Titanous

16 ms·

91.
by Titanous 11y ago
Great question! We're aware of the Heroku issues, and they don't fully apply in our case. We currently do not have any queues in the router other than the kernel's accept queue. All incoming connections are assigned a gorouti
92.
by Titanous 11y ago
Thanks! Minimum high availability setup would be three nodes with 1GB of memory each, more memory if you're using a heavier application framework like Rails. When you run a scale command Flynn creates new application containers that ar
93.
by Titanous 11y ago
You can specify the host IPs explicitly instead of using the discovery service. The current snag for isolated clusters is that stock buildpacks require internet access to download languages and frameworks. We'll solve this, but some ad
94.
by Titanous 11y ago
Thanks! Tutum is a proprietary SaaS product that provides a web UI for Docker. Flynn is a full-featured open source platform, you don't need to think about containers, just your app.
95.
by Titanous 11y ago
> 1) Is this tool the same as Docker Swarm? No, it is much higher level. You could think of it as open source Heroku, apps are deployed using buildpacks and a PostgreSQL cluster is included. > 2) Has the code been security-audited? N
96.
by Titanous 11y ago
Yes, absolutely. We do a rolling deployment of new app instances, requests are not dropped.
97.
by Titanous 11y ago
We didn't really need all the features of etcd, this change is part of a longer term plan to only use Raft for leader election and service metadata with service instances propagated using cluster gossip. We also ran into some issues wi
98.
by Titanous 11y ago
No current plans, but if there's enough demand for it we'd be quite happy to implement it (or accept a contribution!). Please file a feature request on GitHub if you'd like to see it in Flynn: https://github.com&#x
99.
by Titanous 11y ago
Flynn CTO here, happy to answer any questions about Flynn. This is the first release in our stable channel with an update path, we'll be releasing weekly from now on. It may not be "production ready" for everyone, though plea
100.
by Titanous 11y ago
Thanks for the answer! WebCrypto is obviously a disaster, it is very unfortunate that new systems are being stuck with legacy crypto if they use it instead of non-native libraries.
101.
by Titanous 11y ago
Is there a reason why you're using RSA over Curve25519? RSA is old and rusty at this point and there's no good reason that I know of to be using it in new cryptosystems. To a much lesser extent I also have the same question about
102.
by Titanous 11y ago
Mozilla runs a root program that regularly enforces similar requirements on CAs. For example, they are currently discussing whether they will require the same of Symantec as Google or even more: https://groups.google.com/for
103.
by Titanous 11y ago
This is how the public certificate authority system is set up. The client vendors (Google, Microsoft, Apple, Mozilla) choose what the rules are for trusting a Certificate Authority and which ones meet the requirements. These "root prog
104.
by Titanous 11y ago
Flynn is a high-level platform that doesn't require you to think about low-level components like schedulers, overlay networking, service discovery, consensus, etc. Flynn does of course include a built-in scheduler and other components
105.
by Titanous 11y ago
The article says they got the AOL address from Verizon via pretexting.
106.
by Titanous 11y ago
Here's the actual filing from Apple: https://s3.amazonaws.com/f.cl.ly/items/2G372p3E1D0m3806001A/...
107.
RGJ attorney: Tesla guards roughed up journalist(rgj.com)
1 points by Titanous 11y ago|0 comments
108.
CS183C Session 8: Eric Schmidt(medium.com)
113 points by Titanous 11y ago|49 comments
109.
by Titanous 11y ago
An offline signing key was proposed as TACK: http://tack.io Unfortunately HPKP was adopted by the browsers and TACK has gotten no traction with the vendors, despite being a more flexible system.
110.
by Titanous 11y ago
The Lessig 2016 campaign also has a tech volunteer program[1], but it is officially endorsed (unlike Coders for Sanders), and all of the software developed for the campaign (including software developed by the paid folks) is open source, de
111.
by Titanous 11y ago
I have not personally asked, but I think the Archive Team has. I don't know the reasons behind the policy.
112.
by Titanous 11y ago
It's totally possible, they already have the infrastructure in place and 14PB of data available for download. Unfortunately the Wayback Machine data is not currently exposed publicly.
113.
by Titanous 11y ago
I really wish that the Internet Archive would provide bulk access to the Wayback Machine dataset. It would allow for a lot of interesting experimentation and research.
114.
American Airlines, Sabre Said to Be Hit in Hacks Backed by China(bloomberg.com)
1 points by Titanous 11y ago|0 comments
115.
by Titanous 11y ago
Yeah, I realize that depending on your toolchain it's not easily accessible. Ideally there would be a first-class implementation for each platform, but it looks like app stores are where we are headed. Though, that still leaves *nix pa
116.
by Titanous 11y ago
If you are implementing a software updater, you should use The Update Framework[0]. In this case, the compromise happened because a file server was hacked. A simple offline cryptographic signature (with proper verification) would have preve
117.
Important Security Announcement from PagerDuty(pagerduty.com)
76 points by Titanous 11y ago|30 comments
118.
by Titanous 11y ago
Note that without a separate Linux privilege escalation exploit, running QEMU in a least-privilege "container" for each VM should help stem the bleeding.
119.
by Titanous 11y ago
It is normal, but not desirable. You should feel free to exercise full disclosure if the vendor is not being responsible. > [W]ithout the threat of full disclosure, responsible disclosure would not work, and vendors would go back to igno
120.
by Titanous 11y ago
Shellshock and Heartbleed both provide good examples of why public exploit code is a net good thing. Researchers put Shellshock proof of concept exploit code into fuzzers[0] and managed to find five more bugs subsequently[1]. Heartbleed r

More ›