iangudger

7 ms·

1.
by iangudger 8mo ago
One of the big benefits that gVisor offers is that it doesn't require nested virtualization (or any virtualization). They released a new version that improves performance when not using virtualization a while back: https://g
2.
by iangudger 2y ago
It could be that you happened to find a period of rapid change, but it is also possible that you ran into the issue that raggi mentioned in the sibling comment.
3.
by iangudger 2y ago
I don't work on gVisor anymore. That said, I think it would be a tough sell. It would be a pretty big breaking change. Also, there is already a problem with people trying to send patches against the go branch and making it the default
4.
by iangudger 2y ago
If you want to use netstack without Bazel, just use the go branch: https://github.com/google/gvisor/tree/go go get gvisor.dev/gvisor/pkg/tcpip@go The go branch is auto generated with all of the
5.
by iangudger 4y ago
I believe this is entirely motivated by this policy: https://fuchsia.dev/fuchsia-src/contribute/governance/policy...
6.
by iangudger 4y ago
> That obviously doesn't work for a linux-on-fuschia compat layer. This isn’t actually true. gVisor contains full implementations of Linux syscalls and only relies on host syscalls being the same for some interoperability features b
7.
Able.ai exits stealth with $20M to help lenders speed up making high-value loans(techcrunch.com)
1 points by iangudger 4y ago|0 comments
8.
by iangudger 5y ago
Stairwell Inc. | REMOTE USA, VISA | Full-Time Stairwell is seed funded and recently came out of stealth mode as a new cybersecurity company that seeks to empower any team to defend against every attacker. It is composed of security industry
9.
by iangudger 5y ago
Stairwell Inc. | REMOTE USA, VISA | Full-Time Stairwell is seed funded and recently came out of stealth mode as a new cybersecurity company that seeks to empower any team to defend against every attacker. It is composed of security industry
10.
by iangudger 5y ago
Stairwell Inc. | REMOTE USA, VISA | Full-Time Stairwell is seed funded and recently came out of stealth mode as a new cybersecurity company that seeks to empower any team to defend against every attacker. It is composed of security industry
11.
by iangudger 5y ago
Stairwell Inc. | REMOTE USA, VISA | Full-Time Stairwell is seed funded and recently came out of stealth mode as a new cybersecurity company that seeks to empower any team to defend against every attacker. It is composed of security industry
12.
by iangudger 6y ago
Note that the first reply to the HN comment you linked to points out that the poster misread the graph.
13.
by iangudger 6y ago
I used 20% time for things that were related to my work, but out of scope for my team. For example, I wrote a DNS library in Go for work and then I open sourced it [1] and used it to rewrite the standard library DNS client [2] as a 20% proj
14.
by iangudger 6y ago
Behind a paywall. View here: https://archive.is/8SvA9
15.
Ex-Google security expert says new startup will defeat cybercriminal ‘A-Teams’(bizjournals.com)
1 points by iangudger 6y ago|2 comments
16.
Chronicle ex-CSO's starting a new company he doesn’t want you to know much about(techcrunch.com)
1 points by iangudger 6y ago|0 comments
17.
Show HN: Intrusive peap (pointer heap) in Go(github.com)
1 points by iangudger 6y ago|0 comments
18.
GVisor: A Container sandbox runtime focused on security, efficiency, ease of use(gvisor.dev)
7 points by iangudger 7y ago|0 comments
19.
by iangudger 8y ago
I work on gVisor. gVisor supports concurrent multi-treading, but should not be vulnerable to TOCTTOU, even in ptrace mode. gVisor handles system calls itself, it does not simply verify the args for app system calls and then pass them on to
20.
by iangudger 8y ago
I work on gVisor. The answer is that having a separate kernel is required to achieve a high degree of isolation and by definition Linux containers share a kernel with the host. A separate Linux kernel could work as well, but gVisor tries to
21.
by iangudger 9y ago
Java 8 is now supported with the full standard library: https://cloud.google.com/appengine/docs/standard/java/runtim...
22.
by iangudger 9y ago
If you want something faster than github.com/miekg/dns, there is golang.org/x/net/dns. I am the author, but I promise it is a lot faster. It is about an order of magnitude faster in my benchmarks.
23.
Show HN: Unofficial Native Go Runtime for Google Cloud Functions(github.com)
8 points by iangudger 9y ago|0 comments