ReidZB

7 ms·

31.
by ReidZB 7y ago
Agreed. It's a great loss to the community that they have decided to step away from Stack Exchange: https://crypto.meta.stackexchange.com/questions/1361/im-leav...
32.
by ReidZB 7y ago
I think there's skepticism in the community that NSA et al actually have such a far head-start now. That said, historically speaking, back in the early 70s DES was being designed. The NSA made some unjustified changes to its S-boxes. A
33.
by ReidZB 7y ago
I like making the internet less dangerous to handle, so to speak, but there are always trade-offs, and I'm not sure that changing the default brings enough benefit to warrant all the pain. To me, it seems like it would've been bet
34.
by ReidZB 7y ago
I work for a company whose endpoints end up being embedded in iframes in external systems, and this change is currently causing no small deal of heartburn for several folks here. I really don't like that the Powers That Be have decided
35.
by ReidZB 7y ago
Ah, well, the output of what I wrote above isn't actually a Docker image. It ends up writing a cross-compiled binary to the local FS, which I then later attach to a GitHub Release. (The goal was to automatically attach platform binarie
36.
by ReidZB 7y ago
I read an article[0] on HN[1] recently — it talks about the different types of documentation. To quote it directly: "Documentation needs to include and be structured around its four different functions: tutorials, how-to guides, explan
37.
by ReidZB 7y ago
I'm not sure if this is the 'right way' or not, but for a recent Go project, I just scripted the build via - name: build run: | docker run --rm -v \ "$PWD":/usr/src/my-pr
38.
by ReidZB 7y ago
I know that Pulumi can use Terraform providers, at least. I'm not sure how good the integration is or if it's in the main way of doing things, though. I'd love to hear more details if anyone here has used it.
39.
by ReidZB 7y ago
I mean, I agree in spirit, but everyone has a different sense of cost/complexity vs. return. I don't advocate for ever-more-complicated solutions as a rule. e.g. I think multi-cloud setups are probably way more trouble than they
40.
by ReidZB 7y ago
I think it's still a reduction in risk overall. In the old model, they were vulnerable to S3 failing in one region, a thing that's happened many times. Now they've mitigated the S3-failure-in-one-region issue, at least mostly
41.
by ReidZB 7y ago
That's a relatively new feature (from November 2018... wow, has it been a year already?). My guess is that they implemented this stuff before that existed or maybe near to its release. I have not used origin failover either, though I&#
42.
by ReidZB 7y ago
If the "Cross-region replication" line in the picture is talking about the native S3 cross-region replication (as I assume it is), beware the replication latency in this setup. AWS recently released "replication with an SLA&q
43.
by ReidZB 7y ago
You can do this with `git add -p` as well, except maybe not trivially (ha). There's the 's' command to split hunks into smaller ones, and then there's also 'e' to open the patch in your editor where you can cha
44.
by ReidZB 7y ago
I agree 100%: if it provides good enough suggestions, it could pay for itself pretty easily on regular day-to-day PRs. (Although: not all 500 line PRs are made equal.) My original comment was definitely unclear. I actually had two separate
45.
by ReidZB 7y ago
The code review feature seems too expensive to run on every PR automatically (to me): $0.75 per 100 lines of code. From their example pricing: "if you have a typical pull request with 500 lines of code, it would only cost $3.75 to run
46.
by ReidZB 7y ago
> I believe there's a reason that homomorphic encryption has not been broadly accepted as an allowed standard. Well, yes... Practical homomorphic encryption is cutting-edge research, and standards bodies like NIST aren't going
47.
by ReidZB 7y ago
I think whether or not LASIK is suitable depends on corneal thickness, corneal steepness, and the level of correction needed, just as a baseline, or so it was explained to me. I was investigating intraocular lenses not too long ago as an
48.
by ReidZB 7y ago
I don't mind systemd and I've administered a lot of stuff with it at this point, well beyond just start/stopping services -- I've written plenty of unit files, written drop-in unit file overrides, written timer units,
49.
by ReidZB 7y ago
Do you count signals as inter-process communication? I'd argue they are, and the init system definitely needs to cleanly shut down the system (using signals, at least). What degree of inter-process communication is acceptable, then?
50.
by ReidZB 7y ago
I can confirm that. We had a single-AZ RDS instance whose underlying storage (a "magnetic" EBS volume) unrecoverably failed, according to AWS. It had to be restored from a backup. Fortunately, "point-in-time recovery" me
51.
by ReidZB 7y ago
They did add that: https://aws.amazon.com/backup/
52.
by ReidZB 7y ago
I do something similar, though I use git's built-in aliasing so that I keep everything namespaced under "git". Mine are, for example, "git st" (status), "git ci" (commit), "git co" (checkout), &q
53.
by ReidZB 7y ago
I agree that Fastmail's location is problematic, but other than that, I would argue it is a better Gmail already, features-wise.
54.
by ReidZB 7y ago
The latest Assassin's Creed games have single-player microtransactions. It's crazy: https://kotaku.com/ubisoft-explains-assassin-s-creed-odyssey... For instance, you could buy things like XP boosters, unique-appea
55.
by ReidZB 7y ago
Oh yes, definitely. But SHA-384's output is 128 bits wider, which uses more bandwidth. Although for the AEAD ciphersuites, it doesn't make much of a difference, admittedly.
56.
by ReidZB 7y ago
I'd expect very few clients to negotiate using SHA-384. It's widely viewed as overkill compared to SHA-256, and it hurts performance. I'm not saying it invalidates the benchmark results or anything—I just wanted to address yo
57.
by ReidZB 7y ago
Ah, sorry, I didn't mean to imply that Cryptol itself doesn't matter. It does seem very useful for its intended purpose (though again this is from an outsider's perspective). Rather, I meant to say that you do still need to w
58.
by ReidZB 7y ago
Well, it doesn't matter if Cryptol is compiled down to "safe" machine code, like FaCT, right? But that's not something I've seen explicitly stated in the Cryptol docs, so I would not make that assumption myself. A
59.
by ReidZB 7y ago
I admit I've only ever taken cursory glances at Cryptol, but it's never seemed like a replacement for the sort of low-level programming described in the article. If anything, it goes the opposite way - its Haskell base inherits on
60.
by ReidZB 7y ago
From hours and hours of studying math, those symbols are imbued with implicit meaning - in a way, they are simultaneously a data type, a name, and often a purpose or context (e.g. delta-x). That's a lot of information for such a compac

More ›