Viewing profile — ian-lewis

Rather that the contain/don't-contain dichotomy, what's more important is gVisor's design principle that it always has 2 layers of isolation from the host and doesn't rely on any o…

There's a blub on "why Go?" on the website if you're interested. https://gvisor.dev/docs/architecture_guide/ > gVisor is written in Go in order to avoid security pitfalls that can …

That's fair. As the reader you can be the judge. Advocacy is partly about inspiring others and I think this does that while presenting an accurate representation of what the farmer…

Sure. It's just that we can't make it more genuine or plausible by writing it that way because it's not true.

* Disclosure: I work for Google with the OP, and sit next to him in Japan. "2. Google dispatched their solutions architect to work with them." That's not what happened at all. He b…

Theoretically, you could make this work with any DNS provider with an API. Much the same way that lego does: https://github.com/xenolf/lego/tree/master/providers/dns AFIACT you sti…

The logic that lego has could certainly be coopted here but having a declarative config for the certificate using ThirdPartyResource is the right way to go IMHO. Also, lego is a bi…

That seems correct. He discovered it while creating the coq specification but coq wasn't itself used to discover the bug. He confirmed that much in this podcast (It's in Japanese t…