saber6

Also increased responsibility. You can seriously injure or kill someone with a forklift (I’ve seen someone drive the forks through the side of a fully loaded Cisco router once...)

Yeah but what about relativity?

ISO8601 won't scale to universe-level applications!

:)

I may be mis-communicating what I am trying to say.

I once had the (mis)pleasure of dealing with some novice DBAs. There were instances in the data model where things were so recursively linked that one query would fan out to 200+ to actually return the set of meaningful data. As you might of imagined, this caused scaling issues when you started dealing with significant amount of data (hundreds of GB of data in the DB).

Eventually we brought in some pros and one of the first things they did was eliminate a number of overly recursive queries and duplicated some (not all) fields of data to speed up performance. We went from 1->200+ fanout in a typical query to 1->25-ish. The performance gains were insane.

Of course it violates the "don't repeat yourself" and to abstract linked (repetitive) data in a relational way. But sometimes this best practice can really be counter-productive in edge performance scenarios. But in general yeah, don't be repetitive, abstract your stuff, and keep it clean and easy to change globally if/when needed.

> Are you, as an engineer, going to sit back and watch the project you built (containing very personal information in this case) get compromised? Even if you know management isn't paying proper attention?

I'm glad I'm not the only one who feels like this.

I nearly got fired by digging my heels in on a privacy/infosec flawed design... until CTO/CIO layer gleaned what I was freaking out about and the energy (angry, "wtf", etc) suddenly pivoted to the original architect and engineers who cooked up some half-baked stuff.

You don't want your name attached to bad stuff in life. You only have one reputation. Don't mis-spend your social (political) capital by letting dummies bully you into ignoring tangible security issues.

In that case I apologize for the prior tone.

I will check it out now that you have stated it is a bug.

Thanks!

I remember a few years back someone was on an onion IRC server advertising "free shells". My first thought was "Ohhhh someone found a nice and juicy client-side security hole! No thanks!"

Already on my nope not even gonna try it list.

The demo page does that annoying crap where it tries to prevent you from navigating to your prior site.

I thought that trend peaked in like 2001.

That is a great talk. Thanks for sharing.

It is a MVC: Minimal Value Comment

I don’t think the issue they worked on adult sites. I think the issue is they worked on AdultFriendFinder, who basically didn’t care about user privacy.

DRY like anything can be properly used or misused. For example, you can normalize a database so much that any basic query comes with a massive overhead (recursion). There is a middle ground between "religion" (pure DRY) and "chaos" (no DRY).

> But it's probably worth remembering that DNSSEC is a PKI over which the USG and its Five Eyes partnership has enormous, outsized influence; they have de facto custody over the most important TLDs on the Internet, a demonstrated willingness to intervene in DNS for policy goals, and, unlike a suborned CA, the TLDs cannot be revoked when the IC abuses them.

You're off base.

DNSSEC is not any more nebulous than the existing structure and control mechanism with regards to domain names. It (mostly) is adding cryptographic under-pinnings to the responses. The control remains the same (registrar level).

> My memories of childhood friends are utterly bittersweet. When I was ~9, I fell in with a group that played with WWII munitions that we found in the woods. A few years later, two of my younger friends were seriously injured. I was never overtly blamed, but I felt guilty.

Care to share more (as much as you feel comfortable)? That's a very unconventional childhood experience! Thanks!

It’s not a USG power play. It just so happens that a large portion of internet engineers and architects live in the United States.

> Are they concerned attendees from China will bring the virus with them?

Yes.

I am not a big-data guy but wouldn't it be along the lines of A) get a big honking server B) fire up "X" SQL server C) Allocate 95-98% of the RAM to DB cache?

> Is it enough for one person to consent or does something magic happen at a particular number or portion?

Nah. We have these things called elections (and representational democracy). In general that mechanism decides how society will progress forward from a political perspective.

> It's also quite ironic that an organization that has assassinated numerous people are attempting to destroy the reputation of one of their enemies by claiming that he attempted to assassinate somebody.

The United States Government (USG) enjoys a monopoly of violence (consent of the governed). However, a citizen (or group of them -- org/corp) does not enjoy such rights. Your comparison is invalidated.

On the contrary. When you are a master of the dark arts, you can't help but see other practitioners around every corner.

Yeah it was priority. 90 days free trial.

You're insane. His site facilitated numerous drug deals for profit. He also paid bitcoin in what he thought was a hit-job (he was duped). This dumbass can rot in prison. Screw him.

I tried GeForce now. Maybe it’s because I am a fairly heavy casual FPS gamer, but the input lag was very noticeable. Neat concept and I hope it can get better!

As a network architect I'm kind of surprised they couldn't answer basic questions such as "can someone sitting in a general user access segment (eg Cafeteria) access critical resource X by default?"

This is a fairly standard infosec method already in use for a long time (defense in depth, enclave-based security architectures, etc).

Not knocking them - JPL are wonderful people. If I had to guess they did not have funding for this prior, got caught (embarrassed) and now are correctly allocating resources to deal with the issue. Good news!

I would just like to point out that this article downplayed the central issue that brought an end to Freedom Hosting: massive, willful hosting of child pornography and a known and stated practice of refusing to take down anything.

This guy was not just a "dark web tycoon", he was a child porn hosting empire owner. Much higher severity in terms of moral heinousness than say selling drugs on The Silk Road.

That's the point of DPDK: to get the kernel out of the way of packet processing.

Userland packet processing (in network context) is much more flexible and less brittle than forcing certain functionality to exist solely in the Kernel layer. However things do exist that allow you to (mostly) transparently re-jigger a standard app's TCP/IP calls. One such example is using LD_PRELOAD to "hijack" the sys-calls for certain things and snake it to your (super high performance) userspace app!

There's a lot of exciting stuff happening in the open source networking world (DPDK, VPP/FDio, Network Service Mesh, etc). I really recommend digging into it!

To be fair I think this falls into the category of "ugh I'm not really feeling like going out... and I don't want to disappoint my friend.... if only I knew he wasn't too hot to trot tonight as well..."

But I understand your point and agree with you. I prefer direct communication. If you don't want to hang out just say so - I like clarity.

A feature is not a business.

Yup your point is true about having to manage N(N-1) number of vpc peering related components. I don’t ever deal with more than 10 VPCs at a time. Maybe you have world-conquering aspirations and need insane scale ;D

Interesting concept - is this designed to be used independent of some kind of infrastructure as code tooling?

I do all of my VPC peering and route-table manipulation via terraform repos today, so I am curious what the benefit of using this would be over what I have today (if there is).

Thanks.

Does anyone think DHS has the expertise on hand to review source code (and would it be cart blanche style)? When I think of DHS I think more of physical security measures. NSA is whom I think of when it comes to defensive cybersecurity measures.