Viewing profile — achernya

Yes, mosh has fuzz tests in oss-fuzz [1]. [1] https://github.com/google/oss-fuzz/tree/master/projects/mosh

The only mosh CVE [1] was in the terminal emulator (a DoS that could only be triggered by a local user), not in the protocol. There have been no vulnerabilities in mosh's UDP proto…

QUIC datagrams not having a stream ID was a compromise, which is why the H3-DGRAM draft exists to add them. Any other protocol can use cite and use H3-DGRAM even if it itself is no…

https://peering.google.com/#/infrastructure has maps of Google CDN infrastructure. (work at Google, and on the CDN)

futex is a Fast Userspace muTEX. It's the syscall to help implement a mutex when there are two or more threads waiting on the lock to let other processes/threads schedule and do us…

Following up on this, there's discussion on github [1] about this, and we're currently leaning towards allowing URIs. [1] https://github.com/DavidSchinazi/draft-cms-masque-connect-…

Right now we're focusing on building a functional core protocol and making sure it's sufficiently extensible. It should be possible to build chaffing as an add-on extension down th…

We have built a VPN over QUIC, and the core code is open source already [0]. We're working on standardizing "IP Proxying" over QUIC as part of the MASQUE working group at IETF. So …

It looks like the links to the code have some junk characters at the end. It should be https://github.com/wsmoses/Enzyme .

Author here -- MIT does not currently have IPv6. Although MIT did receive a /24 IPv6 allocation, https://whois.arin.net/rest/net/NET6-2603-4000-1 , it's not routable everywhere on …

The specific detail that you've noticed in the Go implementation has to do with RFC 7540, Section 9.2.2 ( https://tools.ietf.org/html/rfc7540#section-9.2.2 ) which requires TLS_ECD…

I ran a nearly identical screen theme for a long time, before switching to byobu. Nice to see this broken down, screen's format strings are quite dense.

That is not sufficient -- TLS Server Name Indication (SNI) is still cleartext in the handshake.

> In addition, the tech support was wonderful. A few years after I graduated I remembered a blog I had kept from my athena account, and emailed in to ask if they happened to still …

Which qemu are you cloning? When we taught 6.828 over IAP term we ported the patches to qemu 1.7.0 and put them up at https://github.com/geofft/qemu . I see the repo has a 2.3.0 an…

Is there a comparison of reTTY with reptyr ( https://github.com/nelhage/reptyr )? reptyr claims to work with less while reTTY does not.

It's not that much of a myth. When Google first announced that the Galaxy Nexus was not getting KitKat, I was pretty disappointed, as I had one too. I looked into why there was no …

I'm not sure it's reasonable to expect Google to update a device to the latest version when the hardware manufacturer has exited the market -- http://www.cnet.com/news/google-to-sa…

You're correct, the protection is implemented in hardware, but the pages have to be marked appropriately. This message describes a patchset that correctly marks the kernel pages as…

This was one of my favorite classes, so much that a few of us were crazy enough to offer a January term version of it last year. The material is the same, but the website formattin…

I'd like to congratulate all the students for all of their hard work. 6.858 always produces new, original results, and this year is no different.

More details on http://pki.google.com/ .

This has the problem of "where does the first hacker come from?" Then I realized the first hacker is almost certainly Ada Lovelace, who wrote the first computer program for Babbage…

I've used mosh over iodine, by simply having the iodine-server forward all of my packets via IPv4 NAT. I then set my client gateway to use dns0 instead of eth0. Works great!