Viewing profile — pzb
pzb
HN member- Joined
- Tue, Jan 18, 2011, 1:19 PM UTC
- HN karma
- 700
- Public activity
- 73 items
- HN profile
- View on Hacker News ↗
About pzb
I'm a engineer working at General Motors on a variety of software and hardware projects.
I used to a security engineer at Apple working on iCloud and Apple Cloud Services.
I used to be a Principal Security Engineer at Amazon Web Services.
I used to work in AWS Cryptography and was primarily responsible for Amazon Trust Services, their public CA. My old group also owns AWS CloudHSM, AWS Key Management Service, and some new things. Previously I worked on EC2 and have dabbled in various other parts of AWS.
See http://www.peterbowen.org/ Contact me at pzbowen@gmail.com or peter.z.bowen@gm.com
[ my public key: https://keybase.io/pzb; my proof: https://keybase.io/pzb/sigs/ncn-SquIIOKO-pD9o-CvE96l2zUzrvskCwZ-vo8q8lU ]
Recent public activity
-
comment
Comment #47898261
X.509 absolutely lives on -- https://www.itu.int/rec/t-rec-x.509 last update was October 2024. However WebPKI uses PKIX which is fairly stubbornly stuck on RFC5280. On the ITU side…
-
comment
Comment #45071155
From the ICANN site, 154 gTLD agreements have been terminated. I'm not sure how many due to non-payment, but https://domainincite.com/30105-icann-to-terminate-five-new-g... indicat…
-
comment
Comment #39450226
AWS has stated that there is a "Nitro Card for Instance Storage"[0][1] which is a NVMe PCIe controller that implements transparent encryption[2]. I don't have access to an EC2 inst…
- story
-
comment
Comment #34017638
https://archive.ph/sVNVU
-
comment
Comment #31968367
The data in this post seems behind. https://auctions.ipv4.global/prior-sales shows that the prices have spiked to more than $50 per IP
-
comment
Comment #29929752
A couple of years ago I ran into the same confusion of the "TeletexString"/"T61String" data type in ASN.1. After going down the rabbit hole of what is T.61 and trying to map it to …
-
comment
Comment #26294676
I put together a historical list of TLDs that had been removed in 2017: https://github.com/pzb/TLDs/blob/master/removed/rmtlds.csv . It overlaps with the early part of this list. .…
-
comment
Comment #22156064
http://www.simulatechnology.com/Product/Detail/uid/5de9347e-... exists, at least to some extent. It uses the aforementioned chip.
-
comment
Comment #22156030
Cypress has a chip out for this: https://www.cypress.com/products/ez-usb-hx3pd-usb-31-gen-2-h... It has one USB Type-C in with 3 USB Type-C out plus 4 USB Standard-A out. One of th…
-
comment
Comment #22156019
You can do 3840x2160@60Hz (and 24bpp/8bpc) over USB Type-C on newer displays. DisplayPort Alt Mode over USB-C using DisplayPort 1.3/1.4 can support 4K + USB 3 Gen2 on one cable. ht…
-
comment
Comment #16593215
I've been working on a similar system that is in the process of being adopted by at least one standards group ( https://github.com/cabforum/documents ). I would strongly recommend …
-
comment
Comment #15239121
Unfortunately the "distributing a modified version of an open source project under that project's name" can be problematic from a trademark perspective. This has come up many times…
-
comment
Comment #14727512
It is important to note that "Dynamo" and "DynamoDB" are two very different things that happen to share many of the same letters. DynamoDB is not Dynamo.
-
comment
Comment #13335803
I think that many newer vendors of certificates are following this model. Let's Encrypt and AWS Certificate Manager both simply have certificates with names. One name, two names, 5…
- story
-
comment
Comment #13032268
Both Smart Cards and HSMs can (and frequently do) contain FIPS validated cryptographic modules and can be USB devices. What seems to set them apart is content capacity and speed. A…
-
comment
Comment #13031381
The author brings up many reasonable points but seems to mix issues of HSMs & Smart Cards not providing a generic open hardware platform with possible security problems of a platfo…
-
comment
Comment #13005675
I agree 100%, but they don't have an AP + CloudKey + Security Gateway in one unit. That is what many people effectively want for home use.
- story
- story
-
comment
Comment #11655421
When encoding those characters in UTF-8, you will never end up with 0x2F as a byte. On of the properties of UTF-8 is that bytes with the high bit not set (e.g. 0x0 to 0x7e) never a…
-
comment
Comment #11254006
How do you do that? Where do you draw the line? Basically every company I've worked for has, at some point and to varying levels, taken government funding. It could be buying off t…
-
comment
Comment #10959369
From first hand experience, big companies are hiring constantly from overseas to the US. If you can pass the interview, they will figure out how to legally get you on payroll. If y…
- story