delroth

20 ms·

151.
by delroth 7y ago
No, that's what reproducible builds are all about: https://reproducible-builds.org/ Debian is currently sitting at around 93% of packages being reproducibly built. NixOS is close to 99% of the minimal install image set
152.
by delroth 7y ago
I can't follow your reasoning. How does Google's business model justify allowing 3rd party Chrome extensions to snoop on user traffic?
153.
by delroth 7y ago
One option is to get one of the many OpenWRT compatible routers -- something like 80% of them will run on a MIPS CPU (though the trend is starting to switch to ARM for more recent platforms). That's how I got started with MIPS developm
154.
by delroth 7y ago
Project Zero is a tiny subset of Google's security team. And while they do have an unusual concentration of extremely competent security researchers, it's not like they are the only competent security researchers/engineers in
155.
by delroth 7y ago
r13y.com tracks the progress for NixOS reproducibility (well, for the tiny subset of nixpkgs that forms the minimal ISO image at least).
156.
by delroth 7y ago
And downgrade attacks are mitigated by MTA-STS: https://www.hardenize.com/blog/mta-sts Not supported by everyone just yet since this is a new standard, but Gmail at least supports it.
157.
by delroth 7y ago
https://en.wikipedia.org/wiki/Capture_the_flag#Computer_secu... https://ctftime.org/ctf-wtf/
158.
Helping organizations do more without collecting more data(security.googleblog.com)
4 points by delroth 7y ago|1 comments
159.
by delroth 7y ago
Anyone got a link to the actual poll and/or the precise questions that were asked? As far as I can tell the original source for this article is a press release from a UK digital healthcare company [1]. There is a fairly obvious conflic
160.
by delroth 7y ago
> If you've listened to some of my talks or spoke to me (I'm sorry for you), you know I'm a bit critic of those programs, because they give money to find the issues, not to fix them. >> What about you give money to V
161.
by delroth 7y ago
https://mobile.twitter.com/LeaKissner/status/113669152310428...
162.
by delroth 7y ago
Zanzibar is basically the brainchild of a Bigtable Tech Lead + a Principal Engineer from Google's security and privacy team [1]. This led to a very sound and robust original design for the system. But it also greatly evolved over time
163.
by delroth 8y ago
https://blogs.bing.com/Webmaster-Blog/September-2018/Introdu... Disclaimer: I work at Google, nothing related to AMP or search.
164.
by delroth 8y ago
They do. A trivial example is input recording for replays -- if you don't have a very similar FP implementation, the replays will desync: https://www.youtube.com/watch?v=XxGg1TCpYrc Collision detection is sometimes als
165.
by delroth 8y ago
Not even. There was an emulator for the Wii U while the console was still seeing new releases, and no "chasing" happened. Similarly, there are at least 2 Switch emulators in development, and I haven't heard of any legal troub
166.
by delroth 8y ago
> Wait, is this accurate? I remember back when Chrome was released, people were talking about how it used parts of both WebKit and Gecko, and the exact specs of which rendering was used changed based on the website. You are misrememberin
167.
by delroth 8y ago
Note that the OSPO policies have largely changed since you've left Google. What you describe was definitely the situation as of 3-4 years ago, but don't describe how open sourcing code or contributing to FOSS projects works these
168.
by delroth 8y ago
Quite the opposite, it's a perfect example. Nuclear is also the safest means of energy production if you account for deaths caused by pollution, mining, and other indirect factors. And similar to air travel, people think it's unsa
169.
by delroth 8y ago
What is your source for Google having moved on from MapReduce in 2004 (date when the MR paper was published)?
170.
by delroth 8y ago
There is support for better codecs on Linux, it's just not shipped by default on most distros unfortunately. https://github.com/EHfive/pulseaudio-modules-bt
171.
China Appears to Block Microsoft’s Bing as Censorship Intensifies(nytimes.com)
4 points by delroth 8y ago|0 comments
172.
by delroth 8y ago
I'm perfectly comfortable sending my DNS traffic to 8.8.8.8. I have a pretty good understanding of how Google handles my DNS data, and I don't have any specific reason to trust Cloudflare better.
173.
by delroth 8y ago
Same experience here. Tweeted at them saying my latency to Hetzner had regressed by 10ms (w/ smokeping graph as proof). They replied the next day saying "we fixed it", and actually improved latency by an extra 5ms from my pre
174.
by delroth 8y ago
This is very relevant: https://theintercept.com/2018/09/21/google-suppresses-memo-r...
175.
by delroth 8y ago
Nothing to do with GDPR, in fact the breach predates it (2016). The Netherlands already had regulations in place that mandate reporting data breaches, through the Dutch Data Protection Act.
176.
by delroth 8y ago
You say "gaming consoles", but really I think I've only seen it in the Xbox 360. Was it deployed anywhere else that I missed?
177.
by delroth 8y ago
GCP has zones in India, Singapore, HK, Taiwan and Tokyo (+ Osaka planned). https://cloud.google.com/about/locations/ Disclaimer: I work at Google, am technically part of Cloud, do not work on anything related to G
178.
by delroth 8y ago
You're looking at the 90th percentile, he's looking at the 99th percentile. Claiming things like "everyone uses UTC internally" is obviously wrong when many people just a few years ago were still setting up systems in lo
179.
by delroth 8y ago
https://www.patreon.com/seriallos (number 17) is software. So is https://www.patreon.com/RaiderIO (number 99).
180.
by delroth 8y ago
/64 and /48 are pretty much on the same order of magnitude as IPv4s in terms of difficulty of acquisition, and I don't know why you would ever look at more than /64 when most major operating systems randomize the last 64

More ›