robn_fastmail

6 ms·

1.
The JMAP Test Suite(blog.fastmail.com)
10 points by robn_fastmail 10y ago|0 comments
2.
Pobox switches to FastMail for webmail(blog.pobox.com)
2 points by robn_fastmail 10y ago|0 comments
3.
by robn_fastmail 11y ago
I don't know about bounties, because I'm not personally in favour of vigilantism, but I do take your point. Honestly, I think the ease in which people can be anonymous is major problem here. Anyone with an internet connection can
4.
by robn_fastmail 11y ago
Generally, we talk about what we're doing because we're all excited about what we do. It's always been that way for us, and our customers really appreciate the honesty and transparency. On this particular one, we really did l
5.
by robn_fastmail 11y ago
Quite. As my dear colleague said this morning, "hubris" is the word of the day. Still, I'm not sorry we posted it.
6.
by robn_fastmail 11y ago
Datacentre confirmed a DDoS attack, which took a little while to mitigate. We're looking good now, but we're continuing to monitor.
7.
How to stop a DDoS attack(blog.fastmail.com)
114 points by robn_fastmail 11y ago|27 comments
8.
by robn_fastmail 11y ago
Indeed. As I note in the post, this wasn't something we _needed_ to do at that time, we were just curious. Replacing a function with a faster implementation is trivial; its just another deployment and we do several of those each week.
9.
by robn_fastmail 11y ago
The results in the tests are all with optimisations (-O3 -march=sandybridge -mtune=intel), as mentioned in the post. The exception is the Debian packaged version of zlib, because we don't control that. That's the reason I include
10.
by robn_fastmail 11y ago
I think that mostly, your benchmarks have to match your workloads. Most of the CRC32 benchmarks I've seen are looking at larger buffers. The xxhash function mentioned elsewhere in this thread was claimed to be "an order of magnitu
11.
by robn_fastmail 11y ago
Same day, in fact: https://git.cyrus.foundation/diffusion/I/browse/master/lib/c...
12.
by robn_fastmail 11y ago
My quick tests here (using the same methods outlined in the post) suggests its around 30% faster on 64-byte buffers. If we're ever shopping for a new hash function entirely, I'll make sure its considered. Right now its not worth i
13.
by robn_fastmail 11y ago
They do work, but only if you upload them via CardDAV - we don't have any UI for them in the web client yet.
14.
by robn_fastmail 11y ago
Not a chance :)
15.
by robn_fastmail 11y ago
In what way do you consider the privacy policy cavalier? What would you prefer it said? I don't believe we made any claims that Australia is a "privacy Eden" or that we're "paragon of privacy". Indeed, we frequ
16.
by robn_fastmail 11y ago
Maybe. They'd have to issue that warrant to our datacentre operators though, not us, because there's nowhere to send the documentation. And then they can compel our datacentre not to talk about it, if they like, but they can'
17.
by robn_fastmail 11y ago
Yes, we're an Australian company. https://www.fastmail.com/about/company.html
18.
by robn_fastmail 11y ago
Dumb storage is fine if you only have a single actor that can maintain a copy of the state at all times. As soon as you've got multiple actors on the data (another client on your desktop or phone, or even something doing mail delivery)
19.
by robn_fastmail 11y ago
> JMAP server implementations probably will require a good database, not just a dumb FS like in remoteStorage. To do JMAP well you need to be able to calculate change sets, which does mean a database, though a fairly light one. I think y
20.
by robn_fastmail 11y ago
No, because it's an actual application. Edit this and submit a PR: https://github.com/jmapio/jmap-perl/blob/master/htdocs/index...
21.
FastMail adds CardDAV support(blog.fastmail.com)
4 points by robn_fastmail 11y ago|0 comments
22.
by robn_fastmail 11y ago
If you want a laundry list of SSRF methods you should protect against, a great place to start is this slide deck from a talk at ONsec a couple of years ago: http://www.slideshare.net/d0znpp/ssrf-attacks-and-sockets-sm..
23.
by robn_fastmail 11y ago
Done: http://jmap.io/software.html
24.
by robn_fastmail 11y ago
There's not much around yet. The only things that are in any kind of usable/complete state are the proxy, the demo client and the JS client library, all mentioned in the original post. Cyrus has partial support (the basic data mod
25.
by robn_fastmail 11y ago
I don't believe there's anything in it that would prevent that. If you squint, the auth exchange looks a lot like SASL, and that supports pretty much anything. This is something we'll gain more experience with at FastMail ove
26.
by robn_fastmail 11y ago
That's pretty much exactly what it does. Client supplies a HTTP endpoint, that gets called with new state strings. That endpoint arranges for that information to be shipped to the client and then the client issues calls to update metho
27.
by robn_fastmail 11y ago
Yes, via the Authorization: header with a negotiated access token. The spec includes a discovery and authentication mechanism that a client can use to get an access token and can work fine with passwords, OAuth, etc. We don't actually
28.
by robn_fastmail 11y ago
> I, for one, am somewhat leery of people reinventing the wheel - especially for a browser-based environment, where everything has a history of being brittle and short-lived. Yeah, so are we (and we even introduce JMAP with the "now
29.
by robn_fastmail 11y ago
JMAP itself is transport-agnostic, though of course we've only implemented it over regular HTTP so far. Some methods have to be batched together and executed in order, as it's possible to arrange for the output of one method to be
30.
by robn_fastmail 11y ago
We've written about this before: http://blog.fastmail.com/2013/10/07/fastmails-servers-are-in...

More ›