Viewing profile — zarvox

https://media.ccc.de/v/27c3-4087-en-console_hacking_2010

It's substantially less risky, less invasive, and easier to do in parallel with other ongoing feature development than a port to another language would be. It's much easier to get …

Not yet (still incomplete) but I'd be happy to drop you a line if/when that changes - send me an email?

I've recently been building an IRC bouncer and webapp with Actix, and it's been really smooth sailing so far -- excellent documentation, extensive examples, and everything I've tou…

My impression is that bus1 appears to have taken the (copious) feedback from the kdbus debacle and actually applied it and looked at other platforms' IPC to build a novel IPC syste…

Submitted this to Our Incredible Journey [1] which documents a long string of services shut down post-acquisition. [1]: http://ourincrediblejourney.tumblr.com/

For folks looking for escape rooms all over the world: take a look at http://escaperoomdirectory.com/

http://www.freedesktop.org/wiki/Software/systemd/TheCaseForT... In short: because having things in /usr is equally compatible, and makes some useful things like atomically snapshot…

Relevant thread from the designers of Cap'n Proto and Flatbuffers from around the date of the Flatbuffers release: https://news.ycombinator.com/item?id=7901991

Perhaps, but even a single database alone doesn't ensure atomicity. For instance: suppose you're deactivating a user. You've got a user table, with an id column and a "deactivated"…

Indeed. CRUD apps (which I'll argue are the vast majority of applications) are easier to write, easier to understand, and easier to make have the behavior users expect when there's…

There's also pastebinit, which is packaged by at least the major distros and supports multiple pastebins. http://launchpad.net/pastebinit

The nicest things about error handling in this manner are that any function that has a error condition makes it clear in the function signature, and any time you call a function th…

I'm in the same boat - I wind up in a situation where I find myself missing the features, stability, coherance, and integration of systemd at least once a week in my day job, where…

Thanks for the detailed reply! I agree that there are certainly a number of tradeoffs involved, and reading the design goals you linked, I see that (in particular) the desire to be…

Moxie's criticism of portknocking implementations [1] has several facets that apply to fwknop. I would not recommend using fwknop in general. Unrelated to security, but practical e…

Not terribly, at first glance. Crypto generally uses fields with no subfields and large characteristic, whereas these attacks seem to generally be limited to fields with subfields …

I really like Mozilla's recommendations, which are detailed, explicit, and well-justified: https://wiki.mozilla.org/Security/Server_Side_TLS#Recommende...

Update from https://status.digitalocean.com/ : Networking Issue in NY1 Facility At this time, we are currently investigating an issue in our NY1 facility. We are working to determi…

As of this posting, https://www.digitalocean.com/login is returning CloudFlare's "Always Online" cache. I just got woken up by two of our boxes being unreachable, but one of my oth…

Cert pinning only makes sense if you happen to trust multiple CAs, but want to stick to the cert issued by one particular one. We only trust one CA, and each issued cert is bound t…

A proper writeup is in the works, but to cover the basics: we know not to implement our own crypto. :) Passwords: we apply scrypt() before any use or storage. We never store the pl…

Yes, we use NAT traversal techniques where possible on the WAN, and direct TCP connections over the LAN.