Viewing profile — kbirkeland

While not explicitly pointed toward SSH, the "Asymmetric signatures" section covers this. Their recommendation is to use Ed25519 and avoid all other options mentioned in the articl…

"Explicit is better than implicit" - PEP20 I wouldn't really say that it's a hurdle to greeting the world since you can just throw `print("Hello world")` at the top level.

In this case, it looks like a NASCAR spotter was the winner: https://kickinthetires.net/esports/spotter-josh-williams-ups...

Google scholar returns a pdf[0] when searching the doi. [0] https://epubs.siam.org/doi/pdf/10.1137/0206025

We're already past 768k and are now around 800k[0]. [0] https://bgp.potaroo.net/as2.0/bgp-active.html

I feel like the last two are cheating a bit by explicitly using 32 bit integers where the other examples seemed to use 64 bit.

Also due to the ambiguity of ports also using a colon delimiter, the IPv6 address may be in brackets: [::1:2:0:0:dead:beef]:443 And link-local addresses are mandatory and scoped pe…

Leaking a /4 into BGP would do basically nothing unless the originator was originally advertising a /4. IP forwarding is based on the longest-prefix match. Since allocations are si…

A completely OOB management network is an amazingly high cost when you have presence all over the world. I don't think anybody has gone to the length to double up on dark fiber and…

I'm curious what your experiences are here. With enterprise-level networking equipment and LACP (802.3ad), I've never run into any weird issues.

I believe that's an iota (ι) not a 1.

IMO they would have ideally used "key derivation function" instead of "hash function". It could lead those who know enough to be dangerous to think that safely storing passwords is…

I was curious why you added the `-X GET` to that, but it seems twilio returns 405 Method Not Allowed for HEAD requests. Is there any legitimate reason they would block these?

AFAICT still no update out for the android version either

This is useless without authentication though. You're opening yourself up to attacks on the first retrieve. Sure, you can make sure you're getting the file they want you to have, b…

That dip is probably not related to the 768k limit. The limit doesnt remove all the current routes, it just doesnt allow for new ones to be installed in hardware. All the routing l…

Honestly I skimmed the first part of the article and then checked the comments. It may be a design cliche, but it may be true. I didn't make it to that part.

Is your argument that you only need integrity if you verified the authenticity out of band?

A hash only provides integrity. A signature provides integirty and authentication .

Advertising the longest generally-accepted prefix is more of a BGP hijack defense than a DDoS defense. Longest prefix always wins in IP forwarding, so advertising the longest prefi…

I think the reason for using /30s instead of /31s is mostly legacy. It's a 19 year old standard and most vendors support it. Regardless of the point-to-point subnet used for the lo…

Isn't this what git lfs[0] sets out to solve? [0] https://git-lfs.github.com/