HNHacker News
TopNewBestAskShowJobs

bdd

708 karma · joined May 18, 2010

days: cryptography at meta. evenings & weekends: computers, electronics, radios (NG6E)

https://bdd.fi

submissionscomments
bdd··on Building Facebook's Service Encryption Infastructure
Barring the specifics, we deploy new machines in batches of tens of thousands at a time and they practically don't receive any production traffic for weeks while repeatedly running burn-in tests followed by baseline daemons. If they survive, they get provisioned for production.

Infant mortality rate of CPUs--especially single socket designs--is very low compared to DIMMs and SSDs. They tend to develop these issues later in their economic lives. They are also comparatively rare to other module failures.

bdd··on Building Facebook's Service Encryption Infastructure
Yes. For that particular CPU, in one core (and its sibling thread (as in hyperthread)), AVX instruction is broken. It doesn't do what it is supposed to do.

Recently, again at Facebook, we found a few machines with CPUs where ADCX instruction is broken on at least one core. This is especially fatal because OpenSSL and Fizz (our TLS 1.3 impl) use these instructions for AMD64 architecture in RSA implementation.

bdd··on Building Facebook's Service Encryption Infastructure
We presented about CATs again in Def Con 26. It's a 21 minute talk but if you're interested in how CAT differ from Macaroons, you can skip to 16:15 mark where Yueting explains https://cryptovillage.org/cats-a-tale-of-scalable-authentica...
bdd··on 2FA using a postcard
American Radio Relay League (ARRL) employs postcard based recipient verification for amateur radio operators by mailing to their registered license address with FCC, a public record. They use this to sign a user certificate (X.509) which presently can be used to access Logbook of the World (LoTW), a web based logbook for radio operators to record contact with other operators.
bdd··on Homebrew 1.2.0
"brew cask install emacs" will install emacsformacosx.com build.

  % EDITOR='grep url' brew cask edit emacs | tail
    url "https://emacsformacosx.com/emacs-builds/Emacs-#{version}-universal.dmg"
bdd··on Welcoming Fabric to Google
Twitter used to be the biggest SMS sender in United States. Much larger than Twilio, even bigger than operators like Verizon and AT&T. Infrastructure that came from Cloudhopper acquisition with continuous care and improvement gave Twitter a reliable and super cost effective _world-wide_ SMS delivery platform.

(I was an employee 2012–2016)

bdd··on Twitter is blocked in Turkey
Implemented via DNS, for now... You can see the court orders about sites from TIB's (The Presidency of Telecommunication) query site. http://eekg.tib.gov.tr/

It's a system where every ISP with a license has to abide. They download a list of domains that needs to be forwarded to a server operated by TIB to explain the reason of access blocking. They add these to their recursive DNS servers so traffic goes there. People using another DNS server other than their ISP's (e.g. Google Public DNS, OpenDNS, etc.) are currently able to access.

bdd··on Twitter breaks their own search page with API Deprecation
Not really. Deprecation of "search.twitter.com" was announced months before. https://dev.twitter.com/docs/faq#17750
bdd··on Ask HN: Music while coding?
I don't generally listen classical music but when it comes to coding/hacking; post classical romantic era (1815–1910) European art music is the magical ingredient of productivity for me.

Action: Tune in to `Frédéric Chopin' or `Franz Schubert' channels on Pandora/Last.fm

Result: at least 2X productivity compared to sans music environment.

bdd··on Upcoming version of SBT (Simple Build Tool)
Yes. I do build completely Java projects with SBT just to keep myself sane (away from Ant, Ivy, Maven).

You need a basic understanding of Scala to write your build configuration though.

← PreviousPage 3 of 3