hujun

The two key issues PQC try to address are key exchange and digital signature, which happen during TLS handshake, the mechanism you described happen after TLS is established; so if a quantum computer breaks TLS, then it effectively reduced HTTPS to HTTP

k8s is simple because it offload some key tasks to 3rd party like network and storage; it is not easy to: a) setup and maintain a k8s cluster with all necessary components from at least a dozen different sources b) design your application to be k8s native

> Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f*d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it, and can’t be relied upon.

compare to SGX, a more critical impacted component is TPM chip, secured/measured boot depends on TPM, and cost of replacing all servers and OS ...

really unfortunately, these few have capability and will to drag everybody else into war

"My second thought is how badly Chinese communism must be doing that they need such a massive effort in order to ..."

China have visa-free visit policy for many countries, you could actually go there to see how "bad" it is

https://www.china-briefing.com/news/china-visa-free-travel-p...

yes, and I think one big reason enterprise might not buy your product even if it is guaranteed to make/save $X is $ is often NOT most important thing to the people make buying decision, specially when it is not your own money to save or gain

one thing I liked about cobra is the auto complete support, but I don't like the manual process of define command and parameter and not easy to extend, so I wrote https://github.com/hujun-open/myflags, it is built-on top of cobra but allow uses a struct to define all commands/args and also easily to extend support new types (even existing types)

nah, GPS is needed by US outside US as well, I bet someone will propose a 'great' idea to start charging for it

because Trump said TSMC is stealing US chip biz, and threaten 100% tariff [1]. I think this is TSMC's attempt to avoid tariff

[1]https://www.pcmag.com/news/trump-intel-was-great-until-taiwa...

for user wants to have self hosted CA (for testing) with easy to use GUI, XCA is a great option

one thing I agree that software/standard people like to churn, churn is a source of new income regardless if QC could break RSA or not in the future, people could make profit now

one tip of the list I can't agree more is the www.seat61.com for train ticket, especially if you travel in Europe, where train is the most convenient way to travel between cities/nations but man is it such complex system, there are so many different rail companies and lines, this website gives a clear instruction on options, price and where to buy the ticket

or sold to US I could totally see this happening soon

quote from tiktok's webiste https://usds.tiktok.com/usds-myths-vs-facts/: ``` Myth: TikTok’s parent company, ByteDance Ltd., is Chinese owned.

Fact: TikTok’s parent company ByteDance Ltd. was founded by Chinese entrepreneurs, but today, roughly sixty percent of the company is beneficially owned by global institutional investors such as Carlyle Group, General Atlantic, and Susquehanna International Group. An additional twenty percent of the company is owned by ByteDance employees around the world, including nearly seven thousand Americans. The remaining twenty percent is owned by the company’s founder, who is a private individual and is not part of any state or government entity. ```

This reminds me an interesting netflix doc series, History of Swear words: https://www.netflix.com/title/81305757

hosted by Nicolas Cage

all network devices that terminates a subscriber (broadband or mobile) has a feature called LI: https://en.wikipedia.org/wiki/Lawful_interception, which is required by law in almost all countries one requirement is that operation of LI feature is totally separate from normal network operator, so that even normal network admin are not supposed to know what kind of LI operation is ongoing...

depends on how much "k8s native" code you have, there are application designed to run on k8s which uses a lot of k8s api and also if you app already micro-serviced, it is also not straight forward to change it back

you can have the lte modem to connect to a different lte network

now there are LTE modems

I think the reason behind it is similar to case where you are allowed to watch movie in theater with eye, but not with camera

no worries, US will ban Chinese battery in no time: https://www.reuters.com/world/us/us-lawmakers-call-add-china...

Dark Forest Hypothesis: https://en.wikipedia.org/wiki/Dark_forest_hypothesis

the latest hot one is eBPF/xdp, https://en.wikipedia.org/wiki/Express_Data_Path;

however I think in most cases skipping kernel might not be such a great idea, a lot of kernel features are there for a reason (e.g. like routing/arp lookup, fragmentation/reassembly), if you skip them, it means you have to implement those features in user-space...

the purpose of using TAP is to be able to write IP stack in user mode code; however TAP is not the only way on linux, you could also use raw(AF_PACKET)or XDP socket, they also allow you bypass kernel IP stack

there are a few k8s distributions works on single server like microk8s, kind, and they are not difficult to setup on a single server.

`That is, if it costs very little to have larger keys, why not have larger keys?` it is often very expensive/difficult to change length of a RSA key is part of existing platform/infrastructure, like key in TPM/HSM/CA infrastructure, regardless how fast computer CPU is

Arch is also rolling update, and has no trivial chance to break when upgrading, I learned this painfully a few years ago. switched to Ubuntu, which is boring but stable.

This looks interesting, specially the support of GTP/SCTP; although it seems quite new, first commit on github is last year, wonder if anyone has used this in production?

this is a good a good blog, although I wonder is there any good up-to-date free online resource to learn C for experienced programmer (I learned C many years ago, but never use it seriously and forgot much of it)? I searched around, the results are either for beginner, or seems out-dated

similar experience here, the UI design is confusing, tell you to select an area but apparently you can't select/drag on the map, you can only typing the address then many times the auto complete doesn't work, and it seems you have to use the incorrect auto completed address...