sargun

58 ms·

511.
by sargun 10y ago
This is also true of IPSec AH and ESP. You can use it purely for labeling (turn off both)
512.
by sargun 10y ago
My interview at other $BIGNAMECO was "fix" an existing Linked-list implementation on site. That was pretty fun, IMHO.
513.
by sargun 10y ago
I looked at this briefly, but it was odd. I found that non-tech companies paid tech FTEs very little -- even companies which heavily relied on tech (Airlines, Insurance, etc..). On the other hand, they paid oodles to contractors, and vendor
514.
by sargun 10y ago
For three reasons: 1. There exist massive existing codebases in these languages, and simply the cost of a rewrite, retraining all of the engineers, and building new tooling is more expensive than making these languages run fast. In the case
515.
by sargun 10y ago
Often times energy converts directly CPU, and therefore to $$$. I think I heard a quote that a 1% CPU utilization change in search was a $100M+ spending change. While the specifics are lost to me, in general, I'm not at all surprised.
516.
by sargun 10y ago
The trick that most of these folks have gone with is a active phase array antenna. These antennas aren't small (smallest I've seen is 1x.25 meters, but they "just work" -- you leave them outside and suddenly connectivit
517.
by sargun 10y ago
IPSec is in the kernel. IKE is outside in userland. IKE tends to be the parts that get compromised often and IPSec in itself is pretty simple. Putting control planes in the kernel is the worrying part IMHO.
518.
by sargun 10y ago
No, the project never got that far. I did discuss with a security researcher though, and it was secure, but it lacked features like PFS, and the handshake protocol could leak information. In addition, using "pure" random nonces ha
519.
by sargun 10y ago
A few things: 1) Writing concurrent code in C++ is exciting (this is a bad thing). Processors are not getting much faster in serial execution, but the number of cores are continuing to increase More here: http://joearms.github.io
520.
by sargun 10y ago
Sidechannel free - Curve25519 is meant to be resistant to side channel attacks. We didn't spend much time seeing if the actual cryptographic code was secure. Multicore - Yeah, we basically got that for free with BPF/XDP. It's
521.
by sargun 10y ago
So, for one of the implementations, yes, we implemented Curve25519 inside of the Kernel. Basically, every node was pushed into a map with the association of IP/Port to key data. At the reception of a packet, if we didn't have a ke
522.
by sargun 10y ago
Sorry! Once you get deep enough in this tech, you seem to have more in common with an alien language than actual common English. * BPF - Berkeley Packet Filter - BPF is a safe, in-kernel virtual machine that's meant to be able to intro
523.
by sargun 10y ago
This was actually around the time that WireGuard initially announced. We had a product that we ship on-prem that needs end-to-end security guarantees. Unfortunately, IPSec has a bunch of issues around IKE and maintaining sanity at a medium
524.
by sargun 10y ago
What?
525.
by sargun 10y ago
Yeah, but BPF can operate in kernel space directly on SKBs. If you look at the XDP work, there's a lot of promise. In fact I've implemented ECC in BPF -- other than the state, and negotiation components, I don't see why this
526.
by sargun 10y ago
It seems worrying to me to put something so complicated in the kernel. Perhaps, not even that, but it feels to me as though the fact that this requires in tree changes seems wrong, given the way that networking is going is to enable these n
527.
by sargun 10y ago
I'm honestly surprised that it took this long. It's something that has been a worry in circles for a while. One of the bigger worries was using IEDs and drones to deliver payloads to semi-secure locations, like data center power a
528.
by sargun 10y ago
Any chance we're going to see this result in TDMA?
529.
by sargun 10y ago
How can you use UWB for this? Doppler?
530.
by sargun 10y ago
Is it true that pivots have to be in the office at a specific time?
531.
by sargun 10y ago
I'm curious, why hasn't anyone worked with ground effect vehicles (things like wing-in-plane) in an urban setting. It seems like commuting from South SF <-> Mountain View would be greatly smoothed by introducing GEVs without
532.
by sargun 10y ago
No, this was probably intentional. When there is security, especially corporate mandated, people will find a way to work around it to gain efficiency.
533.
by sargun 10y ago
We demoed a device at work, and tried to get source. This was a little while ago.
534.
by sargun 10y ago
if Orbital launched as much as SpaceX, the Pegasus cost before margin could be 20% of what it is today.
535.
by sargun 10y ago
Orbital ATK has been building and launching the Pegasus XL ( https://www.orbitalatk.com/flight-systems/space-launch-vehic... ) for a bit now. It is an extremely cheap platform that is launched from an airplane. What&#x27
536.
by sargun 10y ago
I contacted them, and they failed to provide source code in a timely manner -- or you know, respond.
537.
by sargun 10y ago
Let me ask a question of everyone complaining: why not use Lyft? I switched. Yeah, their prices are a little more than uber's, and their wait times are a bit higher, but these are functions of scale.
538.
by sargun 10y ago
So are the following: -Tesla -Eero -Pluot
539.
by sargun 10y ago
Maybe. There are two viable routes that I can imagine. The first, the article doesn't touch on too much -- environmental engineering. There have been a handful of ideas to reduce or reverse the effects of global warming using engineere
540.
by sargun 10y ago
IMHO, the preferred terms here are "AAR" (After Action Review: https://en.wikipedia.org/wiki/After-action_review ), and "BAR" (Before Action Review).

More ›