zarvox

6 ms·

1.
by zarvox 6y ago
https://media.ccc.de/v/27c3-4087-en-console_hacking_2010
2.
by zarvox 8y ago
It's substantially less risky, less invasive, and easier to do in parallel with other ongoing feature development than a port to another language would be. It's much easier to get incremental value for the investment if you'
3.
by zarvox 8y ago
Not yet (still incomplete) but I'd be happy to drop you a line if/when that changes - send me an email?
4.
by zarvox 8y ago
I've recently been building an IRC bouncer and webapp with Actix, and it's been really smooth sailing so far -- excellent documentation, extensive examples, and everything I've touched so far has just worked the way you'
5.
by zarvox 10y ago
My impression is that bus1 appears to have taken the (copious) feedback from the kdbus debacle and actually applied it and looked at other platforms' IPC to build a novel IPC system for Linux worth using. There's a talk [1] about
6.
by zarvox 10y ago
Submitted this to Our Incredible Journey [1] which documents a long string of services shut down post-acquisition. [1]: http://ourincrediblejourney.tumblr.com/
7.
by zarvox 11y ago
For folks looking for escape rooms all over the world: take a look at http://escaperoomdirectory.com/
8.
by zarvox 11y ago
http://www.freedesktop.org/wiki/Software/systemd/TheCaseForT... In short: because having things in /usr is equally compatible, and makes some useful things like atomically snapshotting /usr to snaps
9.
by zarvox 11y ago
Relevant thread from the designers of Cap'n Proto and Flatbuffers from around the date of the Flatbuffers release: https://news.ycombinator.com/item?id=7901991
10.
by zarvox 11y ago
Perhaps, but even a single database alone doesn't ensure atomicity. For instance: suppose you're deactivating a user. You've got a user table, with an id column and a "deactivated" column. Then you've got an
11.
by zarvox 11y ago
Indeed. CRUD apps (which I'll argue are the vast majority of applications) are easier to write, easier to understand, and easier to make have the behavior users expect when there's only one datastore and you never have to deal wit
12.
The Quest to Replace Passwords [pdf](jbonneau.com)
21 points by zarvox 12y ago|2 comments
13.
by zarvox 12y ago
There's also pastebinit, which is packaged by at least the major distros and supports multiple pastebins. http://launchpad.net/pastebinit
14.
by zarvox 12y ago
The nicest things about error handling in this manner are that any function that has a error condition makes it clear in the function signature, and any time you call a function that can fail, it's visible in the source where you make
15.
by zarvox 12y ago
I'm in the same boat - I wind up in a situation where I find myself missing the features, stability, coherance, and integration of systemd at least once a week in my day job, where we currently use Ubuntu with upstart. For me, it'
16.
by zarvox 12y ago
Thanks for the detailed reply! I agree that there are certainly a number of tradeoffs involved, and reading the design goals you linked, I see that (in particular) the desire to be able to run fwknop on OpenWRT and other particularly resour
17.
by zarvox 12y ago
Moxie's criticism of portknocking implementations [1] has several facets that apply to fwknop. I would not recommend using fwknop in general. Unrelated to security, but practical experience from using fwknop in the past: port-knocking
18.
by zarvox 12y ago
Not terribly, at first glance. Crypto generally uses fields with no subfields and large characteristic, whereas these attacks seem to generally be limited to fields with subfields and small characteristic. It's interesting work, but n
19.
by zarvox 13y ago
I really like Mozilla's recommendations, which are detailed, explicit, and well-justified: https://wiki.mozilla.org/Security/Server_Side_TLS#Recommende...
20.
by zarvox 13y ago
Update from https://status.digitalocean.com/ : Networking Issue in NY1 Facility At this time, we are currently investigating an issue in our NY1 facility. We are working to determine the exact cause/resol
21.
by zarvox 13y ago
As of this posting, https://www.digitalocean.com/login is returning CloudFlare's "Always Online" cache. I just got woken up by two of our boxes being unreachable, but one of my other boxes is up, so maybe it&
22.
Virgil 3D - a virtual 3D GPU for use in qemu VMs(virgil3d.github.io)
4 points by zarvox 13y ago|0 comments
23.
by zarvox 13y ago
Cert pinning only makes sense if you happen to trust multiple CAs, but want to stick to the cert issued by one particular one. We only trust one CA, and each issued cert is bound to a user and device id, so this is a non-issue. :)
24.
by zarvox 13y ago
A proper writeup is in the works, but to cover the basics: we know not to implement our own crypto. :) Passwords: we apply scrypt() before any use or storage. We never store the plaintext. Device-to-device: standard PKI. We have a CA, and
25.
by zarvox 13y ago
Yes, we use NAT traversal techniques where possible on the WAN, and direct TCP connections over the LAN.
26.
by zarvox 13y ago
Your data is never stored on our servers in an unencrypted form. Moreover, the data is never stored on our servers at all. In some scenarios (when two clients are both behind aggressive firewalls, for instance) the data may be _relayed_ by
27.
by zarvox 13y ago
Ah, I understand completely; no worries. :) Officially, we only support Ubuntu, but in general we like to have things work for any setup that's not too exotic. Indeed, some of the more helpful bug reports I've looked at and fixed have co
28.
by zarvox 13y ago
Hey, this is Drew from AeroFS. Sorry to hear you've been having trouble syncing. If you want to report an issue (AeroFS -> Help -> Report a Problem in the GUI, or aerofs-sh report "Description of your issue" from your terminal of
29.
by zarvox 14y ago
I'm an engineer at AeroFS, and yep, we use scrypt. The client applies scrypt with a per-user salt to the S3 encryption passphrase you enter at install-time, which gives a 512-bit key that the client stores. This is not quite the AES key i
30.
by zarvox 14y ago
Clay Shirky has studied this extensively and is probably the best resource. "A Group Is Its Own Worst Enemy" [0] is perhaps the best single piece on what you're thinking about. He offers several design guidelines toward the end of the piec

More ›