colmmacc

20 ms·

211.
by colmmacc 5y ago
I think we're getting closer to TLS1.0 disabled by default, but there are still clients out there and that's all they do. Especially embedded systems. It's a good practice to turn off old protocols but it has to be balanced w
212.
by colmmacc 5y ago
One serious downside is when negotiating purchases like cars, houses, or anything else with some aspect of deal-making. It can go both ways. A more transparently high earner may get a much worse deal on a car than they otherwise would have,
213.
by colmmacc 5y ago
There are also documentation and example IP prefixes! 192.0.2.0/24 and 2001:db8::/32.
214.
by colmmacc 5y ago
I'm really suspicious about whether this would really work out in most workloads. On modern architectures, it's the random memory reference that kills performance. Predictive pre-fetching in the pipeline has a impossible time figu
215.
by colmmacc 5y ago
Our reason for this is that customers may have IP-based rules in their IAM policies. If we silently turned on IPv6 for existing endpoints, those policies would suddenly break without notice. Hence new names and SDK options for dual-stack.
216.
by colmmacc 5y ago
I work at AWS, but I wasn't involved in this feature, so this isn't anything more than speculation on my part. I've certainly talked to customers who would time their reserved instances and savings plan purchases based on the
217.
by colmmacc 5y ago
I work on cryptography at AWS, and long before that I worked on Skype a bit, so I can't resist commenting! Wickr features end to end cryptography, https://wickr.com/wp-content/uploads/2019/12/WhiteP
218.
by colmmacc 5y ago
O.k. before I comment I have to disclose that I sometimes work on blocking domain fronting abuse (here's a blog post from me - https://aws.amazon.com/blogs/security/enhanced-domain-protec... ) so I have a bit
219.
by colmmacc 5y ago
As a Signal user and moxie fan I love that post, but I worry that it places Signal in legal peril from Apple. My fear, and prediction, is that the authorities will frame this as an even more egregious attack on law enforcement and that in
220.
by colmmacc 6y ago
Queries to ALIAS records that are AWS resources (ELB, CloudFront), etc are indeed free. The reason is directly related too; we want to be able to raise and lower the TTL value without customers being impacted.
221.
Reliability, constant work, and a good cup of coffee(aws.amazon.com)
1 points by colmmacc 6y ago|0 comments
222.
by colmmacc 6y ago
I'm biased because I work at AWS, and even more biased because I now work on our IAM team, but I really like AWS SIGv4 and IAM policy. SIGv4 signing itself is request-level, and is incredibly simple with a tiny pre-authorization TCB. I
223.
by colmmacc 6y ago
I love this summary, which is better than I could have written myself, and feel no need to clarify. Instead I'll add the origin story of my dislike for mTLS. Not too long into my tenure of being an active maintainer of Apache httpd I s
224.
by colmmacc 6y ago
In general, the benefit of encryption is 1/ defense in depth by requiring an additional secret and 2/ the reduced size of that secret you have to protect. E.g. you can protect a 2GB top secret data trove with a 128-bit AES key. Th
225.
by colmmacc 6y ago
The main benefit of peppering is that if your password hashes are compromised (read: stolen) ... they can't be brute-forced. Password hashes such as argon2 make brute-force cracking more expensive, but nothing can help you all that muc
226.
by colmmacc 6y ago
For almost any real world application, where people's data and businesses are at stake, developer convenience is a distant priority to security. Of course it's great when we can have both, and making secure solutions the most conv
227.
by colmmacc 6y ago
Here's Doris Lessing being told she won the Nobel Prize for Literature: https://www.youtube.com/watch?v=vuBODHFBZ8k The committee hadn't managed to contact her. I can't be sure, but I'd bet she would hav
228.
by colmmacc 6y ago
OP here. If parameter s is big, then the branches can be taken quite often, but they also happen up to 2^63 of the times, so it's essentially a single bit bias that is measurable via timing (maybe, if you're very lucky). If s is
229.
by colmmacc 6y ago
In modern times, the keys on a SSL certificate don't directly encrypt the session key used to protect communications between your browser and web-server. Instead the key only signs the diffie-helman share that a web server uses. Web-s
230.
by colmmacc 6y ago
There isn't enough space in bluetooth IDs to include a cryptographically signed timestamp, there isn't even really enough space to include a cryptographic signature for everything ... in the the Apple/Google design the Blueto
231.
by colmmacc 6y ago
I think it's a pretty straightforward equilibrium. Most people, including good performers, don't want to bounce around jobs and consider it a reasonable personal cost to change their commute, learn new systems and processess, buil
232.
by colmmacc 6y ago
Don't use slide presentations for business meetings. Ever. Write a document or a memo instead. Every time. Slides are ok as a backdrop for a talk, as long as that talk works as its own cohesive narrative. Slides are also ok as a last r
233.
by colmmacc 6y ago
One of my favorites is to build a DRBG; download one of the NIST DRBG specifications and try to implement it and have your implementation's output match the test vectors. You'll be building cryptography without having to design or
234.
by colmmacc 6y ago
I'm saying that working on Cryptography can also be a solid math education. You can start with very basic high-school math; primes and finite fields, extend to algebra, formal logic, information theory, codes, probability, elliptic cur
235.
by colmmacc 6y ago
I don't think you need even an undergraduate education in mathematics to get into cryptography; for many people it's the other way around. Cryptography can be a great motivator to learn the underlying math. Concepts that may have
236.
by colmmacc 6y ago
Boeing has Hilton Garden Inns hotels right at Everett field where the wide-bodies are made, and in Renton where the 737s are made. They're a sight to see because they seem very very out of place. But they do a steady trade in Boeing at
237.
by colmmacc 6y ago
Skype's founders are Danish and Swedish, and the business had offices in London, Luxembourg, Estonia (well that's Blue Moon, where the p2p was developed) and more. I'm not sure how much diligence Ebay ever did on their purcha
238.
by colmmacc 7y ago
They're not the same and I think Google/Apple's is a bit better. In DP3T the infected person shares a single daily key from which all future daily keys can be derived. In Google/Apple's each daily key is HKDF derive
239.
by colmmacc 7y ago
Europe is a huge advertising and services market. Excluding it would put a huge dent in Google's profitability.
240.
by colmmacc 7y ago
Seattle council has voted for an income tax on highly paid residents (2.25% on everything above $250k), but income taxes are nominally unconstitutional in Washington State. It's been working its way through the state courts for years.

More ›