colmmacc

27 ms·

271.
by colmmacc 8y ago
Tesla Model S owner here. By choosing spots and times strategically I've gotten nearly 400MPH charging at the existing stations and the difference it makes to convenience is amazing. Super looking forward to 1000MPH! At that rate I can
272.
by colmmacc 8y ago
The case I think about the most is web fingerprinting. For example if the authorities in a country that funnels all external traffic through a point of mediation want to identify who is reading certain specific pages on wikipedia - they lik
273.
by colmmacc 8y ago
That's a tough call. We've thoroughly learned that not only should developers not build their own cryptographic primitives, but that they shouldn't even trivially combine them on their own. "Use AEAD" (or better yet
274.
by colmmacc 8y ago
Yes! I've experimented with server-side changes, but unfortunately the request length leaks information too, so the client needs to do something similar. In real terms, I think the consequence of the rapid mass-migration away from CBC
275.
by colmmacc 8y ago
Deep breath. I know that I'm going to be thought a heretical fool for saying this, but overall I would consider CBC mode "more secure" than GCM. Of course encrypt-then-MAC would be preferable (which TLS now supports, though i
276.
by colmmacc 8y ago
I understand this and I'm heartened that the Supreme Court majority continues to find that. I was getting at the distinction between what the majority ruled; that excessive fines are a breach of due process, which applies to all "
277.
by colmmacc 8y ago
As a permanent resident who lives in the US, the idea that basic protections of law should only apply to citizens is terrifying. It's not the same outcome at all. Due process is afforded to "persons".
278.
by colmmacc 8y ago
It can be easy to forget because we all sort of mentally accept it, but ChaCha20 is length preserving, and so is trivially vulnerable to by far the simplest network side channel: size based traffic analysis. AES-GCM is too, in the same way
279.
by colmmacc 8y ago
I wonder what percentage of the Canadian population can receive terrestrial TV and radio transmissions? I can pick up the Washington stations in Vancouver, BC and even as far north as Squamish in good conditions, and that's without a p
280.
by colmmacc 8y ago
That's probably what we will do. Rightly or wrongly, the new tool will probably accelerate it because I'm sure we'll be getting support queries from needlessly worried customers. Sometimes that kind of effort is good, but in
281.
by colmmacc 8y ago
Personally I have no appetite for breaking any customer. Sure they may be "in the wrong" because they have an old dig recipe, or a load balancer health check tool, or a latency measurers, or some kind of DNS canary, that mistaken
282.
by colmmacc 8y ago
Route53 absolutely does support EDNS0 and large answers without needing to truncate. The minor error reported is that Route 53 does not respond with a "BADVERS" error in response to a query reporting EDNS version 1. There is no ED
283.
by colmmacc 8y ago
Quite a lot of the undocumented immigrants in California are themselves California tax payers.
284.
by colmmacc 8y ago
Yes! you can do this with ALB, or also with Lambda@Edge. You can also use ACM with both to create and renew a certificate for your custom domain.
285.
by colmmacc 8y ago
AWS re:Invent, AWS's annual conference, is currently happening in Las Vegas. There are quite a number of headline announcements each day to go along with each keynote (there are 4 total).
286.
by colmmacc 8y ago
Global Accelerator: You get static IP addresses that are broadly announced over the Global AWS backbone. That means that traffic gets onto the AWS network ASAP and that network takes it from there. It's really useful even if you'r
287.
by colmmacc 8y ago
It's true ... but I think apart from 2008/2009, the stock price has exceeded its target every year, by quite a margin, so total comp has too.
288.
by colmmacc 8y ago
I'm not at the max base pay ... though I have gotten to the point where the majority of my comp is in stock anyway. It's always a gamble, but I have enough confidence in Amazon for the long term that given a certain total comp tar
289.
by colmmacc 8y ago
I've been an L5, L6, L7 and L8 at Amazon over the last 10 years. My experience is that once you've been here a while the total comp is a rollercoaster that follows the stock price. I haven't had a salary increase since I was
290.
by colmmacc 8y ago
Amazon Route 53 ( https://aws.amazon.com/route53/ ) supports Geo DNS and failover ... You can configure routing to be based on specific geographic boundaries/locations, or geographic proximity, or based on network l
291.
by colmmacc 8y ago
It's more important for the low-powered clients where native implementations tend to pay a lot of attention to conserving battery life, which is often the biggest consideration.
292.
by colmmacc 8y ago
I can't speak for Facebook, only for why we at Amazon have s2n. TLS/SSL is a critical piece of internet infrastructure and it involves some reasonable complexity: cryptography, networking, and state machines. When you have billio
293.
by colmmacc 8y ago
AWS s2n lead here! I don't think that's the case ... after all it'd be less work to maintain a branch than to build a whole new implementation. My understanding from meeting the FB TLS folks over the years is that they have t
294.
by colmmacc 8y ago
I think it's safe, based on a lot of experiments. We use 5 seconds for S3 ... ;; ANSWER SECTION: s3.us-east-1.amazonaws.com. 5 IN A 52.216.165.117 One of the biggest, highest traffic, systems on the internet!
295.
by colmmacc 8y ago
If you have a very high latency network, say a satellite link, make sure that your near-side resolver supports pre-fetching! Unbound is a good choice.
296.
by colmmacc 8y ago
AWS engineer here, I was lead for Route 53. We generally use 60 second TTLs, and as low as 10 seconds is very common. There's a lot of myth out there about upstream DNS resolvers not honoring low TTLs, but we find that it's very r
297.
by colmmacc 8y ago
This may be more common than is often realized. Also in Seattle, we (Amazon) use heat from the Westin colo/datacenter to heat some of our office buildings ... https://www.greenmatters.com/news/2017/11/22&
298.
by colmmacc 9y ago
I've been working on ELB day-to-day since 2013, first as Principal engineer and now as one of the AWS services I focus on and help out. I do have some special insight - feel free to AMA. I can get pretty deep on the TLS/SSL side i
299.
by colmmacc 9y ago
Label compression is pretty common, I think all of the big name server implementations do it by default. Amazon Route 53 definitely does it - I wrote the code! But my favorite thing about DNS label compression is probably this quote from DJ
300.
by colmmacc 9y ago
Nope! I mean https, most people send and receive email on a browser.

More ›