crawshaw

15 ms·

181.
by crawshaw 6y ago
It is a tricky tradeoff for startups. On the one hand, a startup has very limited resources and so has to focus on the business. On the other hand, a startup has to experiment to find the business. I don't think there's an easy an
182.
by crawshaw 6y ago
One problematic thing about App Store reviews as a developer is on each submission, Apple does a cursory review of the whole app. This means a one-line bug fix that is an improvement in anyone’s eyes can get caught on a detail that has been
183.
by crawshaw 6y ago
I have been consistently at odds with myself comparing CRDTs vs. OT. One the one hand, CRDTs have a nicer core formalism. On the other hand, OT works, and is closer to the actual driving events of text editing. The core argument of this art
184.
GVisor: Protecting GKE and Serverless Users(cloud.google.com)
2 points by crawshaw 6y ago|0 comments
185.
by crawshaw 6y ago
Someone took care of us when we were young. By the time we can be employed by major corporations for far more than the average family makes, we all owe a debt to those who care for the young. We cannot truly pay back those who took care of
186.
Lockhart's Lament [pdf](maa.org)
1 points by crawshaw 6y ago|0 comments
187.
Seeking Truth in a Time of Misinformation(raphlinus.github.io)
62 points by crawshaw 6y ago|51 comments
188.
by crawshaw 6y ago
A recent version of single-packet port knocking is the handshake in the Noise protocol: https://noiseprotocol.org/
189.
Bill Gates funding factories for 7 potential coronavirus vaccines(businessinsider.com.au)
12 points by crawshaw 7y ago|0 comments
190.
by crawshaw 7y ago
I've filed an issue for me to add a support email link. Will do another dashboard release in a couple days, thanks. As for alternatives, we tried chat but no-one used it, and it added a ton of heavy awful javascript to our website. You
191.
by crawshaw 7y ago
We are working on something fancier here, but it's tricky to get right so we haven't released it yet. To be clear: if you're going to share a google account, you should create a new empty google account to do it, and should a
192.
by crawshaw 7y ago
(Author here) FWIW, I wrote this blog post a long time ago, when I was trying to understand what the product we were building is and why I like it. I sat on it for months because I assumed it was almost entirely unrelatable. Eventually I re
193.
by crawshaw 7y ago
Large companies that want to remove us from the trusted group should run the coordination server on-prem. We have considered other certification options, but so far they boil down to running a part of the coordination server on-prem. Still
194.
by crawshaw 7y ago
Yes, you only get the public keys of machines you can talk to. Later the server asks the client to forget the key if they can no longer talk. Additionally, we rotate keys. For security sensitive users we can rotate these keys daily.
195.
by crawshaw 7y ago
Tunnels are created between any two devices that try to talk. It scales great, not concentrating connections makes it easy. Tunnels are very lightweight and the only machines with lots of tunnels are servers that are already provisioned for
196.
by crawshaw 7y ago
It can, though right now we only expose a few well-known providers. For business customers we can add providers, send us an email! Hopefully we can make this self-serve at some point. It's on the TODO list. (Tailscale co-founder)
197.
by crawshaw 7y ago
The client contains our most sophisticated code. It's also the most important from a trust perspective, it is responsible for securing your data, our servers cannot see anything of yours because of the client. So it's vital the im
198.
by crawshaw 7y ago
We have been thinking about load balancing as part of a general concept of services we want to roll out. Totally agree we need something. If you want to discuss it further, want to file an issue on github? (Tailscale co-founder)
199.
by crawshaw 7y ago
Install the client on two devices and log in with a Gmail account. That's it. They'll be assigned IPs and can reach each other. (I'm a co-founder of Tailscale.)
200.
by crawshaw 7y ago
Tailscale co-founder here: that's the guts of all the clients. (It almost works on macOS too as is, just a little more work to do.) We are still open sourcing our code, there's more to come but we haven't found the time to cl
201.
by crawshaw 7y ago
The standard deployment of CGNAT means the customer router gets a 100.64 address on the side facing the ISP, then NATs it with something like 192.168. So the cgnat range is not visible to the end user machine and there is no conflict if we
202.
by crawshaw 7y ago
It is surprising to see this here, but I see how it could be interesting. When we were experimenting very early on with Tailscale I went Googling around for IP ranges just to understand the space better and that was when I first discovered
203.
by crawshaw 7y ago
This is an example of garbage collection being more CPU efficient than manual memory management. It has limited application, but there is a more common variant: let process exit clean up the heap. You can use an efficient bump allocator for
204.
by crawshaw 7y ago
I think that's the way to do it. Possibly a smart switch could do it.
205.
by crawshaw 7y ago
Tailscale networks are private. The only way to access an IP is through a WireGuard tunnel. The only way to be in the WireGuard configuration file is to have linked your public key against your identity. Every packet has an identity attache
206.
by crawshaw 7y ago
I think this is a good move. Keybase had a certain quiet dignity to it. Everyone listed there was easily identifiable to me so there was never any confusion over who I was talking to, and it was easy to turn the notifications right down. We
207.
by crawshaw 7y ago
That is a really good question. I like the line "service mesh for the rest of us." But I want to take the time to get this side of the product right, so the service discovery features we have been working on will be rolling out sl
208.
by crawshaw 7y ago
If you haven't given WireGuard a try yet, now is a good time. Securely and reliably connecting all my devices with WireGuard was a big reminder to me that there's a much better internet hiding under the hub-and-spoke consumer serv
209.
by crawshaw 7y ago
We adapt the tricks from RFC 8445 to WireGuard so two nodes behind NAT routers can find each other.
210.
by crawshaw 7y ago
I have not heard the colloquial use of "zero trust" by service providers you mention. The baseline Tailscale product is not "you don't have to trust us" as we run the auth server. The variant of our product where yo

More ›