vijayp

8 ms·

1.
Enom down for 24h, many Google Workspace-registered domain's DNS records gone(twitter.com)
9 points by vijayp 5y ago|2 comments
2.
by vijayp 6y ago
Congrats to the team for tracking this down, it was a great write-up! Twitter has some great networking/kernel engineers. When I was working at Twitter a few years back we isolated and fixed another insidious kernel bug; a large group
3.
by vijayp 8y ago
The design is terrible. I never use the touchpad for anything regular keys wouldn't do better. The keyboard on my 2017 MBP13 failed three times in the year I've owned it. The first time, the Apple Store person "cleaned"
4.
by vijayp 9y ago
You can sort HN by date, and few URLs are updated every day. So you can push a new bloom filter every day and a different list of updates every 5m. Then just check your URL against both of them.
5.
We should build hybrid human/ai ranking systems to fight fake news(buzzfeed.com)
7 points by vijayp 9y ago|0 comments
6.
by vijayp 9y ago
How do these execs not have 10b5-1 plans set up?! Many companies require them for all senior managers. http://www.investopedia.com/terms/r/rule-10b5-1.asp
7.
by vijayp 9y ago
Mirabel airport [ https://en.wikipedia.org/wiki/Montr%C3%A9al%E2%80%93Mirabel_... ] probably was a contender. The passenger terminals were eventually torn down recently, but cargo flights continue to use it. EDIT: &quot
8.
by vijayp 10y ago
Agreed -- I feel far safer biking around in Manhattan then sf. There are way more separated lanes in NY, traffic moves much more slowly, there are no tram tracks, and the lack of right on red makes it less likely I'm going to get run o
9.
by vijayp 10y ago
http://www.cnrtl.fr/etymologie/shampooing
10.
by vijayp 10y ago
If he actually flew out of YVR, he was probably in a us preclearance area -- us customs are located in some Canadian airports so flights can go directly into us domestic terminals. Since those screenings are on Canadian territory, us agents
11.
by vijayp 10y ago
Yeah, maybe human review is not the most scalable solution; if data analysis shows that certain patterns of behaviour are highly predictive of an account takeover, there are almost certainly product solutions for them. I guess the real ques
12.
by vijayp 10y ago
Yeah, a couple of years back, I went to a t-mobile store (I think it was on Broadway and Park Pl) to get a new SIM card; I'd lost it in Europe when I was on holiday. They gave me a new SIM card and let me pay cash without even checking
13.
by vijayp 10y ago
That's a good point. Though I think it would be challenging to have a phone number that no one knows which you also carry around with you. It's possible if you use something like Google Voice for most of your regular calls, but yo
14.
by vijayp 10y ago
Yeah, I'm also scared of LastPass being a SPOF. While LastPass does do a good job, no one is perfect, and the cost of having my account compromised is really high I'm now leaning towards encrypting backup codes with a passphrase a
15.
by vijayp 10y ago
Yeah, I could believe that it would create too many false positives and in retrospect things do often seem easy. Google and other service providers do have data to evaluate the benefit and cost of making decisions based on patterns, and the
16.
Adding a phone number to your Google account can make it less secure(tech.vijayp.ca)
593 points by vijayp 10y ago|292 comments
17.
by vijayp 10y ago
oh man, I remember browsing FTP servers over email back in the early 1990s, when I had email access but not FTP access. It was incredibly slow and typos were to be avoided at all costs! https://en.wikipedia.org/wiki/FT
18.
by vijayp 10y ago
Seems to me like shipping paper bank statements scales quite well -- linearly in fact!
19.
by vijayp 10y ago
Well, YHOO's total market cap is now about $37.36B, so it's not a complete travesty. (MSFT would have gotten the Alibaba investment with the $45B offer)
20.
by vijayp 10y ago
The blog seems to be down. Does anyone have a link to a cached copy?
21.
by vijayp 11y ago
http://blog.cryptographyengineering.com/2012/01/attack-of-we... This article talks about tls and corruption, including dtls. I found it educational!
22.
by vijayp 11y ago
Oops I probably should have been clearer. Hardware verification IS performed. For various reasons, the nic never itself drips packets that are corrupt, packets are instead marked by HW as either verified or unverified. When a packet is mark
23.
by vijayp 11y ago
Just skimmed it; very interesting. I hadn't heard of this bug before, but will read it in detail soon. Thanks!
24.
by vijayp 11y ago
I think it's in the 3.13 queue already: http://kernel.ubuntu.com/git/ubuntu/linux.git/commit/?h=linu...
25.
by vijayp 11y ago
yes, the code is as follows in the broken veth: if (skb->ip_summed == CHECKSUM_NONE && rcv->features & NETIF_F_RXCSUM) checksum offloading is encapsulated in the rcv-features bitmap, so disabling it will hide this bug. You
26.
by vijayp 11y ago
Yeah, TCP's checksum is indeed weak and TLS is indeed a good answer. However, I think delusional is a bit of a strong word to use here. "Performance of Checksums and CRCs over Real Data" has a bunch of interesting data about
27.
by vijayp 11y ago
The code is open sourced as GPL3, you should be able to run your own server pretty easily. Please let us know if you have issues. https://github.com/mitro-co/mitro
28.
by vijayp 11y ago
A password manager really needs to be a high-availability service -- it should work even (especially) when AWS is down. Since our service (intentionally) does not cache secret data on the client, running a proxy is not substantially easier
29.
by vijayp 11y ago
Yeah, our largest costs are: - a primary server running on AWS - a read-only replica running on google compute engine. Other smaller costs include networking, DNS, and various tax/administrative/regulatory fees
30.
by vijayp 11y ago
You can actually change the server in a hidden preferences page. Go to /html/preferences.html in the extension.

More ›