bgentry

40 ms·

391.
by bgentry 12y ago
No. Most of the edge cases arise from trying to parse an underspecified plaintext protocol. Everything in HTTP/2 is length-prefixed and unambiguously specified. That makes it dramatically easier to write a compliant parser or client.
392.
by bgentry 12y ago
If anyone wants to learn more about optimizing for HTTP/2, unwinding HTTP/1.1 hacks, and strategies to optimize for both versions at the same time, Ilya Grigorik's "High Performance Browser Networking" is an excelle
393.
by bgentry 12y ago
It's time to begin the long process of unwinding all the hacks that we've built to make HTTP/1.1 fast. No more concatenation of static assets, no more domain sharding. The future looks more like this, as the default, with no
394.
by bgentry 12y ago
The hard part is not in knowing how to construct the actual bomb. The hard part is enriching the requisite quantity of a fissile material. That's why the US and Israel went after Iran's enrichment facilities with Stuxnet.
395.
by bgentry 12y ago
Apparently "dirty" power is a major trigger for the wired Nest Protect's false alarms. It's not surprising that your vacuum cleaner was enough to trigger this. CloudFlare's CEO was ranting about his ~daily false ala
396.
by bgentry 12y ago
How well do you know the SNS team? :) https://twitter.com/blakegentry/status/539873715446878209
397.
by bgentry 12y ago
Sure, but going from memory on this :) As far as the Ruby SDK, my opinions are mostly based on how things were 2-3 years ago, when I wrote it off entirely after inheriting several large projects that made heavy use of it. In the past, it wa
398.
by bgentry 12y ago
It's awesome that they reached out to the authors of a promising community project[1] and adopted that, rather than building their own project from scratch. AWS' first-party client libraries are generally awful, but I think this o
399.
by bgentry 12y ago
I was coming here to post that same link. It's much longer, but contains many more specific situational examples, and more comprehensive advice.
400.
by bgentry 12y ago
Though you should read the blog post tomdale linked to in his reply, the short version of it is this: For many client side apps like Ember.js, a blank or mostly-blank HTML page is returned by the server. After the browser finishes loading t
401.
Announcing que-go: a Go port of the Ruby Que job queue for Postgres(bgentry.io)
4 points by bgentry 12y ago|0 comments
402.
by bgentry 12y ago
I hadn't seen the new cryptopals website for the Matasano Crypto Challenges. Looks very promising, and I'll probably be giving it a run very soon :) Are you accepting contributions for any of the solutions? I'd be happy to tr
403.
by bgentry 12y ago
Oops, that was my fault, I accidentally deleted the [pdf] when I edited the title to better reflect the paper's title.
404.
Attacks on ECDSA Signatures With Single-Bit Nonce Bias [pdf](irisa.fr)
43 points by bgentry 12y ago|14 comments
405.
by bgentry 12y ago
Looks like it's up now :) Thanks!
406.
by bgentry 12y ago
Doesn't look like it's been pushed to the canonical git repo or Github just yet: https://go.googlesource.com/go https://github.com/golang/go/releases Aside from that, this is yet another
407.
by bgentry 12y ago
As per the article I linked, it also likely nullifies the Klayman case, a case which could very likely turn out to have an even bigger effect than this bill.
408.
by bgentry 12y ago
I don't think the EFF has adequately answered the concerns raised by Marcy Wheeler about the risks and weaknesses of this bill: https://www.emptywheel.net/2014/11/12/why-i-dont-support-usa...
409.
by bgentry 12y ago
For ELB TLS termination, AWS already stores your TLS key securely in IAM, probably using some of the same underlying technologies. What sort of integration do you want between KMS and ELB?
410.
by bgentry 12y ago
Looks like issue #4800 is the place where it's tracked: https://code.google.com/p/go/issues/detail?id=4800
411.
by bgentry 12y ago
That's a very useful new type that I hadn't seen in the commit logs. Thanks for pointing it out!
412.
by bgentry 12y ago
You should get an email either way. They may not show up until late this evening PDT.
413.
by bgentry 12y ago
Looks to be inspired heavily by Go's net/http package and its interfaces: http://golang.org/pkg/net/http/
414.
Move Fast, Don't Break Your API(heavybit.com)
2 points by bgentry 12y ago|0 comments
415.
by bgentry 12y ago
There are a lot of extra costs in RDS that this calculation excludes: bandwidth, disk I/O, storage and backups. All that stuff is included in Heroku Postgres. Also, you're likely to get much better perf out of the $50 Heroku plan
416.
by bgentry 12y ago
At some point in the not-too-distant future, anything other than full 100% verified HTTPS should have a red "danger" icon.
417.
by bgentry 12y ago
The article doesn't mention whether the stolen machines' hard drives were encrypted or not, though I guess we can assume they weren't based on the level of concern being raised =/
418.
by bgentry 12y ago
Why would they brick phones, costing each user (and likely themselves when the users sue) hundreds of dollars in damage when they can easily disrupt phone service in an area for a controlled period of time or block specific subscribers at
419.
by bgentry 12y ago
> Indeed, some of his fellow travelers have already committed some egregious mistakes. Last year, Greenwald found himself unable to open the encryption on a large trove of secrets from GCHQ—the British counterpart of the NSA—that Snowde
420.
by bgentry 12y ago
Actually the article includes a link to a study on Community Fiber which included San Francisco: http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2439429 I haven't read it, but maybe this means there is an SF ne

More ›