hujun

6 ms·

1.
by hujun 2mo ago
The two key issues PQC try to address are key exchange and digital signature, which happen during TLS handshake, the mechanism you described happen after TLS is established; so if a quantum computer breaks TLS, then it effectively reduced H
2.
by hujun 5mo ago
k8s is simple because it offload some key tasks to 3rd party like network and storage; it is not easy to: a) setup and maintain a k8s cluster with all necessary components from at least a dozen different sources b) design your application t
3.
by hujun 5mo ago
> Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f*d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds mean
4.
by hujun 11mo ago
really unfortunately, these few have capability and will to drag everybody else into war
5.
by hujun 1y ago
"My second thought is how badly Chinese communism must be doing that they need such a massive effort in order to ..." China have visa-free visit policy for many countries, you could actually go there to see how "bad" it
6.
by hujun 1y ago
yes, and I think one big reason enterprise might not buy your product even if it is guaranteed to make/save $X is $ is often NOT most important thing to the people make buying decision, specially when it is not your own money to save o
7.
by hujun 1y ago
one thing I liked about cobra is the auto complete support, but I don't like the manual process of define command and parameter and not easy to extend, so I wrote https://github.com/hujun-open/myflags , it is built
8.
by hujun 2y ago
nah, GPS is needed by US outside US as well, I bet someone will propose a 'great' idea to start charging for it
9.
by hujun 2y ago
because Trump said TSMC is stealing US chip biz, and threaten 100% tariff [1]. I think this is TSMC's attempt to avoid tariff [1] https://www.pcmag.com/news/trump-intel-was-great-until-taiwa...
10.
by hujun 2y ago
for user wants to have self hosted CA (for testing) with easy to use GUI, XCA is a great option
11.
by hujun 2y ago
one thing I agree that software/standard people like to churn, churn is a source of new income regardless if QC could break RSA or not in the future, people could make profit now
12.
by hujun 2y ago
one tip of the list I can't agree more is the www.seat61.com for train ticket, especially if you travel in Europe, where train is the most convenient way to travel between cities/nations but man is it such complex system, there ar
13.
by hujun 2y ago
or sold to US I could totally see this happening soon
14.
by hujun 2y ago
quote from tiktok's webiste https://usds.tiktok.com/usds-myths-vs-facts/ : ``` Myth: TikTok’s parent company, ByteDance Ltd., is Chinese owned. Fact: TikTok’s parent company ByteDance Ltd. was founded by Chinese en
15.
by hujun 2y ago
This reminds me an interesting netflix doc series, History of Swear words: https://www.netflix.com/title/81305757 hosted by Nicolas Cage
16.
by hujun 2y ago
all network devices that terminates a subscriber (broadband or mobile) has a feature called LI: https://en.wikipedia.org/wiki/Lawful_interception , which is required by law in almost all countries one requirement is th
17.
by hujun 2y ago
depends on how much "k8s native" code you have, there are application designed to run on k8s which uses a lot of k8s api and also if you app already micro-serviced, it is also not straight forward to change it back
18.
by hujun 2y ago
you can have the lte modem to connect to a different lte network
19.
by hujun 2y ago
now there are LTE modems
20.
by hujun 2y ago
I think the reason behind it is similar to case where you are allowed to watch movie in theater with eye, but not with camera
21.
by hujun 2y ago
no worries, US will ban Chinese battery in no time: https://www.reuters.com/world/us/us-lawmakers-call-add-china...
22.
by hujun 2y ago
Dark Forest Hypothesis: https://en.wikipedia.org/wiki/Dark_forest_hypothesis
23.
by hujun 3y ago
the latest hot one is eBPF/xdp, https://en.wikipedia.org/wiki/Express_Data_Path ; however I think in most cases skipping kernel might not be such a great idea, a lot of kernel features are there for a reason (e.g.
24.
by hujun 3y ago
the purpose of using TAP is to be able to write IP stack in user mode code; however TAP is not the only way on linux, you could also use raw(AF_PACKET)or XDP socket, they also allow you bypass kernel IP stack
25.
by hujun 3y ago
there are a few k8s distributions works on single server like microk8s, kind, and they are not difficult to setup on a single server.
26.
by hujun 3y ago
`That is, if it costs very little to have larger keys, why not have larger keys?` it is often very expensive/difficult to change length of a RSA key is part of existing platform/infrastructure, like key in TPM/HSM/CA inf
27.
by hujun 3y ago
Arch is also rolling update, and has no trivial chance to break when upgrading, I learned this painfully a few years ago. switched to Ubuntu, which is boring but stable.
28.
by hujun 4y ago
This looks interesting, specially the support of GTP/SCTP; although it seems quite new, first commit on github is last year, wonder if anyone has used this in production?
29.
by hujun 4y ago
this is a good a good blog, although I wonder is there any good up-to-date free online resource to learn C for experienced programmer (I learned C many years ago, but never use it seriously and forgot much of it)? I searched around, the res
30.
by hujun 4y ago
similar experience here, the UI design is confusing, tell you to select an area but apparently you can't select/drag on the map, you can only typing the address then many times the auto complete doesn't work, and it seems you

More ›