colmmacc

17 ms·

151.
by colmmacc 3y ago
Several other protocols solve this in a layering agnostic way by simply having a header length field. The header bytes can then be copied without any understanding of the format. This is even how IP's own ICMP protocol knows how much o
152.
by colmmacc 3y ago
TCP does not use IP fragmentation, and the IP packets are marked "Don't fragment". TCP performs its own fragmentation and every packet gets a TCP header in its leading section. A NAT, Firewall, or end-host can L4 route the TC
153.
by colmmacc 3y ago
There's a number of UDP protocols that have large enough payloads to fragment. DNSSEC and EDNS0 in particular made it much more common, though the EDNS0 flag day in 2020 partially undid some of the damage by getting folks to ratchet do
154.
by colmmacc 3y ago
UDP is actually more expensive to NAT than TCP is. The reason is UDP fragmentation, which is my vote for the worst, and least forgivable, design error of TCP/IP. Instead of putting the fragmentation in L4 (like QUIC now does) and inclu
155.
by colmmacc 3y ago
A great amount of modern systems is copying data from A to B to C. The construct of frontends and backends implies it, or middleware, or proxies, or distributed storage, or blockchains. Even in the most complex systems, latency is one of th
156.
by colmmacc 3y ago
I've seen operating on unauthenticated plaintext enough times to list it as my own pet peeve with AES-GCM. But it's a problem for chunked messages too. A few years ago we released a SCRAM mode that makes very minimal changes to AE
157.
by colmmacc 3y ago
It doesn't matter for FizzBuzz, but in general JIT should really out-perform "native" statically compiled compilers on most real-world workloads. While there's a small penalty for the profiling JIT needs, there are massi
158.
by colmmacc 3y ago
Neither the Japanese, Chinese, Irish, German, nor Mexicans were subject to chattel slavery; it's a unique heinous wrong in American history. Native Americans and First Nations peoples suffered genocide and civilizational erasure, anoth
159.
by colmmacc 3y ago
Congrats to Apple on completing another IA migration! It really is an incredible accomplishment to get such a massive base of customers, partners, and developers to run on a new architecture so quickly and relatively seamlessly. I remember
160.
by colmmacc 3y ago
I work at AWS so I'm not neutral here, but how would this even work? Now that web and app traffic is encrypted, mobile providers can "see" what websites and app you access via your DNS lookups and destination IPs, and only so
161.
by colmmacc 3y ago
That seems exactly backwards. With DNSSEC zones are controlled and signed by a single authority, and for CCTLDs that authority is controlled by ... the government. If they wanted to produce a malicious signature and serve it narrowly to a t
162.
by colmmacc 3y ago
You're right of course, but these days engine braking is most commonly used by tow vehicles, whether that's a family car or a big hauler. Either way when towing, these are generally required to have trailer brake controllers that
163.
by colmmacc 3y ago
I lived in four countries before moving to the USA and none of them required me to file at all. As an ordinary employee, taxes were PAYE (Pay as you Earn) and there was no complicated system of tax exemptions that aren't either handled
164.
by colmmacc 3y ago
Lorient in Brittany hosts an Interceltique festival; it's a cross-cultural festival that celebrates art, food, language, but it's centered around music and features the best bands from Ireland, Scotland, Wales, The Isle of Man, Co
165.
by colmmacc 3y ago
Has a single significant Apple launch not leaked in the last decade? I can't think of any. With the scale of the company and corporate loyalty being what they are these days, it just seems inevitable that many things will leak. Yet A
166.
by colmmacc 3y ago
Never mind houses, what about gas/petrol? It always seems to be more expensive in dense cities, even though there is greater competition and economies of scale (e.g. delivery of the fuel to the stations) while it tends to be cheaper in
167.
by colmmacc 3y ago
Having lived in several places in Ireland and in the US, I think the dynamics are very similar. I live in Magnolia in Seattle, where the city planning meetings, Facebook groups, and NextDoor forums have many neighbors objecting to the first
168.
by colmmacc 4y ago
I had lived in the US for 7 years on visas before I could apply for a green card. It was only that point that the system asked for a medical to get inoculated and check if I had any communicable diseases like HIV or TB. That definitely seem
169.
by colmmacc 4y ago
It's very worth doing in this context ... almost all of the assembly I've written in the last ten years has been on routines like this. Compilers are very smart, but it's hard for them to optimize concurrent and interleaved c
170.
by colmmacc 4y ago
This isn't so for every kind of music. Folk musicians, who mainly play small venues and even house concerts, would make $100 to $300 per show from selling CDs. The merch table at a Jazz club would mostly sell CDs and depending on the s
171.
by colmmacc 4y ago
Operating 8.8.8.8 likely gives Google a near-complete list of every active domain on the internet, and new domains show up there the second any 8.8.8.8 user queries it - which is likely well before anyone links to it. I have no idea if Goog
172.
by colmmacc 4y ago
I love LibreSSL and what they represent, but neither LibreSSL nor BoringSSL target all platforms or compatibility with OpenSSL, which can be a bit of a challenge ... and I don't think LibreSSL is likely to have FIPS certification. At t
173.
by colmmacc 4y ago
It's more than what a Yubikey typically does. There are also can't-be-bypassed audit logs of the key usage, and the manner in which S3 is granted access to the data encryption key is very fine-grained; KMS won't allow the S3
174.
by colmmacc 4y ago
If you use the default AWS managed key rather than a CMK, it's largely the same levels of protection and the main difference is that you don't control the rotation schedule of the top-level key. And yep, a CMK can span many servic
175.
by colmmacc 4y ago
No AWS employee has access to the keys directly from KMS. It's a hermetic system with no operator access like that. KMS Keys are released to AWS services for use based on IAM permissions and grants, and a time-bounded cryptographic pat
176.
by colmmacc 4y ago
AWS isn't monolithic internally and we use permissions boundaries between systems like S3 and KMS (in fact they are mediated by IAM). There's some more detail in my talk from re:Invent - https://www.youtube.com/wat
177.
by colmmacc 4y ago
The biggest benefit is compliance. Many customers have to satisfy external regulators or internal compliance teams who mandate encryption at-rest. Those requirements are typically designed for relatively low-security on-premises data-center
178.
by colmmacc 4y ago
You're right, but caching would be much less effective and this would place a larger load on authoritative servers, especially the roots and TLDs. In-practice it would be less reliable too; there are a lot of DDOS-mitigation techniques
179.
by colmmacc 4y ago
FWIW I suspect that by running 8.8.8.8, Google get a lot more positive value out of direct visibility of the relative popularity of domains, and common typos, than anything else. Some ISP DNS services do use NXDOMAINs for search ("Did
180.
by colmmacc 4y ago
Definitely off-topic but I wouldn't be so sad. I grew up speaking Irish at home and at school, and at the time that was very uncommon outside of a Gaeltacht. Now there are many many more Irish speaking schools, just in the area I grew

More ›