hannesm

5 ms·

1.
by hannesm 3y ago
What you already can do is attaching gdb -- either live or at a core dump. Please see https://github.com/Solo5/solo5/blob/master/docs/debugging.md for detailed instructions ;) What you as well can d
2.
by hannesm 3y ago
To be a bit more precise, what we achieved so far: apart from web servers and TLS reverse proxies (with DNS-backed let's encrypt provisioning), DNS authoritative servers, a CalDAV server, git client and servers, SMTP stack (including d
3.
by hannesm 3y ago
good news is that MirageOS can as well be executed in a seccomp context with only 5 or 7 system calls allowed -- see the spt target of solo5 https://github.com/solo5/solo5 -- also this great talk by mato https:/&
4.
by hannesm 3y ago
Some MirageOS developers were hired/acquired by docker -- though not the (open source) project, beither the code... There's still quite some work on MirageOS itself, including reproducible binary builds, VPN, DNS services, orchest
5.
A simple scheduler for OCaml 5 (effects, multicore)(discuss.ocaml.org)
2 points by hannesm 3y ago|1 comments
6.
by hannesm 3y ago
Amazing how little code is needed for that, and how clear the interface is... documentation and tutorials at https://docs.osau.re/miou/
7.
by hannesm 4y ago
srsly it's 2022 and they only have legacy IP and no IPv6?
8.
by hannesm 5y ago
Yes, this is an ordinary Linux binary. The attack surface is different, you may be interested in https://archive.fosdem.org/2019/schedule/event/solo5_unikern... and/or https://archive.fosdem.o
9.
by hannesm 5y ago
MirageOS is - similar to the latest OCaml release - only using a single CPU core. You can run multiple unikernels, one on each core. If doing that, you can use Xen vchan (shared memory), or TCP for marshalling. > Also I would say there a
10.
by hannesm 5y ago
Maybe https://hannes.robur.coop/Posts/Monitoring sheds some light how to monitor MirageOS unikernels ;)
11.
by hannesm 5y ago
We use asynchronous tasks in MirageOS (cooperative multitasking) using lwt http://ocsigen.org/lwt/latest/manual/manual , so you can serve multiple network connections at the same time. Since there are no proce
12.
by hannesm 5y ago
In ancient times, only Xen was supported. Nowadays, the support moved to: - Xen (PVH) - Linux KVM, FreeBSD BHyve, OpenBSD VMM - SPT (seccomp, no hardware virtualization) - virtio (GCE, ..) - muen (muen.sk) Take a look at htt
13.
by hannesm 5y ago
Highly recommend the history of English podcast, which goes deep into the topics https://historyofenglishpodcast.com/
14.
The Bitcoin Piñata – no candy for you – running since 3 years(hannes.nqsb.io)
2 points by hannesm 8y ago|0 comments
15.
by hannesm 10y ago
Processes? Seriously if there's only a single one, why would you waste resources on process management and process information? Just get over it ;) http://unikernel.org https://mirage.io :D
16.
by hannesm 10y ago
Looks like we're on a different Interweb, works for me; and travis was a spurious reporting problem, compiles fine (and is now green just to make you happy) :)
17.
by hannesm 10y ago
There's https://nqsb.io - now even with a libtls.so compat layer (you can LD_PRELOAD our libnqsb-tls https://github.com/mirleft/libnqsb-tls ) Being binary compatible with libssl.so is just insane (too m
18.
by hannesm 10y ago
Have you seen unikernel approaches like MirageOS ( https://mirage.io ), which challenge the POSIX basics of operating systems? If not, take a look :)
19.
by hannesm 10y ago
This is similar to my experience verifying imperative code (as part of http://itu.dk/research/tomeso ): rewrite code as pure as possible (learning that mutation is premature optimisation), then try to specify and prove
20.
by hannesm 10y ago
hmm, my other OS is MirageOS ( https://mirage.io ) -- also see https://nqsb.io contains my previous two years of work ;) I'd rather call it extensive exploration than fuzz testing what is in my mind...
21.
by hannesm 10y ago
The specification, as written in the RFC, is pretty useless... But luckily people sat down and formalised TCP/IP as spoken on the Internet (10 years ago, Linux-2.4.20/FreeBSD-4.6/Windows XP): https://www.cl.cam.ac.
22.
by hannesm 10y ago
You have seen the network semantics research project https://www.cl.cam.ac.uk/~pes20/Netsem/index.html ? It is a formal model of TCP/IP validated with Linnux 2.4.20/FreeBSD-4.6/Windows XP (yes, that
23.
ICFP programming contest 2015(icfpcontest.org)
2 points by hannesm 11y ago|0 comments
24.
by hannesm 11y ago
it is btw roughly http://nonwhiteheterosexualmalelicense.org/
25.
by hannesm 11y ago
why not then print a shared secret on your business card, and use the socialist millionaires problem ( https://en.wikipedia.org/wiki/Socialist_millionaire )? edited, added some explanation: (since there's a time spa
26.
by hannesm 11y ago
[author of jackline here] interesting idea, but since I'm not willing to audit all the other xmpp clients, I won't import any OTR private keys. I'm willing to import trusted fingerprints of contacts, though. also, imho people
27.
by hannesm 11y ago
some might have heard of this TLS stack as OCaml-TLS, but we rebranded it for our Usenix security paper. The paper includes an evaluation of common vulnerabilities in widely used TLS stacks in 2014.
28.
by hannesm 11y ago
this is impressive, and you can even first compile the unikernel as unix binary and run the webserver standalone, before deploying your virtual machine to your hosting provider!
29.
by hannesm 11y ago
it's in progress of getting deployed ( https://travis-ci.org/mirage/mirage-www/builds/68516629 ) -- raw source of the security page at https://github.com/mirage/mirage-www/blob&#x
30.
by hannesm 11y ago
A name, once taken, cannot be unclaimed. If the package should be removed, an empty delegation will be put there.

More ›