sargun

57 ms·

1. 631.▲
   by sargun 10y ago

   I sometimes wonder if NSA / CIA respond to FOIA requests with documents produced explicitly to answer them. Is there anything that would prevent NSA from giving out a 'fake' document or field guide if the FOIA request was non
2. 632.▲
   by sargun 10y ago

   This seems pretty expensive actually. $13/GB + $20 per month versus my Verizon plan that's ~$120/mo for 12GB of data. This plan would turn into $170. I usually go to about 60-80% of my data plan (tethering and such), which at
3. 633.▲
   by sargun 10y ago

   If you're interested in learning more about consensus algorithms, there's a great website that describes many of the variants: http://paxos.systems/ . The author also published an excellent paper on the subject cal
4. 634.▲
   by sargun 10y ago

   I really wish that Jetbrains had a Rust IDE. I love their Go, and Erlang plugins for IntelliJ, Java with IntelliJ, and Clion with C. Without them, I don't think I could be anywhere as effective as I am. I tried to pickup Rust, but I wa
5. 635.▲
   by sargun 10y ago

   I'd say C is the bicycle and C++ is the motorcycle. Both give you plenty of chances to kill yourself.
6. 636.▲
   by sargun 10y ago

   What do you guys think about Lightsail ( http://lightsail.com/ )? I'm not entirely sure how they can make an economical 500 KW CAES system, but I don't totally understand their tech.
7. 637.▲
   by sargun 10y ago

   Mesosphere | San Francisco, Berlin What: Easy to run and scale. Mesosphere's data center OS makes it easy to run big data frameworks like Storm, Apache Spark, and Apache Hadoop. Applications designed for elasticity can leverage idle re
8. 638.▲
   by sargun 10y ago

   I don't think DNS is P2P in the sense that all actors in the system are homogenous and equipotent. Although modern P2P systems have supernodes, they usually serve the purpose of rendezvous, and not typical operationl DNS is a more of a
9. 639.▲
   Vector: A Development Platform for Micro Space(vectorspacesystems.com)

   3 points by sargun 10y ago|0 comments
10. 640.▲
    by sargun 11y ago

    Not yet open source, and it probably wont be for a while, given it's in $EMPLOYER's proprietary product.
11. 641.▲
    by sargun 11y ago

    If you implement a VFS, you have to either implement the WAL subsystem yourself, which isn't pluggable at the moment, or go with journaling mode, which is kinda meh.
12. 642.▲
    by sargun 11y ago

    I built one recently. We have a SQLite VFS built on top of Zookeeper for doing metadata-like stuff. We can pull between 1000-100000 reads per seconds out of it. I realize that this is a total abuse of what Zookeeper does, and how it is supp
13. 643.▲
    by sargun 11y ago

    I really enjoy naming things. The naming has a bit of a history. The first version used open flow. We wrote the flows on demand for the connections, and the project's name was 'Minuteman: flows at a moment's notice' as a
14. 644.▲
    by sargun 11y ago

    Stay tuned! It is on our roadmap. If you're interested in the feature, please file a bug on our JIRA: dcosjira.atlassian.net
15. 645.▲
    by sargun 11y ago

    1. This is largely a restriction that comes from earlier versions. In earlier versions we relied on the source port to be in the range, as we remapped it in user space. Now, we let iptables / conntrack do it. We might go back to writin
16. 646.▲
    by sargun 11y ago

    Thanks! I'll be sure to add that note! Currently, minuteman targets Mesosphere's DC/OS (dcos.io), which is Linux only. We've thought about what it would take to port it to Windows, and it's feasible. Just a matter o
17. 647.▲
    by sargun 11y ago

    Co-author here! There are several differences: 1. We're coupled with the kernel and operating at layer 4. Specifically, we play with the conntrack subsystem. This means, you may pay a little higher cost for the first packet of a connec
18. 648.▲
    by sargun 11y ago

    Co-Author here. If anyone has any questions, feel free to ask!
19. 649.▲
    by sargun 11y ago

    Couple things: 1. At any scale pretty much AWS / GCE are less expensive than Heroku. They also come at an non-zero operational cost. Say, switching to Google App Engine (the cheapest from my understanding) -- would save them 75% of the
20. 650.▲
    by sargun 11y ago

    DNSSec is useless if TLS was implemented in the ideal way. But, unfortunately, TLS is far from ideal. The author states "For something as harebrained as the CA system, remarkably few criminal breaches trace back to it -- There have b
21. 651.▲
    by sargun 11y ago

    SSH is also implemented by Golang, and Erlang (And probably a bunch of other languages). You're right that traditional SSH clients tend to need long-term storage, but one could easily turn off host key caching, and look to SSHFP record
22. 652.▲
    by sargun 11y ago

    I'm not sure how easy it is to forge a fingerprint. Given most of the MD5 collision work was done based on length-extension attacks, I think SSH is somewhat more tolerant to these. Nonetheless, your point stands - it is possible to for
23. 653.▲
    by sargun 11y ago

    I really enjoy this series. As someone who has begun writing kernel code somewhat recently, it's been immensely helpful. I hope that the author continues to writes these, and I'm looking forward to the coverage of the RCU.
24. 654.▲
    by sargun 11y ago

    Nagle, much of the issues you're talking about with bad middleboxes is about signaling or optics into their status. We've had a standard for some years to deal with this (ECN). Why don't you think ECN is deployed at all? It s
25. 655.▲
    by sargun 11y ago

    This is still largely at commodity prices / performance points. It's been quite some time since any of their hardware has looked consumer-oriented, but comparing this to what enterprises buy, it's apples and oranges. [1] htt
26. 656.▲
    by sargun 11y ago

    I thought AES-GCM was on its way out? Isn't poly1305-chacha20 what we should use now, given that it's quite a bit cheaper in terms of cost, and the keys are much smaller (32 bytes)? Also, the code for chacha is easily available.
27. 657.▲
    Winter is Coming(startuplessonslearned.com)

    2 points by sargun 11y ago|0 comments
28. 658.▲
    by sargun 11y ago

    The Concorde was developed in £1.134 billion[1], in today's dollars that's about £7.37B[2]. [1] http://www.concordesst.com/faq.html [2] http://inflation.stephenmorley.org/
29. 659.▲
    by sargun 11y ago

    uRPF is a pain to people who want to do any kind of creative TE with their network. For residential networks, I somewhat understand the value, but it makes dual homing unreasonable for anyone who doesn't have an ASN + BFP sessions. I&#
30. 660.▲
    by sargun 11y ago

    Tesla still continues to violate the GPL as well - https://forums.teslamotors.com/forum/forums/gpl-sources .