Viewing profile — benblack

Lattice is a more minimalist approach, for those who desire the production hardened core of Cloud Foundry but prefer to bring their own PaaS components or simply experiment. http:/…

I make complete AMIs with packer, configure them entirely using environment variables in userdata, configuration data in etcd, and shell scripts, and run all services in docker con…

Another possible explanation is that she is intelligent and motivated and you are an asshole.

I made a shirt for all you guys who think the rape, erm, PICK UP ARTISTE, book is totes cool and nbd http://www.cafepress.com/mf/79293678/i-am-rape-culture_tshir...

NIST has weighed in on how to use TLS: http://tools.ietf.org/html/rfc6460 I am not aware of any proposed attacks on the approved cipher suites that are anywhere near feasible. TLS …

They've known for some time http://dictionary.reference.com/browse/ism .

That you are unable to distinguish between an instance of sexual discrimination (called sexual discrimination) and systemic sexual discrimination (called sexism) does not mean anyt…

Asserting all members of a group of people are subhuman sure does sound like something that happened in Europe in the 30s and 40s. What point were you trying to make? Immanentize y…

Seems like a lot of folks missed the section of the post explaining their implementation and use of _ECDHE_ not _EDH_. The performance impact of ECDHE is surprisingly small.

Correct!

More great work from Google legitimizing and advocating for strong HTTPS defaults. I'm looking forward to this being broadly adopted. Securely Yours, Lil' B

We have no plans to support Thrift.

Much like our engineers, our software is extremely opinionated. Ordasity, Scalang, and Overlock are all small, extremely focused libraries to solve a single problem in a single way…

Well said, sir.

What does he charge to just shut up already?

The formatting tool in question defaults to _not_ doing this, specifically to comply with the Scala Style Guide which does _not_ do this. The tool had to be explicitly configured t…

You've got it backwards: I haven't seen anyone, including Chas, argue for disallowing Unicode. As you say, replacing a simple, common, 2 character operator with the unusual Unicode…

Ask and ye shall receive: https://github.com/bumptech/stud/pull/6 stunnel DH code inserted into stud.

Banks are unfortunately poster children for what not to do in this space, generally. The default cipher for google.com is RC4-SHA, and I can, if so inclined, force negotiation of A…

While I would certainly prefer to see the major players leading the way in adoption of AES by default, RC4-MD5 persists for at least 2 reasons: 1) Habit 2) As implemented/deployed …

I am recommending that people who do not understand the trade-offs and do not have the traffic for it to matter should probably leave those safe defaults alone. What the banks choo…

Correct, disagreeing with you implies trolling. You are one astute dude, Tom. Keep up the good work!

On a related topic, these are both your comments on this post: "The win here is that losing the RSA key now only allows you to MITM future SSL/TLS connections. This is still a disa…