Viewing profile — dward

Spanner and Dremel/BigQuery are both SQL database in that you interact with them by sending them SQL. Maybe I don't understand the terminology.

Just run apt install billion-$$$-arr regulated-institution and write a systemd unit file, then run apt upgrade occasionally. What’s the problem?

GKE can't offer financial backed SLOs without charging for the service. This is something that, I assume, significant customers want and that competitors already have: https://aws.…

https://cloud.google.com/armor/ GCP Network has built in DoS mitigation as well (e.g. in the load balancing layer) so you get some protection from that for free.

HMACs do not require collision resistance from the underlying hash to provide secure message authentication. HMAC-MD5 is still considered "secure", although that doesn't mean you s…

Identity aware proxy supports SSH tunneling which means you don't need to manage a bastion. https://cloud.google.com/iap/docs/using-tcp-forwarding#tunne... For connecting VMs witho…

See also std::embed.

An ecosystem has evolved around Borg. Custom hardware, kernel, schedulers, telemetry, atomic clocks, networking, security, management... have all evolved around Borg proper to meet…

A zero-day is an interesting label to put on a bug disclosed "after the company failed to fix the issue within 90 days". I guess, you learn something new every zero-day.

The policy seems sane. * They know when they can serve 0RTT from their cache safely because they can be reasonably certain if handling a cached request is side effect free. * If co…

Oomd reminds me of userspace OOM handling mechanism proposed by David Reintjes of Google: https://lwn.net/Articles/590960/

Use go for what? DNS resolution? The default behavior is to use the system DNS resolver. The Go resolver will be used if the system is resolver is not avaialble (e.g. if the binary…

By default, go compiles binaries linked to libc to use the system DNS resolver. It does re-implement a DNS resolver but it's only used if CGO is disabled at compilation time.

Jerk is the derivative of acceleration. I haven't heard jank used in that context.

Albeit this was years ago but I was referring to the construction linked from the original paper proposed in: https://cs.nyu.edu/media/publications/TR2013-962.pdf It’s pretty unwei…

The published asymmetric macaroon constructions were pretty gross last time I looked. We were missing a practical asymmetrically verifiable append only signature. This deficiency r…

Token binding changed a few things as it evolved from origin bound certificates, notably: * moving from using client certs to signing exported keying material[0] to prove key posse…

A couple corrections to the section on token binding: 1. It works on all TLS connections, not just mTLS connections. It even works on unauthenticated TLS (although I wouldn't advis…

You can map ingress/egress channels of a network device directly into a processes memory inuserspace. These are just memory pages in what's known as the DMA region that the device …

> Package ptrace provides a ptrace-based implementation of the platform interface. This is useful for development and testing purposes primarily, and runs on stock kernels without …

It's been used in production to sandbox specific workloads for years.

I don't think ingress filtering on Google's edge would have helped if the rerouting happened in any of the transit ASs between AWS and Google.

Allo supported e2e encryption in incognito mode. https://signal.org/blog/allo/

I’d say that’s the how. Why do you look at it when you do not wish too? Habit? I’d suggest trying to be mindful of your body/subconscious/emotional feedback next time you have the …

Why does it distract you?