jacobparker

10 ms·

31.
by jacobparker 7y ago
> free https://en.m.wikipedia.org/wiki/Gratis_versus_libre
32.
by jacobparker 7y ago
Curl it, check the sha256 of the download vs a hardcoded one and then source it if they match? The URL you curl could be a GitHub blob URL (theoretically immutable) but if you check the hash you’re not trusting GH for anything other than av
33.
by jacobparker 7y ago
> You are totally correct that to achieve the same performance, correctness, and overall master level "green"ness in a multirepo system you would have to either define or detect dependencies and dependent repos, build the entir
34.
by jacobparker 8y ago
There's some public documentation on the "one version" policy here: https://opensource.google.com/docs/thirdparty/oneversion/
35.
by jacobparker 8y ago
The history is truncated on GitHub. (first real commit is https://github.com/Microsoft/calculator/commit/c13b8a099eea1... ) They're using GitHub to merge PRs now. Was this source previously in the Window
36.
by jacobparker 8y ago
No, it's still about security, in a defense-in-depth sense. Even if your trusting CA's in this context they all count as attack surface: CAA helps minimize it. For example, it's possible that a CA's validation process ha
37.
by jacobparker 8y ago
No, it can't be falsified by JS in the browser. CORS is only relevant for JS in the browser; it doesn't impact curl at all, for example.
38.
by jacobparker 8y ago
Could you send it to jacob at-sign solidangle.ca? I would greatly appreciate it. I couldn't find your contact information. It might be good to add it to your profile for other people.
39.
by jacobparker 8y ago
Fun article! A modern way to do this on Linux (specifically) is to use PID-namespaces for isolation. You can pass CLONE_NEWPID to the flags argument of clone(2) so that the new process is PID 1 in a new PID-namespace. One of the special pro
40.
by jacobparker 8y ago
Shameless plug: Here's a minimal UI for browsing r/politics/rising specifically: * https://www.f6oclock.com * https://www.f6oclock.com/#ninja if you want something more discrete It updates live an
41.
by jacobparker 8y ago
Some friends and I have http://f6oclock.com (open-office mode: http://www.f6oclock.com/#ninja ) for reading r/politics (a guilty pleasure). I like minimal UIs. Showing Reddit in an HN skin is a pretty funny
42.
by jacobparker 8y ago
I took Watrous’s theory of (classical) computation course during my UW undergrad. His lecturers were always very well prepared and engaging, the notes he released (iirc there were some supplementary notes) were great and his assignments wer
43.
by jacobparker 8y ago
> As the robustness principle goes [...] "The Harmful Consequences of the Robustness Principle" https://tools.ietf.org/html/draft-thomson-postel-was-wrong-0...
44.
by jacobparker 8y ago
> Do you have something to back that up? This to me reads like you imply that Elasticsearch does not work and scale. https://www.elastic.co/guide/en/elasticsearch/resiliency/cur... https://
45.
by jacobparker 8y ago
A random thing I just remembered: https://github.com/id-Software/Quake-III-Arena/blob/dbe4ddb1... They implemented adaptive huffman coding but ironically only use it during static initialization, feeding it w
46.
by jacobparker 8y ago
I really like Quake 3's code. My favorite parts are: - The client/server network protocol and syncing state - The VM architecture (e.g. most of the game can be compiled by LCC into a custom byte code and interpreted. This was for
47.
by jacobparker 9y ago
Have you seen their CODEOWNERS feature? https://help.github.com/articles/about-codeowners/ there is a check box to enforce reviews by owners. Chrome/Google have something like that but more flexible (e.g. you
48.
by jacobparker 9y ago
That's not true. 1) Anyone can submit a certificate to the CT logs 2) It will become mandatory that certificates are logged for Chrome to trust them in a matter of weeks (other browsers will follow): https://groups.google.co
49.
by jacobparker 9y ago
Certficate transparency helps to mitigate that by creating a public audit log of certificate issuance.
50.
Getting Erlang to talk to the outside world [pdf](erlang.se)
2 points by jacobparker 9y ago|0 comments
51.
by jacobparker 9y ago
Sure but the GP made a much stronger claim that they previous knew that it was the “actual” server terminating HTTPS. Even still, the difference between this and e2e encryption isn’t something an end user is really equipped to evaluate IMO.
52.
by jacobparker 9y ago
Whatever company offering you FTP access and hosting those files for you over HTTP should be setting up HTTPS for you automatically without any extra input from you. That’s why all the instructions assume command-line competence: designers
53.
by jacobparker 9y ago
cloudflare didn’t invent this or make it normal. It’s always been common to terminate https in front of your “actual” server and with re-encrypt to the “actual” server or (very common) ... don’t. Cloudflare may have made it more common for
54.
by jacobparker 9y ago
The email doesn't come from your server, it comes from Lets Encrypt. https://letsencrypt.org/docs/expiration-emails/
55.
by jacobparker 9y ago
Theoretically you could use gRPC with JSON or Flatbuffers or whatever rather than protobufs. (I'm not sure how much practice there is behind that theory, currently, but that's the plan.)
56.
by jacobparker 9y ago
I should note that the demonstration is a toy example, you don't actually want/need to store blob data in a paxos-like log directly. For an in-depth look into what it takes to build a strongly-consistent S3-like system (and more)
57.
by jacobparker 9y ago
Applying CAP to come up with useful/practical conclusions is a lot harder than it seems. The fact that S3 offers the form of strong-consistency that it does means that S3 is already suffering most of the "problems" that stron
58.
by jacobparker 9y ago
That really depends on the application, who has access to the keys, how they learn about the keys etc. There isn't a one size fits all solution and that's kinda why eventually consistency is a pain in the ass. The "I want str
59.
by jacobparker 9y ago
Related to the overall topic but not Spanner specifically: it's interesting to compare the consistency models of S3, GCS and similar offerings: * S3: https://docs.aws.amazon.com/AmazonS3/latest/dev/Introd
60.
by jacobparker 9y ago
https://en.wikipedia.org/wiki/Maggot_Brain

More ›