bradfitz

9 ms·

61.
by bradfitz 2y ago
Note that the 9front patches to run Tailscale are still in progress. I was just told they'll be ready in a couple weeks. For now only 9legacy (with all the latest changes) works.
62.
by bradfitz 2y ago
Weird. It's just Vercel on AWS. We have no alerts firing about any probers having cert errors or anything. I wonder what your employer/policy doesn't like.
63.
by bradfitz 2y ago
We actually have that nowadays... the config file support to tailscaled, as Irbe mentioned on the bug Jan 2024: https://github.com/tailscale/tailscale/issues/1412#issuecomm...
64.
by bradfitz 2y ago
I think so! Caveat is I've never really used Plan 9 outside of single-user VMs.
65.
by bradfitz 2y ago
Happy to answer any questions! A bunch of us are currently in https://meet.google.com/qre-gydb-mkv chatting about this. (Edit: the hour is over; we all left) The earlier Apr 1st blog post was https://tailscale.co
66.
by bradfitz 2y ago
It's real. (Source: I spent too many weekends on this :))
67.
by bradfitz 2y ago
We tried this a few years back with a very loaded Go server using SQLite (actual C SQLite, not modernc.org/sqlite) and something made performance tank... likely some difference between glibc and musl. We never had time to hunt it down.
68.
by bradfitz 2y ago
I tried to scroll the map that said only “blowjob" for the US and "not enough data" for all other countries and as I went to scroll it on mobile, an overlay helper text in a similar font said "Use two fingers"
69.
by bradfitz 2y ago
That was actually something we debated launching before Tailscale SSH but ended up doing Tailscale SSH first because the state problem for compute was annoying and we'd seen the App Engine etc progression through the problem space and
70.
by bradfitz 2y ago
https://hackaday.com/2025/01/17/new-bambu-lab-firmware-updat... has a summary that caught me up. I feel like it must be missing some of the story though.
71.
by bradfitz 2y ago
https://www.hdmi.org/spec21sub/cablepower
72.
by bradfitz 2y ago
I still miss the 27" iMacs. They were such a great form factor.
73.
by bradfitz 2y ago
That was what I started to do with Perkeep.org but never find enough time to work on it. At one point I had it importing from all my social media sources but of course everybody broke their APIs. Sigh.
74.
by bradfitz 2y ago
If it weren't, then you'd need servers and it couldn't be serverless! :)
75.
by bradfitz 2y ago
BTW, that code changed just recently: https://github.com/tailscale/tailscale/commit/1c972bc7cbebfc... It's now a AF_PACKET/SOCK_DGRAM fd as it was originally meant to be.
76.
by bradfitz 2y ago
(Tailscale employee who worked on this) As patrakov said above, we don't bind at all with the OS kernel. The packets come in, are Wireguard decrypted (in userspace) and then TCP/IP is also done in userspace (gvisor) before Tailsca
77.
by bradfitz 2y ago
Careful. We (Tailscale) tried to use static Go binaries a year or two ago built with Zig (zig cc) and the SQLite performance was atrocious. It passed all our tests but it didn't survive deploying to prod. It was a very quick (and uneve
78.
by bradfitz 2y ago
Go used to do raw syscalls on macOS but changed. Same with some BSDs. Go always did ~libc on Windows (and Solaris) and still does. Go still does raw syscalls on Linux, as that's a stable ABI.
79.
by bradfitz 2y ago
Per their docs, yes: https://github.com/leaningtech/webvm/blob/main/docs/Tailscal...
80.
by bradfitz 2y ago
I'm suddenly reminded of an old tweet of mine: https://x.com/bradfitz/status/825404204055359488 "A moment of silence please for all the babies who fell off not-so-Sturdy Station v1. #ScaryVersionNumbers&
81.
by bradfitz 2y ago
> It uses an AI-based method involving drones to calibrate the mirrors 200 times faster compared to traditional techniques using cameras, Synhelion says. Precision is key to ensure the mirrors track the sun and efficiently reflect its li
82.
by bradfitz 2y ago
We need more languages with "moreover" as a keyword.
83.
by bradfitz 2y ago
"Fuck Everything, We're Doing Five Heads"
84.
by bradfitz 2y ago
489151 here. I even got a job offer from ICQ back in the day. One of the perks they offered was a small ICQ number ending in zeros. I didn't take the job offer because I was in high school, though, and wasn't even looking for a jo
85.
by bradfitz 2y ago
goimports has special-cased math/rand.Read vs crypto/rand.Read from basically the beginning. But https://github.com/golang/tools/commit/0835c735343e0d8e375f0... in 2016 references a time window wher
86.
by bradfitz 2y ago
Longer domain names are more secure!
87.
by bradfitz 3y ago
Obligatory mention of this book title: Die GNU Autotools https://a.co/d/bQyvEYm And classic tweet: https://x.com/timmartin2/status/23365017839599616?s=46 ... "I saw a book entitled &quot
88.
by bradfitz 3y ago
To be fair, it didn't help the provider's docs were inconsistent about whether dns-01 or http-01 was to be used.
89.
by bradfitz 3y ago
It doesn't. That was one of our mistakes and action items to fix. The original proxy was stood up quickly when it was first discovered IPv6 was broken and the people standing up the proxy didn't know at the time how ACME worked.
90.
by bradfitz 3y ago
That is exactly what I want us to do :)

More ›