champtar

12 ms·

91.
by champtar 5y ago
+1 for clickhouse
92.
by champtar 5y ago
In most (all?) public cloud you don't have real layer2, having the MAC computed from the IP allow to make a stateless ARP responder I guess
93.
by champtar 5y ago
In GKE it allowed to go from a hostNetwork pod to root on the node: http://blog.champtar.fr/Metadata_MITM_root_EKS_GKE/
94.
by champtar 5y ago
Security through obscurity is not security
95.
by champtar 6y ago
Sure, but we are talking about a single threaded program that is not doing crazy data processing at all. I'm all for Rust but there is a fairly steep learning curve.
96.
by champtar 6y ago
There is a lot of "logical" errors possible in a container runtime that no language will save you from. See CVE-2019-18837 https://github.com/containers/crun/pull/173
97.
by champtar 6y ago
I remember some years ago iPhone Activesync client was retrying 5 time the same login password on authentication failure (http 401), and our AD was locking people out after 5 attempts ... We ended up writing a small proxy to fix it server s
98.
by champtar 6y ago
A secure element is supposed to prevent key recovery, if you can this is a problem, so CVE.
99.
by champtar 6y ago
2020 is not over, rC3 ( https://rc3.world/ https://media.ccc.de/c/rc3 ) starts on the 27 ;)
100.
by champtar 6y ago
I had multiple corruption on a "server" at my parents, checked the disk and reinstalled from scratch 2 times, then I ran memtest86+ and found out one of the memory stick was faulty. Btrfs allowed me to detect that and be confident
101.
by champtar 6y ago
MetalLB in L2 or BGP mode
102.
by champtar 6y ago
I use Fedora on my VPS and up to date Firewalld is really limited compared to OpenWrt firewall3 config. Inter zone forwarding rules are still not a thing, MSS Clamping not sure, and not sure if there are anything close to OpenWrt mwan3. SFC
103.
by champtar 6y ago
Makes me think of an old tee-shirt I had: https://idata.over-blog.com/1/72/23/10/images-2/pixel_mort.j... ("yet another dead pixel"). RIP Russell Kirsch.
104.
by champtar 6y ago
I'm curious if the GPG signature is properly checked. There is no easy way to validate a GPG signature (ie fail if the file is not signed by X), you have to use a verbose machine mode and look for a specific string. GPG will happily de
105.
by champtar 6y ago
You assume that username are unique in this DB, maybe they support multiple password :)
106.
by champtar 6y ago
What I mean is it's like every insurance, they estimate the risk and collect enough money to pay for this.
107.
by champtar 6y ago
At some point someone is paying for the fraud, and it's not the bank, it's the merchant, that increase slightly the price to account for that, so in the end you pay for it. Same for cashback.
108.
by champtar 6y ago
If they want to migrate to something else, they need to have a look at ClickHouse. When switching from Elasticsearch to ClickHouse 1.5 years ago, I reduced my storage needs by 20, gained SQL, performance, and a ton of analytics features. In
109.
by champtar 6y ago
If you care about security, LXD people are just wonderful to work with, fix bug same or next day, fixed release the same week
110.
by champtar 6y ago
Not sure user namespaces are the default yet sadly
111.
by champtar 6y ago
The spec seems nice, but we need a unique app with a unique set of "diagnosis servers". When you take an international flight with one or multiple connections you are in contact with people from many different countries, should yo
112.
by champtar 7y ago
"Additional funding was provided by generous gifts from Intel" I want to know more ! Was Intel tired of this team finding a new CVE every 6 months they sent free AMD gears ? Edit: Intel is funding some of the Graz students (to wor
113.
by champtar 7y ago
One of the best 2h practical course that I had was just write the fastest square matrix multiplication. You could use any language, any algorithm, just no libraries. The target was a 32 core CPU server (this was ~10 years ago). At 5000x5000
114.
by champtar 7y ago
AWS recently had data loss https://news.ycombinator.com/item?id=20875489
115.
by champtar 8y ago
Just to be sure I understand fully, if I take a small embedded router running OpenWRT, that maybe take ~1min for the urandom pool to be ready. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;... On the firs