Viewing profile — hujun

The two key issues PQC try to address are key exchange and digital signature, which happen during TLS handshake, the mechanism you described happen after TLS is established; so if …

k8s is simple because it offload some key tasks to 3rd party like network and storage; it is not easy to: a) setup and maintain a k8s cluster with all necessary components from at …

> Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f*d. All their keys and roots are not PQ and I heard of no progr…

really unfortunately, these few have capability and will to drag everybody else into war

"My second thought is how badly Chinese communism must be doing that they need such a massive effort in order to ..." China have visa-free visit policy for many countries, you coul…

yes, and I think one big reason enterprise might not buy your product even if it is guaranteed to make/save $X is $ is often NOT most important thing to the people make buying deci…

one thing I liked about cobra is the auto complete support, but I don't like the manual process of define command and parameter and not easy to extend, so I wrote https://github.co…

nah, GPS is needed by US outside US as well, I bet someone will propose a 'great' idea to start charging for it

because Trump said TSMC is stealing US chip biz, and threaten 100% tariff [1]. I think this is TSMC's attempt to avoid tariff [1] https://www.pcmag.com/news/trump-intel-was-great-u…

for user wants to have self hosted CA (for testing) with easy to use GUI, XCA is a great option

one thing I agree that software/standard people like to churn, churn is a source of new income regardless if QC could break RSA or not in the future, people could make profit now

one tip of the list I can't agree more is the www.seat61.com for train ticket, especially if you travel in Europe, where train is the most convenient way to travel between cities/n…

or sold to US I could totally see this happening soon

quote from tiktok's webiste https://usds.tiktok.com/usds-myths-vs-facts/ : ``` Myth: TikTok’s parent company, ByteDance Ltd., is Chinese owned. Fact: TikTok’s parent company ByteDa…

This reminds me an interesting netflix doc series, History of Swear words: https://www.netflix.com/title/81305757 hosted by Nicolas Cage

all network devices that terminates a subscriber (broadband or mobile) has a feature called LI: https://en.wikipedia.org/wiki/Lawful_interception , which is required by law in almo…

depends on how much "k8s native" code you have, there are application designed to run on k8s which uses a lot of k8s api and also if you app already micro-serviced, it is also not …

you can have the lte modem to connect to a different lte network

now there are LTE modems

I think the reason behind it is similar to case where you are allowed to watch movie in theater with eye, but not with camera

no worries, US will ban Chinese battery in no time: https://www.reuters.com/world/us/us-lawmakers-call-add-china...

Dark Forest Hypothesis: https://en.wikipedia.org/wiki/Dark_forest_hypothesis

the latest hot one is eBPF/xdp, https://en.wikipedia.org/wiki/Express_Data_Path ; however I think in most cases skipping kernel might not be such a great idea, a lot of kernel feat…

the purpose of using TAP is to be able to write IP stack in user mode code; however TAP is not the only way on linux, you could also use raw(AF_PACKET)or XDP socket, they also allo…