colmmacc

7 ms·

31.
by colmmacc 1y ago
Organizations such as the NFL forbid it, only the Green Bay Packers are grandfathered in as an exception. Owners are encouraged to threaten moves. Collective action is needed to undo the race to the bottom.
32.
by colmmacc 1y ago
It's not otherwise related to all this but a real bug bear of mine is that municipalities don't get part ownership - along with controlling rights for matters like sales or relocations - of sports teams when we subsidize their sta
33.
by colmmacc 1y ago
I think you're talking past each other and saying the same thing. There never was a Kaminsky bug. There was no new vulnerability. There was a new attack. Kaminsky figured out how to build a much more practical way to exploit what was k
34.
by colmmacc 1y ago
I found that post so cathartic. This whole episode reminds me of the story of the Citigroup Center in New York. Years after its completion, an architecture student uncovered that key supports for the building had been done incorrectly and u
35.
by colmmacc 1y ago
I remember tearing my hair out in the pre-2008 era as folks tried to get source-port randomization into Bind. The response was "That's what DNSSEC is for" ... which further supports your narrative. But it's still very da
36.
by colmmacc 1y ago
Here's we're talking about hybrid key-agreement. It's more like you agree secret A with a peer using the magic of Diffie-Helman, separately you make up secret B and encapsulate (which is basically a form of asymmetric encrypt
37.
by colmmacc 1y ago
I've rewritten some PQ implementations that had RCEs and memory disclosure vulnerabilities in them. No shade, but those implementations were from scientists who don't typically build production systems. As an industry, we're
38.
by colmmacc 1y ago
Hybrid schemes give you improved security against algorithmic flaws. If either algorithm being used is broken, the other gives you resilience. But hybrid schemes also double (or more) your exposure to ordinary implementation bugs and side-c
39.
by colmmacc 1y ago
I listened to your great podcast and the remark along the lines of "unencrypted police comms let the robbers know when the police are getting close" made me wonder if anyone has built a simple signal intensity detector for the enc
40.
by colmmacc 1y ago
We do both; automation never forgets.
41.
by colmmacc 1y ago
Without prejudging the COE; it won't surprise anyone to learn that there are bad actors out there who try "every trick in the book" to have accounts that they don't pay for, and lying to customer support is absolutely on
42.
by colmmacc 1y ago
In this case, I am high enough in that chain.
43.
by colmmacc 1y ago
Every week at AWS we have an account protection meeting; it's got the teams who handle fraud and abuse detection, compromised accounts (e.g. when a customer has a security issue on their side), non-payment, forgotten creds, as well as
44.
by colmmacc 1y ago
Ireland has a Citizens Assembly, which is selected by sortition. Ordinary citizens take time out of their lives to participate when assemblies are formed to examine issues of the day. The assembly receives expert and political testimony and
45.
by colmmacc 1y ago
A significant wrinkle in how NAT works is IP fragmentation. UDP datagrams can be larger than an IP packet. When that happens the payload is split into multiple IP packets, but only the first packet has a UDP header in it. The NAT device nee
46.
by colmmacc 1y ago
Nobody ever says "TLS Certificate". It's only an "SSL Certificate". On that alone, it's just easier to stick to "SSL" for consistency and everyone knows what you mean.
47.
by colmmacc 1y ago
FYI - many couples track cycles because they are trying to get pregnant.
48.
by colmmacc 1y ago
It's a separate "partition", with its own IAM accounts and orgs stack and everything. Similar to how US GovCloud is its own partition.
49.
by colmmacc 1y ago
Yes
50.
by colmmacc 1y ago
I work with a lot of smart people, many smarter than myself, and a goal I've always set myself is to leave them knowing less. Smart people are almost always more efficient at knowing more all on their own; they tend to be autodidacts a
51.
by colmmacc 1y ago
I'm not an expert on trade and tariffs, but my basic understanding from is that tariffs only apply to goods that cross borders. At the moment, most customers outside of the US have experienced a decrease in price because the dollar has
52.
by colmmacc 1y ago
I'm the VP / Distinguished Engineer leading the design, delivery, and operations of the European Sovereign Cloud. I'm in Hamburg right now for the AWS Summit tomorrow. To answer some questions here in one go - for the Europea
53.
by colmmacc 1y ago
At its height Skype made its money in surprising ways. There was a margin on Skype credits, which paid for calls into the regular phone system. But there was much more money in brand licensing. Time was you could buy not just "Skype ce
54.
by colmmacc 1y ago
Early one morning in August 2007 I was asleep in my apartment in Leiden and I got a call from my boss Dirk-Willem van Gulik to tell me that 1) Skype was having a global outage, 2) we had to help anyway we could, 3) scope, budget, people, no
55.
by colmmacc 2y ago
A long time ago I adopted a personal style of wearing bright colors. I have simple good fitting t-shirts in all colors. Glasses in blue and red. Shoes in yellow. Sandals in green. Jackets in orange. You get the idea. It's always easy t
56.
by colmmacc 2y ago
I'm not saying this in humor, I'm genuinely curious ... how do they handle Signal's absence of FIPS validation and FedRamp certification? Signal isn't even capable of being FIPS validated, the core cryptography is off NI
57.
by colmmacc 2y ago
Keep in mind that CAI can't stop you from pointing your camera at a copied or faked work. There's only so much it can attest to.
58.
by colmmacc 2y ago
GenAI producers have an incentive to watermark ... it helps them avoid consuming generated output for their own training processes. Most "attackers" aren't going to be sophisticated enough to use a modified non-watermarking t
59.
by colmmacc 2y ago
This brings back memories! Sometime around 2000 I forked PuTTY and made a version called "RedBrick PuTTy" that featured a one-click button to ssh to redbrick.dcu.ie - Dublin City University Networking Society's terminal serve
60.
by colmmacc 2y ago
Even at home, many home wifi routers do not have IPv6 enabled, and there are many in-home devices that still don't support it. Google's numbers for IPv6 connections used are significantly (about 40%) lower than the percentage of h

More ›