Viewing profile — ahmedtd

From the article, it doesn't seem like Go is trying to re-encode strings? Go is saying (correctly, IMO) that a UTF8String field in the Issuer is not the same as a PrintableString f…

Stock grants (RSUs, like Google gives out) are taxed as ordinary income at the moment they vest. If you sell them immediately, then you don't pay any additional capital gains tax, …

American laws also have universal jurisdiction (for example, the Bill of Rights doesn't say, "unless you are located outside the US"). Most countries do not explicitly recognize th…

I don't think this is true. It's something that could be useful, with some sort of ACME-like automated issuance, but should definitely be issued from a non-WebPKI certificate autho…

If that's all you want to accomplish, you don't need WebPKI. Just generate a private key and a self-signed certificate. (This is basically how Let's Encrypt / ACME accounts work)

Can you link your PRs here? Kubernetes is such a huge project that there are few reviewers who would feel comfortable signing off an an arbitrary PR in a part of the codebase they …

I have exactly the same two problems, haha. I wonder why they seem unable to fix them.

Sam Altman skipped any attempt to prove his own statements right, so...

It's not enabled by default, but you can --- gRPC Reflection: * https://github.com/grpc/grpc-java/blob/master/documentation/... * https://grpc.io/docs/guides/reflection/ You can th…

Various pieces support pieces for pod to pod mTLS are slowly being brought into the main Kubernetes project. Take a look at https://github.com/kubernetes/enhancements/tree/master/k…

From the sync.Pool documentation: > If the Pool holds the only reference when this happens, the item might be deallocated. Conceptually, the pool is holding a weak pointer to the i…

If they are using multitenant Docker / containerd containers with no additional sandboxing, then yes, then it's only a matter of time and attacker interest before a cross-tenant co…

GKE does ship with both Ingress and Gateway controllers integrated, they set up GCP load balancers with optional automatic TLS certificates. I think you need to flip a flag on the …

That page seems to be a community wiki, and I think the original authors are somewhat confused on that point. If you salt and hash the password on the client side, how is the serve…

In Washington, cyclists can treat stop signs as yield signs, as long as there is no other traffic approaching the intersection. Obviously, though, if you almost hit a pedestrian th…

Related (though not a sator square). A while back I made an implementation of 5x5 word squares, following an example from Knuth: https://row-major.net/articles/2020-05-12-interacti…

Disclosure: I work in GCP engineering, thoughts are my own and not Google's, etc. My impression is that Anthos is probably not what you need if your use case is deployment of a man…

Don't the bits come off the wire one at a time at the server as well? Any ability to read() from multiple sockets coming over the same interface is enabled by the kernel reading th…

Not when the counter overflows back to 0. If it's a 3 bit counter, 0 is A again, not C.

Not really the point of your comment, but... The GKE equivalent of EKS IRSA is GKE Workload Identity. It's pretty much the same user experience: * Enable Workload Identity on your …

I'm pretty sure v2 and v1 functions are totally separate. If you run `gcloud functions list --log-http`, you can see that gcloud makes separate calls to the v2 and v1 apis in order…

www.row-major.net

You don't pop the min, you pop the top of the stack.