tytso

24 ms·

181.
by tytso 8y ago
This is what getrandom(2) does, and using getrandom is the recommended path. However, if you use getrandom(2), and you are in early boot, such as by systemd's journald, and you are using it for some pointless HMAC mechanism with a ran
182.
by tytso 8y ago
Cloud hosting is actually the easiest case because you have to trust the host environment anyway . (If you can't, you're sunk.) So we just can trust the use of virtio-rng. Setting this up for qemu is pretty simple.
183.
by tytso 8y ago
The reason why this is hard is because Linux is supported on a great number of architectures, and some architectures have more than one boot loader that is used. The approach of letting the bootloader pass seed entropy is the right answer
184.
by tytso 8y ago
The flaws only applied for keys generated during early boot. Jann and I looked, but we didn't find a way that this could be turned into a practical exploit, which is why we considered, but decided against, doing any kind of coordinate
185.
by tytso 8y ago
So it's not so simple. You could use DMARC to tell mail servers which honor DMARC to drop all e-mails that have @gmail.com addresses that don't come from gmail.com servers. In fact, this is how @google.com e-mail addresses are
186.
by tytso 9y ago
There are politics no matter where you are. Whenever two or three are gathered together, there is politics. Politics is just what people call interpersonal dynamics when they don't like a particular setup. The bottom line is that
187.
by tytso 9y ago
One potential advantage of the new BPF code for firewalls is that may make it easier to excise code owned by a certain copyright troll....
188.
by tytso 9y ago
Levandowski can't be all that smart if he thought he could download 14,000 documents onto his work laptop, without Google noticing. I mean, hello? Any sane I/T security protection architecture would assume that despite the bes
189.
by tytso 9y ago
If you are going into the city anyway for work, you can drop off your passenger near a subway stop, and continue into work. The assumption is that you were driving anyway, and so the cost of adding a carpooler and dropping him or her mayb
190.
by tytso 9y ago
The service certainly isn't new. But Scoop, Lyft, and Waze all have different monetization models. Waze is ad-funded, plus its traffic data provides value to Google Maps. Lyft takes a cut of the money paid to the drivers. Scoop is
191.
by tytso 9y ago
The really big difference between Waze Carpool and Uber/Lyft is that the driver is paid at most 54 cents a mile (e.g., gas money), and Waze will only match the driver with passengers for two trips / day. So it is not designed to
192.
by tytso 9y ago
You can use a subscriber link, but Greg chose not to. Jon Corbet is a mutual friend, and LWN is essentially a two person shop (Jon and Jake do all of the work, and they are not getting rich off of what is essentially a labor of love).
193.
by tytso 9y ago
From a recently posted patch set: Subject: Avoid speculative indirect calls in kernel Any speculative indirect calls in the kernel can be tricked to execute any kernel code, which may allow side channel attacks that can leak arbitrary kerne
194.
by tytso 9y ago
The 5% to 30% performance hit (dependent on workload) was measured with PCID. The hit may be more on older CPU's that do not support PCID. So Intel might make out OK on this, since people will have to update their servers, and righ
195.
by tytso 9y ago
It's a myth that Google literally sells your information to advertisers. It uses your information to show you advertisements which both it and its advertisers hopes are relevant and useful (so you will click on them). If you think
196.
by tytso 9y ago
Sorry. 45 days is not quick.
197.
by tytso 9y ago
What people often forget is in the corporate world, you can always escalate to the person's manager if they refuse to listen. In a volunteer project, that's not an option. How many times you say, "I guess you didn't und
198.
by tytso 9y ago
Every ATM and many shop keepers, hospitals, hotels, etc., all have cameras. They may not automatically be turned over to police, but if something happens, the police will often just go and see if there are any surveillance cameras and ask
199.
by tytso 9y ago
The Android AOSP android-common kernel tree builds just fine on x86. The Qualcomm Android BSP 3.10 kernel didn't, and I had to do a huge amount of bashing and fixups before it finally could build on x86 (at least with a minimum confi
200.
by tytso 9y ago
At many companies, the Founders push their biases into company culture so strongly that it stays for a long time. For example, my sister (who is an accountant, although now she's a director in the Finance and Auditing department) wor
201.
by tytso 9y ago
It's funny how people say that Qualcomm was founded by engineers, since given they way they have acted in recent years, I had always assumed that they had been founded by lawyers. I know Broadcom is no prize, but given that Qualcomm ha
202.
by tytso 9y ago
Fat binaries solve one of the problems which Docker containers solve. It doesn't solve the security isolation problem, or the resource control issue. That being said, there are many people who are using Docker primarily to solve the
203.
by tytso 9y ago
At least in my corner of Google the direction seems pretty clear. We are trying make our storage stack cheaper and more efficient so we can pass the savings to internal (other PA's) and external (Google Cloud Platform) customers. The
204.
by tytso 9y ago
Furthermore, suppose you're some company like, say, IBM which figured out some way to say, safely double the energy density and recharge cycles of Lithium Ion batteries, which you have patented. Let's also assume that you are sh
205.
by tytso 9y ago
Crash dumps don't matter as much if your distributed architecture has to account for hardware failures. (Or VM failures, or network hiccups, etc.) Kernel developers still have to use crash dumps to root-cause an individual crash, but
206.
by tytso 9y ago
There are a huge number of DNS registrars. So the fact that GoDaddy and Google chose not to act as their DNS registrar doesn't follow that they can't find _anyone_ to be a DNS registrar. (And indeed, they were able to find a DNS
207.
by tytso 9y ago
Linaro isn't a company; it's a "collaborative engineering organization". It does employ some number of engineers, funded by donations by their member companies, but they also accept "in-kind" donations where e
208.
by tytso 9y ago
In general we always get to -rc6 to -rc8 before we do a release, with perhaps -rc7 being the most common. Since the merge window (before -rc1) is two weeks, this translates to a two month release cycle. So using a time-based release cyc
209.
by tytso 9y ago
I'll admit the pull request was a little marginal for patches that would be landing in -rc4, which is roughly halfway through the development cycle. That being said, all of the patches got independent review (none of them were author
210.
by tytso 9y ago
One of Red Hat's superpowers is in hiring relatively unknown developers, and helping them become strong participants in the open source world. But their compensation isn't super high, and when you travel on Red Hat's nickle

More ›