Live data from Hacker News

The Kivaloo Data Store

tarsnap.com

71–78 of 78 posts

Re: The Kivaloo Data Store

#71
post #6

Slighlty offtopic, but it's ironic how a service with the tagline "Online backups for the truly paranoid" serves insecure connections to its website and doesn't employ HSTS. Especially since the user is expected to download the client for the service from that website. Kind of a reckless decision.

Surely "truly paranoid" people don't rely on a website using HSTS and hit it with HTTPS directly?

Re: The Kivaloo Data Store

#72
post #68
post #44

> Kivaloo (pronounced "kee-va-lieu") FYI, that's a very American English centric way of explaining how to pronounce 'loo'! British English pronounces the lone word 'lieu' differently (with a y/j in front of the 'ū'), as in 'lieutenant' as 'leff', and is already familiar with 'loo's and pronounces them 'loo'. 'lieu' is of course of French origin, and they pronounce it differently again. It's obvious, given 'kivaloo',…

"loo" being a British word for "toilet" as well :) (See noun(2) here https://www.merriam-webster.com/dictionary/loo )

Yes, that's what I referred to with:

> and is already familiar with 'loo's and pronounces them 'loo'.

It's not just (and predominantly not) the 'toilet' though, it's the room or facility; what you would call a 'washroom'.

Re: The Kivaloo Data Store

#73

Earlier quoted context omitted.

Assuming your attacker can count bytes, there's no privacy added by using TLS to download static content from the Tarsnap website. There simply aren't enough similarly-sized files.

But such an attacker would need to know that the content was downloaded from the Tarsnap website, right? If TLS is configured with Encrypted SNI, the handshake no longer reveals server information and thereby TLS does add privacy. (However, Encrypted SNI is not widely adopted yet.)

The IP address alone will tell you that they're accessing the Tarsnap website.

Re: The Kivaloo Data Store

#74
post #61

Earlier quoted context omitted.

How do you pronounce “solder”?

saw-dur.

That is what I am accustomed to. However, Mr. Carlson of Mr. Carlson's lab pronounces it "soll-der". https://www.youtube.com/channel/UCU9SoQxJewrWb_3GxeteQPA

I was wondering if that is a common Canadian pronounciation.

Re: The Kivaloo Data Store

#75

Earlier quoted context omitted.

But such an attacker would need to know that the content was downloaded from the Tarsnap website, right? If TLS is configured with Encrypted SNI, the handshake no longer reveals server information and thereby TLS does add privacy. (However, Encrypted SNI is not widely adopted yet.)

The IP address alone will tell you that they're accessing the Tarsnap website.

I had a wrong understanding of what Encrypted SNI does and does not do. Thank you for the response.

Re: The Kivaloo Data Store

#76

Earlier quoted context omitted.

Is there a place I could learn more about how the background cleaning works?

I don't think I wrote much documentation about this, sorry. Basically the idea is that there's a pointer which moves through the key-space looking at pages, and if it passes any pages which are "old" it marks them as dirty so that they're rewritten as part of the next batch. The rate at which the cleaning pointer moves through key-space depends on the accumulated "cleaning debt", which is based on the amount of garba…

Just wanted to follow up to say I really like how clean and well commented this code is.

Re: The Kivaloo Data Store

#77
post #74

Earlier quoted context omitted.

saw-dur.

That is what I am accustomed to. However, Mr. Carlson of Mr. Carlson's lab pronounces it "soll-der". https://www.youtube.com/channel/UCU9SoQxJewrWb_3GxeteQPA I was wondering if that is a common Canadian pronounciation.

Wow, it's never occurred to me anyone would pronounce that much differently (Am/Can pronunciation of 'r' in 'er's aside)! UK is 'soll-duh', or I suppose 'sohl-duh', but certainly sounding the 'l'.

Wiktionary suggests Canada generally follows the pronunciation your familiar with.

Re: The Kivaloo Data Store

#78
post #77
post #74

Earlier quoted context omitted.

That is what I am accustomed to. However, Mr. Carlson of Mr. Carlson's lab pronounces it "soll-der". https://www.youtube.com/channel/UCU9SoQxJewrWb_3GxeteQPA I was wondering if that is a common Canadian pronounciation.

Wow, it's never occurred to me anyone would pronounce that much differently (Am/Can pronunciation of 'r' in 'er's aside)! UK is 'soll-duh', or I suppose 'sohl-duh', but certainly sounding the 'l'. Wiktionary suggests Canada generally follows the pronunciation your familiar with.

Yes, generally that is true. There are a few words, at least out west, that stand out: "About" "Schedule" "America".

The last one is in jest. The word is pronounced the same--in the US, often the US is called America, seemingly excluding Canada, Central America, South America.

And a fact that I didn't know until recently was that the Philippines prior to WW II was part of the United States. See "How to hide an empire" by Daniel Immerwahr: https://www.amazon.com/How-Hide-Empire-History-Greater/dp/03...

Post reply on HN