Live data from Hacker News

The difficulty of making sure your website is broken

letsencrypt.org

21–30 of 42 posts

Re: The difficulty of making sure your website is broken

#21
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

Putting a StarLink dish so it has a tree branch in the way is a good way to get packet loss.

Re: The difficulty of making sure your website is broken

#22
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

You can simulate bad wifi with the throttling option on the network tab of your browser's developer tools

Slow networks != Bad networks. Bad networks could be slow, or drop random packets, or corrupt packets, or have jitter, etc

Re: The difficulty of making sure your website is broken

#23
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

Coming up on 20 years ago I was building a system that was going to be deployed at various locations throughout a very large country. All locations had internet access; but the throughput, latency, and quality (e.g. packet drops) were all over the map.

For testing we ended up building a small linux box to proxy for the test environment in the office. We could throttle the throughput to any arbitrary level, introduce latency, and introduce packet drops. It's amazing how poorly a frontend will work when you throttle the network to 128kbps, and introduce a small percentage of dropped packets. But once you get the system to work (for some definition of "work") under those conditions you feel pretty good about deploying it.

Re: The difficulty of making sure your website is broken

#24
post #5

Interesting. Chrome (146, macOS) shows no error messages on the revoked cert pages, but Firefox does (also macOS).

Chrome doesn't want to perform online revocation checks according to this page:

https://chromium.googlesource.com/chromium/src/+/HEAD/docs/s...

found via: https://issues.chromium.org/issues/471199592#comment3

Re: The difficulty of making sure your website is broken

#25
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

You can simulate bad wifi with the throttling option on the network tab of your browser's developer tools

You can always also simulate bad WiFi by walking away from your access point until you have bad wifi

Re: The difficulty of making sure your website is broken

#27
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

maybe look into jammers?

Re: The difficulty of making sure your website is broken

#28
post #3

Meanwhile HTTP keeps working just fine and is decentralized. Just "add your own crypto" on top, which is the ONLY thing a sane person would do. 3... 2... 1... banned?

to actually tackle this (on the off chance you're serious, I'm assuming not) - this doesn't work. The payload that implements your crypto cannot be delivered over http, because any intermediate party can just modify your implementation and trivially compromise it. If you don't trust TLS, you have to pre-share something . In the case of TLS and modern browser security, the "pre-shared" part is the crypto implementatio…

> default trusted store of root CAs (which lives in the browser or OS, depending).

speaking of that, is there any way to verify that stored certificates are actually valid?

Re: The difficulty of making sure your website is broken

#29
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

Why not just loosely wrap the antenna or entire box in foil or move it to the basement/garage/roof?

If you're going for realism, bad wifi is a radio signal problem.

Re: The difficulty of making sure your website is broken

#30
post #12

In the same direction, I once wanted to test an embedded device on crap wifi. So I just ordered the cheapest AP I could find. Except the damn device worked perfectly. Slow but rock solid. One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

Why not just loosely wrap the antenna or entire box in foil or move it to the basement/garage/roof? If you're going for realism, bad wifi is a radio signal problem.

Not necessarily, it could also be on-band or off-bad interference, or bugs in the AP, or too many clients on the network.
Post reply on HN