ramchip

7 ms·

61.
by ramchip 2y ago
Yeah, I'm simplifying a bit. It may not cause an immediate exit, but it can leave the service broken in unpredictable ways. See this discussion for instance: https://iximiuz.com/en/posts/go-http-handlers-panic
62.
by ramchip 2y ago
That makes sense, Erlang/Elixir processes are a much higher-level construct than goroutines, and they trade off performance for fault tolerance and observability. As an example, with a goroutine you have to be careful to handle all err
63.
by ramchip 2y ago
A lot of public-key cryptography is based on finite fields, and the integers modulo N combined with addition and multiplication form a finite field iff N is prime. This brings some extremely useful properties e.g. every non-zero element has
64.
by ramchip 2y ago
UUIDs are longer because they use a less efficient encoding (base16 vs base32), not because they contain more entropy.
65.
by ramchip 2y ago
There's a 1:1 mapping (a bijection) between uuid and uuidkeys, therefore there are as many possible uuidkeys as there are uuids, and the risk of collision is the same.
66.
by ramchip 2y ago
I'm not familiar with jooq, but I've used Ecto a ton, and the point was never to avoid learning SQL. It's about making queries composable and mapping to domain objects automatically so eg. there aren't dozens of queries
67.
by ramchip 2y ago
> Forward secrecy is designed to prevent the compromise of a long-term secret key from affecting the confidentiality of past conversations. However, forward secrecy cannot defend against a successful cryptanalysis of the underlying ciphe
68.
by ramchip 2y ago
Tuples are the BEAM's native arrays, but they're expensive to update, immutability means you (usually) have to copy the whole thing to update one index. Lists are a lot more common in functional languages. If you really need rando
69.
by ramchip 2y ago
Erlang distribution shouldn't be used between nodes that aren't in the same security boundary, it promises and provides no isolation whatsoever. It's kind of inherent to what it does: it makes a bunch of nodes behave as part
70.
by ramchip 2y ago
It's still early I guess, but so far the signal/noise is much better than X for me. I follow a lot of Ukraine-related news, and the lack of Russian troll bots makes a huge difference in the experience.
71.
by ramchip 2y ago
Not really, you wouldn't normally kill or restart processes randomly in an OTP system. "Let it crash" is more about separating error handling from business logic.
72.
by ramchip 2y ago
Bit of a niche topic, but great article!
73.
by ramchip 2y ago
Fair enough!
74.
by ramchip 2y ago
> With this approach, a single PR can atomically merge code and update one or more release specifications (triggering CD for those components), if and when that is a sensible thing to do. How do you avoid the chicken-and-egg problem? Lik
75.
by ramchip 2y ago
I don't find this kind of cynicism accurate or particularly helpful as a life philosophy. I've personally had the luck to meet people and be a member of organizations that do care and have power to make some difference.
76.
by ramchip 2y ago
I've received unhinged antivax leaflets twice at home, in Japan.
77.
by ramchip 2y ago
I'm not American either, but I see a war going on between authoritarian states and democratic ones, and Trump supporting the wrong side. It deeply concerns me from a human rights perspective and also on a personal security level becaus
78.
by ramchip 2y ago
A good solution to this is to have multiple roles and use threshold signatures: https://theupdateframework.io/
79.
by ramchip 2y ago
Hash join is not a nested loop, it's two separate loops one after the other. This makes a huge difference since the complexity is O(N+M) rather than O(N*M). See these examples: https://vladmihalcea.com/hash-join-algorit
80.
by ramchip 2y ago
I had the same thought. AI art looks cheap, but more importantly it doesn't show if the real animal looks fat or not! Pexels looks super useful.
81.
by ramchip 2y ago
> Literally every engineer was offered I might be missing an idiom here - offered what?
82.
by ramchip 2y ago
> For any given task, compute the answer multiple times in parallel, ideally in multiple independent ways. Just to be clear, while this particular technique is valid and used in space software, it isn't common at all in Erlang and n
83.
by ramchip 2y ago
AWS also say they do something interesting: > When adding jitter to scheduled work, we do not select the jitter on each host randomly. Instead, we use a consistent method that produces the same number every time on the same host. This wa
84.
by ramchip 2y ago
Perhaps it was possible when George Hotz (the quote's source) worked there in 2011?
85.
by ramchip 2y ago
I meant that some data still needs to be distributed securely, just it's the sender's public key rather than a PSK. I recon "pre-shared data" was not the best choice of words... (Still love the blog post!)
86.
Cryptographic Innuendos: Signatures That Only The Intended Audience Can Verify(soatok.blog)
2 points by ramchip 2y ago|0 comments
87.
by ramchip 2y ago
The article's point is that these properties are not always desirable. Imagine someone messages a friend via an app, and mentions that they're gay, in a country where it's illegal. If the app uses signatures they can't d
88.
by ramchip 2y ago
DH + HMAC on its own doesn't give you authentication, anyone can establish a symmetric key. It's possible to build authentication on top but it requires pre-shared data or PKI.
89.
by ramchip 2y ago
Dependency injection
90.
by ramchip 2y ago
Some definitions for "nixie": https://directmailproduction.wordpress.com/2012/04/21/nixies... > Nixies are records in a mailing list that should not be there. Nixies also refer to mail that gets

More ›