thresh

> The only viable way to allow it is by vetting every upload, and uh, good luck finding volunteers for that.

Debian seems to have no problems with that.

Since when some random website on the internet dictates "proper" configuration of TLS?

Hint: "A+" will make sure a lot of old clients which do not support fancy new encryption schemes will not get your content. If you don't care about that, it's fine, but do not call that "improper". It simply isnt.

[videolan infra guy here]

The whole idea of VideoLAN infrastructure migration from gitweb/trac/etc to gitlab and not to github was to use and promote free and open-source software.

Using closed-source software there is out of question, really.

Well people actually have tried that 4 years ago: http://thread.gmane.org/gmane.comp.video.ffmpeg.devel/123868

and somehow leadership was still a thing for Michael at that time, which really contradicts with something he says now.

I prefer per-core benchmarks. Things like that scale linearly, so it gives you the best idea about machine performance.

The CPU performance is a joke though.

c1 from instantcloud.io:

  ubuntu@c1-10-1-33-39:~$ openssl speed rsa
  Doing 512 bit private rsa's for 10s: 11119 512 bit private RSA's in 10.00s
  Doing 512 bit public rsa's for 10s: 111478 512 bit public RSA's in 10.00s
  Doing 1024 bit private rsa's for 10s: 1950 1024 bit private RSA's in 10.00s
  Doing 1024 bit public rsa's for 10s: 34638 1024 bit public RSA's in 10.00s
  Doing 2048 bit private rsa's for 10s: 291 2048 bit private RSA's in 10.01s
  Doing 2048 bit public rsa's for 10s: 9393 2048 bit public RSA's in 10.00s
  Doing 4096 bit private rsa's for 10s: 40 4096 bit private RSA's in 10.16s
  Doing 4096 bit public rsa's for 10s: 2402 4096 bit public RSA's in 10.01s
  OpenSSL 1.0.1f 6 Jan 2014
  built on: Thu Oct 16 16:07:24 UTC 2014
  options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) blowfish(ptr)
  compiler: cc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,--noexecstack -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DGHASH_ASM
                    sign    verify    sign/s verify/s
  rsa  512 bits 0.000899s 0.000090s   1111.9  11147.8
  rsa 1024 bits 0.005128s 0.000289s    195.0   3463.8
  rsa 2048 bits 0.034399s 0.001065s     29.1    939.3
  rsa 4096 bits 0.254000s 0.004167s      3.9    240.0

local odroid u3:

  thresh@odroid:~$ openssl speed rsa
  Doing 512 bit private rsa's for 10s: 19334 512 bit private RSA's in 9.99s
  Doing 512 bit public rsa's for 10s: 204957 512 bit public RSA's in 9.97s
  Doing 1024 bit private rsa's for 10s: 3490 1024 bit private RSA's in 10.00s
  Doing 1024 bit public rsa's for 10s: 62453 1024 bit public RSA's in 10.00s
  Doing 2048 bit private rsa's for 10s: 516 2048 bit private RSA's in 10.00s
  Doing 2048 bit public rsa's for 10s: 17051 2048 bit public RSA's in 10.00s
  Doing 4096 bit private rsa's for 10s: 72 4096 bit private RSA's in 10.09s
  Doing 4096 bit public rsa's for 10s: 4434 4096 bit public RSA's in 10.00s
  OpenSSL 1.0.1f 6 Jan 2014
  built on: Fri Jun 20 19:00:28 UTC 2014
  options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) blowfish(ptr)
  compiler: cc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,--noexecstack -Wall -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DGHASH_ASM
                    sign    verify    sign/s verify/s
  rsa  512 bits 0.000517s 0.000049s   1935.3  20557.4
  rsa 1024 bits 0.002865s 0.000160s    349.0   6245.3
  rsa 2048 bits 0.019380s 0.000586s     51.6   1705.1
  rsa 4096 bits 0.140139s 0.002255s      7.1    443.4

digitalocean cheapest vps:

  thresh@thre ~ $ openssl speed rsa
  Doing 512 bit private rsa's for 10s: 119305 512 bit private RSA's in 9.81s
  Doing 512 bit public rsa's for 10s: 1450435 512 bit public RSA's in 9.85s
  Doing 1024 bit private rsa's for 10s: 35347 1024 bit private RSA's in 9.85s
  Doing 1024 bit public rsa's for 10s: 541458 1024 bit public RSA's in 9.86s
  Doing 2048 bit private rsa's for 10s: 5259 2048 bit private RSA's in 9.84s
  Doing 2048 bit public rsa's for 10s: 161094 2048 bit public RSA's in 9.88s
  Doing 4096 bit private rsa's for 10s: 627 4096 bit private RSA's in 9.81s
  Doing 4096 bit public rsa's for 10s: 41353 4096 bit public RSA's in 9.75s
  OpenSSL 1.0.1e 11 Feb 2013
  built on: Thu Mar 19 18:31:36 UTC 2015
  options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) blowfish(idx)
  compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall -DMD32_REG_T=int -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
                    sign    verify    sign/s verify/s
  rsa  512 bits 0.000082s 0.000007s  12161.6 147252.3
  rsa 1024 bits 0.000279s 0.000018s   3588.5  54914.6
  rsa 2048 bits 0.001871s 0.000061s    534.5  16305.1
  rsa 4096 bits 0.015646s 0.000236s     63.9   4241.3

amazon t1.micro:

  [ec2-user@ip-10-71-147-165 ~]$ openssl speed rsa
  Doing 512 bit private rsa's for 10s: 85447 512 bit private RSA's in 9.48s
  Doing 512 bit public rsa's for 10s: 123882 512 bit public RSA's in 9.96s
  Doing 1024 bit private rsa's for 10s: 7720 1024 bit private RSA's in 9.98s
  Doing 1024 bit public rsa's for 10s: 187876 1024 bit public RSA's in 10.04s
  Doing 2048 bit private rsa's for 10s: 1268 2048 bit private RSA's in 9.99s
  Doing 2048 bit public rsa's for 10s: 67337 2048 bit public RSA's in 10.07s
  Doing 4096 bit private rsa's for 10s: 36 4096 bit private RSA's in 7.89s
  Doing 4096 bit public rsa's for 10s: 25180 4096 bit public RSA's in 9.85s
  OpenSSL 1.0.1g-fips 7 Apr 2014
  built on: Wed Apr  9 21:51:31 UTC 2014
  options:bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int) blowfish(idx)
  compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DKRB5_MIT -m64 -DL_ENDIAN -DTERMIO -Wall -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wa,--noexecstack -DPURIFY -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
                    sign    verify    sign/s verify/s
  rsa  512 bits 0.000111s 0.000080s   9013.4  12438.0
  rsa 1024 bits 0.001293s 0.000053s    773.5  18712.7
  rsa 2048 bits 0.007879s 0.000150s    126.9   6686.9
  rsa 4096 bits 0.219167s 0.000391s      4.6   2556.3

Hello there, can you share the performance test details? The configurations of both servers, client software, hwserver setups.

Thanks!

The packages are usually uploaded within a couple of hours after the release announcement. It took it a big longer this time because there were two releases. :)

The packages have been uploaded as far as I can see.

> single (non-core) developer of VLC

That's not true.

Being in Moscow, which is 6000+ km away from the epicentre of the earthquake, we still felt the tremors... Fascinating.

...provided you know it is a meteorite attack. Apparently, no one did.

It's amusing how fast the shadows are in those videos: http://www.youtube.com/watch?v=Qin41lP9r2U http://www.youtube.com/watch?v=lgBZMsaEN6s

Too bad this meteorite didnt crash in Sochi. Could've helped covering the Olympics constructions thefts.

that's BS. Even S-300 or S-400 are unable to catch such a high-speed meteorite. And we don't have anything better than those.

What if the user installs VLC (which is horribly outdated there) and then, installed VLC, using internal update mechanisms, gets updated? How will that "system" behave then?

because VLC is not owned by Rémi Denis-Courmont, and not everyone agrees on his move towards AppStore.