lsofzz

Yes. To add, any number of middle boxes during egress from the VPN provider can also sniff the SNI in TLS packet (SNI stands for Server Name Indication and stands on its own as a plain text traffic) before a TLS sessions is established (assuming DoT/DoH DNS scheme is in use)

Effort and RFCs are underway to establish what would become part of TLS protocol stack. One of which is eSNI (encrypted SNI).

> Either way, yes, your data will also be wiretapped by your carrier themselves and sold on the open market [ ... ]

Woah. Hold your bong son! ;)

Any reference to documentation or any information of what you mean by `sold' on the open market?

If you wanted to prove a point by saying that internet is an insecure medium then yes I agree but `tapped' and `sold' is a whole different ball game that I am not aware of. At least in the internet I know of.

> No need for EC2, you can use Digital Ocean or Hetzner Cloud (GDPR ftw) to cut the costs.

Throwing GDPR and `ftw' in the same sentence. Hmm. No GDPR does not work that way hah. At least not in the global context.

GDPR only applies to you _if_ you happen to be a European Union citizen.

> Have you entertained the possibility that the decision to de-mitigate was the result of considered risk and resource management modeling ?

What do you mean by `resource management modeling` in this context? Do you mean `capacity planning` or `system scaling planning` or something else altogether?

Definitely a good refresher video. There is absolutely no doubt in my mind that its important to re-visit what we take for granted every single day and at the least be appreciative of all the amazing value open source software community brings.

Would the final revision include any chapters by Sasha Goldstein? I’d love to get his insights on it.

Would love to see it on Safari books.

Whenever I have boring cron-style or once off task that needs to be done, I bring out Apache Airflow cluster to schedule them for me. Nomad is another option but we haven't productionised it [edit]yet[/edit].

Nope. They are alive, well and kicking arse on multiple fronts.

Ha Ha! ;_;

Nice work. Just read this :-)

How is this different from seccomp?

> Do you think it is feasible, for a poweruser who can setup and debug linux installations, to setup and use GenodeOS or sel4 as of today as a main workstation with X applications on the level of Xfce, Firefox? (days, or months, or not at all?)

Coming from UNIX, used sculpt on QeMU just yesterday. Let me just say this - the exploration was pretty much just `meh`. But also - the devil is in the detail. I bet, if I read the documentation and then go back, I'll stop flaffing around too much and use it to do awesome things.

I loved the ViM though ;)

Nice. This got me going

$ qemu-system-x86_64 -name guest=humbug,debug-threads=on -drive file=/var/lib/libvirt/images/sculpt-vc.qcow2 -machine q35 ....

> It's worth to note they now have a downloadable USB image, which is notably dogfed (dogfooded? dogfeeded?) by the Genode developers: https://genode.org/download/sculpt

I fetched their `sculpt-vc.img` and create qcow out of it to directly boot in qemu.

$ qemu-img convert -f raw -O qcow2 sculpt-vc.img /var/lib/libvirt/images/sculpt-vc.qcow2

The resulting image is not bootable. It fails on boot showing Genode logo and goes into a reboot cycle.

$ file sc*

sculpt-vc.img: DOS/MBR boot sector, extended partition table (last)

sculpt-vc.qcow2: QEMU QCOW2 Image (v3), 24375296 bytes

I want to run this on qemu/kvm Linux. How?

> APUE is good, but I believe it has now been superseded by The Linux Programming Interface.

Nice. I'll check it out.

> I learned it with "Advanced Programming in the UNIX Environment".

Agreed. APUE is perhaps one of the best book available covering SUS, POSIX layer in detail.

> Linux Device Drivers 3rd Edition is a bit dated but is still a wonderful introduction to systems programming in C. It's for Linux, but it presents information that is useful when working with any system.

[edit] I have the LDD and https://www.amazon.com/Linux-Kernel-Development-Robert-Love book. I got confused about the authors name :)

The author Robert Love has done a tremendous job on Linux Kernel Development book. Every aspiring "In-betweeners and Low-Low Level engineers" [0] should read this book. It's awwwwespiring.

And please read LDD too!

[0] https://news.ycombinator.com/item?id=18882486

> System isn't necessarily low-level. System code is and can be quite high level, the distinction to just calling it "application" or "application level code" is that it caters mostly to system (no direct user interface) or applications (such as system libraries) instead of end users.

That's exactly my point as well. Well said - ha at least better than I would be able to explain myself.

Nice points. I've prepared what I believe is a good non-exhaustive list without getting very specific. I could be wrong ..

- Embarrassingly low-level (chip developers): OS, C/VHDL/Verilog, MA, DS, GPH, EE, Apathy, SE

- The in-betweeners (kernel, device, storage developers): OS, C, MA, DS, GPH, Apathy, Crypto, SE

- Low-Low-level systems: OS, C, DS, GPH, Apathy, Crypto, SE, FTDS, MSG, NW.

- Low-High-level systems: C/Rust, DS, GPH, Apathy, HDS, Crypto, SE, FTDS, MSG, NW, TL.

- Unicorn rock-star systems hacker (perhaps only a handful of these creatures exists :-): Multiple OS, C/Rust/JVM/Erlang/Haskell, Multiple MA, DS, GPH, EE, Crypto, FTDS, MSG, NW, HDS, SSE, TL.

Abbreviations used:

GPH = Good Programming Hygiene

EE = Electronics and Electrical Engineering

OS = Operating System

MA = Modern Assembly

DS = Data Structure

FTDS = Fault-Tolerant Distributed System

MSG = Messaging System

NW = Networking

TL = Toolings (the darlings of UNIX)

HDS = High-Density Systems

SE = Security Engineering

Google Duo needs to bring long distance calling service if it is to replace Hangouts.

I'd have loved to see categorised infosec folks in there as well :)