Live data from Hacker News

Viewing profile — pzb

pzb

HN member
Joined
Tue, Jan 18, 2011, 1:19 PM UTC
HN karma
700
Public activity
73 items

About pzb

Peter Bowen

I'm a engineer working at General Motors on a variety of software and hardware projects.

I used to a security engineer at Apple working on iCloud and Apple Cloud Services.

I used to be a Principal Security Engineer at Amazon Web Services.

I used to work in AWS Cryptography and was primarily responsible for Amazon Trust Services, their public CA. My old group also owns AWS CloudHSM, AWS Key Management Service, and some new things. Previously I worked on EC2 and have dabbled in various other parts of AWS.

See http://www.peterbowen.org/ Contact me at pzbowen@gmail.com or peter.z.bowen@gm.com

[ my public key: https://keybase.io/pzb; my proof: https://keybase.io/pzb/sigs/ncn-SquIIOKO-pD9o-CvE96l2zUzrvskCwZ-vo8q8lU ]

Recent public activity

  1. comment
    Comment #47898261

    X.509 absolutely lives on -- https://www.itu.int/rec/t-rec-x.509 last update was October 2024. However WebPKI uses PKIX which is fairly stubbornly stuck on RFC5280. On the ITU side…

  2. comment
    Comment #45071155

    From the ICANN site, 154 gTLD agreements have been terminated. I'm not sure how many due to non-payment, but https://domainincite.com/30105-icann-to-terminate-five-new-g... indicat…

  3. comment
    Comment #39450226

    AWS has stated that there is a "Nitro Card for Instance Storage"[0][1] which is a NVMe PCIe controller that implements transparent encryption[2]. I don't have access to an EC2 inst…

  4. story
  5. comment
    Comment #34017638

    https://archive.ph/sVNVU

  6. comment
    Comment #31968367

    The data in this post seems behind. https://auctions.ipv4.global/prior-sales shows that the prices have spiked to more than $50 per IP

  7. comment
    Comment #29929752

    A couple of years ago I ran into the same confusion of the "TeletexString"/"T61String" data type in ASN.1. After going down the rabbit hole of what is T.61 and trying to map it to …

  8. comment
    Comment #26294676

    I put together a historical list of TLDs that had been removed in 2017: https://github.com/pzb/TLDs/blob/master/removed/rmtlds.csv . It overlaps with the early part of this list. .…

  9. comment
    Comment #22156064

    http://www.simulatechnology.com/Product/Detail/uid/5de9347e-... exists, at least to some extent. It uses the aforementioned chip.

  10. comment
    Comment #22156030

    Cypress has a chip out for this: https://www.cypress.com/products/ez-usb-hx3pd-usb-31-gen-2-h... It has one USB Type-C in with 3 USB Type-C out plus 4 USB Standard-A out. One of th…

  11. comment
    Comment #22156019

    You can do 3840x2160@60Hz (and 24bpp/8bpc) over USB Type-C on newer displays. DisplayPort Alt Mode over USB-C using DisplayPort 1.3/1.4 can support 4K + USB 3 Gen2 on one cable. ht…

  12. comment
    Comment #16593215

    I've been working on a similar system that is in the process of being adopted by at least one standards group ( https://github.com/cabforum/documents ). I would strongly recommend …

  13. comment
    Comment #15239121

    Unfortunately the "distributing a modified version of an open source project under that project's name" can be problematic from a trademark perspective. This has come up many times…

  14. comment
    Comment #14727512

    It is important to note that "Dynamo" and "DynamoDB" are two very different things that happen to share many of the same letters. DynamoDB is not Dynamo.

  15. comment
    Comment #13335803

    I think that many newer vendors of certificates are following this model. Let's Encrypt and AWS Certificate Manager both simply have certificates with names. One name, two names, 5…

  16. story
  17. comment
    Comment #13032268

    Both Smart Cards and HSMs can (and frequently do) contain FIPS validated cryptographic modules and can be USB devices. What seems to set them apart is content capacity and speed. A…

  18. comment
    Comment #13031381

    The author brings up many reasonable points but seems to mix issues of HSMs & Smart Cards not providing a generic open hardware platform with possible security problems of a platfo…

  19. comment
    Comment #13005675

    I agree 100%, but they don't have an AP + CloudKey + Security Gateway in one unit. That is what many people effectively want for home use.

  20. story
  21. story
  22. comment
    Comment #11655421

    When encoding those characters in UTF-8, you will never end up with 0x2F as a byte. On of the properties of UTF-8 is that bytes with the high bit not set (e.g. 0x0 to 0x7e) never a…

  23. comment
    Comment #11254006

    How do you do that? Where do you draw the line? Basically every company I've worked for has, at some point and to varying levels, taken government funding. It could be buying off t…

  24. comment
    Comment #10959369

    From first hand experience, big companies are hiring constantly from overseas to the US. If you can pass the interview, they will figure out how to legally get you on payroll. If y…

  25. story