achernya

53 ms·

1.
by achernya 4y ago
Yes, mosh has fuzz tests in oss-fuzz [1]. [1] https://github.com/google/oss-fuzz/tree/master/projects/mosh
2.
by achernya 4y ago
The only mosh CVE [1] was in the terminal emulator (a DoS that could only be triggered by a local user), not in the protocol. There have been no vulnerabilities in mosh's UDP protocol. [1] https://nvd.nist.gov/vuln&#x2F
3.
by achernya 4y ago
QUIC datagrams not having a stream ID was a compromise, which is why the H3-DGRAM draft exists to add them. Any other protocol can use cite and use H3-DGRAM even if it itself is not using HTTP/3.
4.
by achernya 5y ago
https://peering.google.com/#/infrastructure has maps of Google CDN infrastructure. (work at Google, and on the CDN)
5.
by achernya 5y ago
futex is a Fast Userspace muTEX. It's the syscall to help implement a mutex when there are two or more threads waiting on the lock to let other processes/threads schedule and do useful work during the wait.
6.
by achernya 5y ago
Following up on this, there's discussion on github [1] about this, and we're currently leaning towards allowing URIs. [1] https://github.com/DavidSchinazi/draft-cms-masque-connect-ip...
7.
by achernya 5y ago
Right now we're focusing on building a functional core protocol and making sure it's sufficiently extensible. It should be possible to build chaffing as an add-on extension down the line.
8.
by achernya 5y ago
We have built a VPN over QUIC, and the core code is open source already [0]. We're working on standardizing "IP Proxying" over QUIC as part of the MASQUE working group at IETF. So far, we've adopted a requirements docume
9.
by achernya 6y ago
It looks like the links to the code have some junk characters at the end. It should be https://github.com/wsmoses/Enzyme .
10.
by achernya 9y ago
Author here -- MIT does not currently have IPv6. Although MIT did receive a /24 IPv6 allocation, https://whois.arin.net/rest/net/NET6-2603-4000-1 , it's not routable everywhere on campus yet. Unfortunatel
11.
by achernya 10y ago
The specific detail that you've noticed in the Go implementation has to do with RFC 7540, Section 9.2.2 ( https://tools.ietf.org/html/rfc7540#section-9.2.2 ) which requires TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for
12.
by achernya 10y ago
I ran a nearly identical screen theme for a long time, before switching to byobu. Nice to see this broken down, screen's format strings are quite dense.
13.
by achernya 11y ago
That is not sufficient -- TLS Server Name Indication (SNI) is still cleartext in the handshake.
14.
by achernya 11y ago
> In addition, the tech support was wonderful. A few years after I graduated I remembered a blog I had kept from my athena account, and emailed in to ask if they happened to still have it. They kind of did; they sent me a SQL dump of its
15.
by achernya 11y ago
Which qemu are you cloning? When we taught 6.828 over IAP term we ported the patches to qemu 1.7.0 and put them up at https://github.com/geofft/qemu . I see the repo has a 2.3.0 and 2.4.0 branch now too. I last built 1.
16.
by achernya 11y ago
Is there a comparison of reTTY with reptyr ( https://github.com/nelhage/reptyr )? reptyr claims to work with less while reTTY does not.
17.
by achernya 12y ago
It's not that much of a myth. When Google first announced that the Galaxy Nexus was not getting KitKat, I was pretty disappointed, as I had one too. I looked into why there was no official support, and when I found out it had to do wit
18.
by achernya 12y ago
I'm not sure it's reasonable to expect Google to update a device to the latest version when the hardware manufacturer has exited the market -- http://www.cnet.com/news/google-to-samsung-galaxy-nexus-owne... .
19.
by achernya 12y ago
You're correct, the protection is implemented in hardware, but the pages have to be marked appropriately. This message describes a patchset that correctly marks the kernel pages as writable xor executable.
20.
by achernya 12y ago
This was one of my favorite classes, so much that a few of us were crazy enough to offer a January term version of it last year. The material is the same, but the website formatting is for the labs a bit different, and may be more readable
21.
by achernya 12y ago
I'd like to congratulate all the students for all of their hard work. 6.858 always produces new, original results, and this year is no different.
22.
by achernya 12y ago
More details on http://pki.google.com/ .
23.
Refusing to verify myself: I am liz on Keybase.io(blog.lizdenys.com)
201 points by achernya 12y ago|103 comments
24.
by achernya 13y ago
This has the problem of "where does the first hacker come from?" Then I realized the first hacker is almost certainly Ada Lovelace, who wrote the first computer program for Babbage's Analytical Engine.
25.
by achernya 14y ago
I've used mosh over iodine, by simply having the iodine-server forward all of my packets via IPv4 NAT. I then set my client gateway to use dns0 instead of eth0. Works great!
26.
by achernya 14y ago
Assuming you are running the latest Fedora, you can get the SRPM from the main Fedora Project servers: http://dl.fedoraproject.org/pub/fedora/linux/updates/16/SRPM... There are source and binary packages for Fedora 15, 16, the upcoming 17