Viewing profile — DanielDent

Here's a very quick summary of what I linked above: In Israel it would be easy to look at the data and conclude that vaccines are providing ~67% efficacy against severe disease/dea…

Things that matter a lot these days: https://en.wikipedia.org/wiki/Base_rate_fallacy https://en.wikipedia.org/wiki/Simpson%27s_paradox Someone that's done some analysis using the a…

For a little bit of ancient history: I was one of the admins who worked to create OFTC. We all knew each other from Open Projects Network (which rebranded as Freenode). I was barel…

This paper references https://www.ndss-symposium.org/wp-content/uploads/2019/02/nd... They in turn reference my 2015 take on this: http://dnscookie.com/ With homage Moxie's Cryptog…

I think a fairly manageable path forward is underway which makes this a smaller issue than it first seems: (1) Firefox already uses its own root store (2) App developers can includ…

There's a really big gap between the $0.01/gb you are talking about being charged on droplets and the $0.10/gb that DigitalOcean is using on newer offerings like this and "App Plat…

There are many CDNs that make money charging Indeed DigitalOcean themselves built their place in the market by charging $0.01/gb for bandwidth. How do we reasonably get to $0.10 as…

sigh . DigitalOcean continues their march towards irrelevance. First it was the app platform and now this. Gouging us at $0.10/gigabyte bandwidth charges makes us: (1) think less o…

What this describes is a mechanism for k8s to delete underlying resources prior to removing them from k8s. E.g. before completely removing the CRD representing an S3 bucket, this p…

The .com zone file is updated every few minutes. Caching behaviours will vary significantly. Frequently a significant fraction of traffic can be using new nameservers within minute…

It used to be that nameserver changes with TLDs were measured in days, not minutes. Even today some TLDs continue to operate this way.

I appreciate the compliment, but sadly I haven't yet made the time to write much on the subject. There's a lot I'd like to see implemented.

It would be difficult to differentiate between responses that vary due to load balancing and responses that vary due to active fingerprinting. Even when a site only has a single ph…

This would make it harder to build a fingerprint, especially if responses were sampled from a number of independent sources. The next logical step in the arms race would likely inv…

Third party DNS servers are helpful in one sense - you can share your state with other users. Turning off EDNS with your own recursor won't really make much difference. Limiting th…

I doubt this is quite what you are looking for, but https://github.com/fazibear/export provides simple Elixir/Python interop.

- Never allow any part of the computing systems you use to cache anything. - Insist that everything in your life exist in a state of being functionally pure & stateless. - Eliminat…

It's fun when you check the front page of HN and see your work :).

I published dnscookie.com in late 2015. I google "dns cookies" and a few other things terms, was surprised that the terminology appeared unused, and it seemed suitable for the conc…

An example of something that Cloudflare's approach provides some protection from: http://dnscookie.com/

I have been eagerly waiting for this ever since I saw Chris McCord's demo. Having this become tightly integrated into the Phoenix framework will be game changing. I think there are…

PDFs that work in Chrome's PDF renderer: A calculator: https://pspdfkit.com/images/blog/2018/how-to-program-a-calcu... A game of breakout: https://github.com/osnr/horrifying-pdf-ex…

GSMA standards have always included purposeful insecurity, e.g. look at the history of A5/1 & A5/2. It's a group that buys into the idea of secure backdoors, I'm not sure it's poss…