g. https://man.openbsd.org/tree.3); the only real footgun the API allows is documented under &quo
41.
by JoachimSchipper 6y ago
This is effectively a demo for https://news.ycombinator.com/item?id=26436515 .
42.
by JoachimSchipper 6y ago
Secure Boot can prevent an attacker who has compromised a system from persistently compromising said system - provided all data used by the system is properly authenticated. For a typical laptop, Secure Boot plus Full-Disk Encryption (e.g
43.
by JoachimSchipper 6y ago
I agree that the risk of replays due to TLS 1.3 0-RTT is bad, but I understand browsers (e.g. Chrome) can often be made to silently replay requests at a lower TLS version anyway (to work around middleboxes that choke on higher-than-expect
44.
by JoachimSchipper 6y ago
That's not a healthy thought. It's just money; your family would almost surely rather lose a big pile of money that you.
45.
by JoachimSchipper 6y ago
Hiding losses is how many Ponzi schemes get started. I'd strongly recommend you to get off that slippery slope immediately, even if it will be painful now.
46.
by JoachimSchipper 6y ago
https://man.bsd.lv/login.conf.5#AUTHENTICATION documents OpenBSD's system, which revolves around running /usr/libexec/auth/login_<foo>. OpenBSD's system doesn't let you do the stack-
47.
by JoachimSchipper 6y ago
E.g. relative to the author's script, tarsnap get you automatic deduplication across backups... which, if you're like me and basically generate more and more data, allows you to store lots of historic backups at basically no overh
48.
by JoachimSchipper 6y ago
This uses Raft, so a quorum of devices would need to be online at the same time. That's not what you want for browser sync.
49.
by JoachimSchipper 6y ago
Protobuf's variable-length lengths are indeed annoying, but can't you encode back-to-front as in ASN.1? That lets you write your lengths just after encoding the value, which should work (but may leave your data in e.g. bytes 20+ o
50.
by JoachimSchipper 6y ago
Yes, that's the generic solution. They claim ~7 cycles per byte for 4096-byte blocks on the newest CPU tested, but I don't know what the performance would be on CPUs from 2020. (For context, per https://eprint.iacr.org&
51.
by JoachimSchipper 6y ago
Anyone reselling AWS services wants to price bandwidth above AWS' price, and AWS' bandwidth pricing is high. (E.g. AWS EC2 in us-east-1 to the internet costs up to ~0.09/GB, so your ~0.5 TB would end up at around £33 - althou
52.
by JoachimSchipper 6y ago
There is (now?) an explicit "P.S. We're hiring" on the page ;-)
53.
by JoachimSchipper 6y ago
Unfortunately, I don't really have a better suggestion. :-( I know Solaris has its own debugger(s?), and rr looks really useful, but I haven't worked on a platform that could run either.
54.
by JoachimSchipper 6y ago
I've been a little out of the loop - do you happen to have references?
55.
by JoachimSchipper 6y ago
Eh, more particularly "the state of Zig debuggers and gdb in particular on NixOS Linux" - the author isn't wrong to want things to work, of course, but the author isn't using the most boring environment either.
56.
by JoachimSchipper 6y ago
C tends towards using in-band error signaling, which is indeed likely to lead to the kill(-1) problem discussed in the article. ... that said, there are other ways to get error handling wrong, and e.g. some (scripting) languages tend to hav
57.
by JoachimSchipper 6y ago
The Jepsen report referred to can be found at http://jepsen.io/analyses/dgraph-1.1.1 .
58.
by JoachimSchipper 6y ago
The 14" X1 Carbon does indeed come with Intel integrated graphics, but I was specifically referring to the 15" X1 Extreme. (Also, what pentium166 says.)
59.
by JoachimSchipper 6y ago
Yes, but note that the P1 workstations are pretty much the same as the X1 Extreme series (but with Nvidia's Quadro "workstation" GPUs rather than Nvidia's "customer" GPUs.)
60.
by JoachimSchipper 6y ago
FWIW, attacks like Javascript or SQL injection via logfiles are hardly unknown. Log files are plenty scary. ;-)

More ›