riobard

17 ms·

181.
by riobard 5y ago
On one hand I'm super excited for the performance and convenience of in-kernel WireGuard (huray!) On the other I'm sad that once it's accepted into kernel, it won't be possible to add interesting changes (e.g. obfuscatio
182.
by riobard 5y ago
And _negative_ leap seconds! My mind is blown.
183.
by riobard 5y ago
By that logic someone has to explain why WireGuard is over UDP and the purpose of the "protocol" field of IP header :-) It's called ossification. Same reason why TLS 1.3 has to pretend it's TLS 1.2, and QUIC must be over
184.
by riobard 5y ago
Performance will take a hit then, which is unfortunate.
185.
by riobard 5y ago
Jason previously stated in mailing list (couldn't find the thread now) that obfuscation is not a goal of WireGuard.
186.
by riobard 5y ago
It's not about which way is better, but which default is more useful in practice.
187.
by riobard 5y ago
> on modern processors a couple thousand mostly idle (due to IO blocking) Java threads are fine This “mostly idle” assumption is gonna break the moment you hit a load spike and wake up most of those “idle” threads. The success of async i
188.
by riobard 5y ago
The WD My Book Live series NAS has two models, a single-disk one called just My Book Live where the disk is not user-replaceable, and a dual-disk one called My Book Live Duo where the two disks can be replaced tool-free. AnandTech had a pre
189.
by riobard 5y ago
If I partition the entire drive, eventually all blocks will be used, depending on how the filesystem allocates, right? So to guarantee some free space it's better to over-provision by under-partitioning. Now how do I make sure that on
190.
by riobard 5y ago
So over-provisioning has to be done before any writes to the drive? What if I want to over-provision a used drive? Discard all blocks first?
191.
by riobard 5y ago
One thing I'm still puzzled about SSD over-provisioning, which is also mentioned by the tutorial ( https://codecapsule.com/2014/02/12/coding-for-ssds-part-4-ad... ) recommended by the article: > A drive
192.
by riobard 5y ago
I'm not familiar with later development, but AFAIK Firecracker came much later and now you can actually use Firecracker as Kata Container's hypervisor in addition to QEMU.
193.
by riobard 5y ago
That's the approach taken by Google's gVisor (at the cost of I/O and network performance).
194.
by riobard 5y ago
A few years ago I invested in a small startup called `hyper.sh`. It open sourced a container runtime called `runV` which provided exactly this: security of virtual machines plus convenience of containers. The project later merged with Intel
195.
by riobard 5y ago
By now it's probably easier in mind to treat any Wi-Fi as Open Network and always use something like WireGuard/Tailscale for secure communication between devices.
196.
by riobard 6y ago
A dumb question regarding flash programming: assume the erase block is 16MB, and there is a fresh block to write to. If I slowly append-write (not modifying existing data) to the block, would subsequent writes require the whole block to be
197.
by riobard 6y ago
> I really don't understand why Apple is apparently incapable of making these laptops use standard, replaceable m.2 NVMe SSDs. Coz there's no standard M.2 form factor NVMe SSDs without a controller chip, and even if you can fin
198.
by riobard 6y ago
Is there any software-base implementation of AES that is NOT vulnerable to timing attacks and other side channel weakness and with reasonable performance (to the limit of the hardware)?
199.
by riobard 6y ago
Does any integrated USB hub support per-port power control? I'd like to control a directly-attached USB external hard drive to my Linux box.
200.
by riobard 6y ago
https://github.com/apple/swift-nio-ssh/issues/48 The dev said it's basically because Swift Crypto API does not support chacha20-poly1305@openssh.com, which is a non-standard construction (compared to cha
201.
by riobard 6y ago
It explains why at the second paragraph. > A top level takeaway from this data is that for things that rely on pure Go the M1 machine is, in general, a good bit faster than the Intel machine. For code that relies on highly optimized asse
202.
by riobard 6y ago
Thanks for the explanation! It certainly made more sense now :)
203.
by riobard 6y ago
That's the other (and arguably more interesting) part of the puzzle! :)
204.
by riobard 6y ago
But the modem is not made by Huawei. Its model number is G-140W-UD and it's made by Shanghai Nokia-Bell Co.,Ltd. Could it be from the ISP-side devices?
205.
by riobard 6y ago
I'm the owner of the modem. I've found about this a couple of months back when I moved the modem to its own vlan and noticed the broadcast frames. I did some research into the author of the poem on Twitter ( https://twit
206.
by riobard 6y ago
I've traced the author to be Erin Hanson. Her other works can be found at https://www.poemhunter.com/i/ebooks/pdf/erin_hanson_2006_2.p...
207.
by riobard 6y ago
I believe it's from the firmware of the optical modem. I just couldn't figure out why. Please help investigate, HN! :D
208.
by riobard 6y ago
That's also me. Still couldn't figure out the story behind this, so I'm posting to HN for help! :D
209.
My fiber optical modem broadcasts a poem via ethernet frame 0x8300(gist.github.com)
189 points by riobard 6y ago|69 comments
210.
by riobard 6y ago
Is there a plain text composing mode? Or is it by default plain text if I don't turn on the rich text toolbar?

More ›