helper

It is an order of magnitude safer than a browser plugin.

You don't have to use sms as your backup authentication mechanism. TOTP and 1 time use codes are both better options.

I wonder what the slack channel for Airwave alumni is.

We use 3 log levels:

- Debug: should not show up in normal logs but you can turn it on down to a specific log message in a running process without restarting. We use structured logging so we have the additional ability to turn on debug messages down to a specific key=value pair (or set of key=value pairs).

- Info: An interesting event occurred that someone might care about. This could be an error that we were able to handle or just some important event.

- Alert: An error case that should not happen has occurred and someone needs to look into it. In addition to logging the event, an external system should be notified (e.g. create a ticket, page someone, send an email, etc).

Yubikey does support storing TOTP secrets. It requires you use their app (desktop or android) which then provides the time component.

This is what Jason said the last time it came up on the mailing list[1]:

"I think that given the WireGuard building block, it's certainly possible to build a 2FA framework around it. And I do generally like 2FA and short-lived credentials and such. Probably after getting the implementations buttoned up -- kernel mainline, windows, etc -- I'll turn a bit of attention to expanding tooling and full packages around the simple wg0 interface."

[1]:https://www.mail-archive.com/wireguard@lists.zx2c4.com/msg02...

No.

There's a userspace implementation you can use if you want.

If you add a -csv I would use it!

If I'm going to preprocess before invoking awk I think I'd rather switch the separators to use ascii record/unit separator values than to replace the content of the actual fields.

Ha. I was just thinking how useful it would be to have the awk programming language available in a tool that natively understood csv files. Suddenly that seems a lot more doable!

Short sellers don't need the company to fail to make money. I would guess that most tesla short sellers don't think that tesla is going to fail.

Short sellers thesis is that the company is overvalued and that the market will come to see this and correct itself.

If they are wrong they will lose money. If they are right they will make money. There's no reason to ascribe to them malice.

Most CEOs ignore short sellers and get on with their job of running their company.

I bought the book "Hard Landings" after seeing this talk last year. That book well worth the read if you are at all interested in the history of the airline industry.

There has been some discussion about a pluggable TLS stack: https://github.com/golang/go/issues/21753

This is not true.

Can you use privacy.com without installing the chrome extension?

Vanguard supports U2F.

Is it really so difficult to imagine that I needed to perform an action that can only be done from the root account?

For example, the pen test authorization request form can only be filled out from the root account.

I can't login to my root aws account right now. It's pretty annoying that the root account login for aws is tied to amazon.com retail accounts.

If it only glows after exposure to light it isn't radium.

CMOS sensors can detect gamma particles. If you have an android phone there's an app that actually works (assuming you follow the calibration steps properly)[1]. Apparently Radium mostly emits alpha particles so I'm not sure how effective this would be.

If you are thinking about buying an actual geiger counter make sure to get one with a working probe assembly. A lot of surplus geiger counters are sold without the probe assembly with is the expensive part and the thing that wears out[2]. The probe assembly also needs to be properly calibrated.

[1]: https://play.google.com/store/apps/details?id=com.rdklein.ra...

[2]: https://www.amazon.com/Atomic-Adventures-Islands-Forgotten-I...

Is the "static initialization order fiasco" a thing that can happen in go? The order of package level variable initialization is well defined in the spec and because go doesn't allow import cycles it seems like the issue mentioned in the linked page is not possible.

Cassandra allows you to configure a "partitioner" that determines which nodes a primary key belongs to. There is a ByteOrderPartitioner that stores partitions in order lexicographically by primary key. There is also a Murmor3 hash based partitioner (which is the recommended default).

Cassandra allows you to store multiple records in sorted order within a partition. The normal recommended way to get data locality is to store records that are frequently accessed together in the same partition.

I'm very interested in hearing more about what running FoundationDB in production is like.

I believe that FoundationDB stores rows in lexicographical order by key. Other databases like Cassandra strongly push you toward not storing data this way as it can easily lead to hotspots in the cluster. How do you deploy a FoundationDB cluster without leading to hotspots, or perhaps what operational actions are available to rebalance data?

Do you time box the work-sample or can candidates take as long as they want on it? Do you know what the average time is to complete the assignment?

The design doc talks some about how this works: https://docs.google.com/document/d/131vjr4DH6JFnb-blm_uRdaC0...

It is a layer 3 vpn that supports v4 and v6 payloads. It does not support any layer 2 connection like you would get from a tap interface.

You can certainly make a mesh of connections between different hosts by adding the remote peer's public key and ip address to each host's configuration. There is nothing in wireguard that makes that automatic though.

There's no reason why it couldn't, but doing that would kill all the performance that it currently provides. You could fairly easily tunnel wireguard over tcp using socat.

Nobody gets fired for buying cisco.

They were profitable because the CAB asked airlines how much it cost to run their business and then worked backward from whatever they said to arrive at the fixed fares for routes. While this is great if you want to build an airline with a giant internal bureaucracy, its not great for people who just want to get from point A to point B.

The members of the CAB were all political appointments and generally did not act for good of the consumer. When Louis Hector was appointed to CAB he insisted that air service be instated to his parent's home town of Carinda, Iowa (as a joke). No one on the commission had any objections.

Incidentally, if you are looking for a good read on the history of the US airline industry from the early days of flying mail routes until the mid 90s the book 'Hard Landings' by Thomas Petzinger is really great.

We used splitwise to do this at work for while. Its designed for splitting roommate expenses, but ended up working pretty well for accounting for who should pay for the next lunch.

When someone would leave the company we would settle up with cash.