preinheimer
Joined 15 years ago
Joined 15 years ago
Far too many systems don’t have a zero downtime key rotation.
This all seems reasonable to me. If you want my money or things, you’ll have to use them like I suggest.
Reminds me of the whole "disney must pay" debacle.
From our side we noticed a VPN provider had a location we'd been trying to get, but had been unable to, so we started digging to find their provider. Long story short the server purportedly in some middle east country was actually 3ms away from our server in Berlin.
https://medium.com/@xianghangmi/resident-evil-understanding-...
Technical paper: https://ieeexplore.ieee.org/document/8835239
Quite a few days after work, or just on a weekend adventure I'd go to a bookstore a few blocks south of work and grab another Discworld book, and a slice of pizza from my favourite pizza shop labelled "Rays". I'd read some in a park, and explore.
I didn't know a lot of people in the city, filling days with Terry Pratchett was a great joy.
If getting a ticket one ride in a thousand is cheaper than deploying another 2000 cars to make up for the increased trip time I’d expect them to keep getting tickets.
I’m also not sure they don’t do it on purpose. Tesla self driving has an aggressive mode willing to speed and roll through stop signs. Those were deliberate, law breaking, choices.
A cryptographer friend tells the story of an amateur who kept bothering him with the cipher he invented. The cryptographer would break the cipher, the amateur would make a change to “fix” it, and the cryptographer would break it again. This exchange went on a few times until the cryptographer became fed up. When the amateur visited him to hear what the cryptographer thought, the cryptographer put three envelopes face down on the table. “In each of these envelopes is an attack against your cipher. Take one and read it. Don’t come back until you’ve discovered the other two attacks.” The amateur was never heard from again.
https://www.schneier.com/crypto-gram/archives/1998/1015.html
The problem with actually owning hardware is that you need a lot of it, and need to be prepared to manage things like upgrading firmware. You need to keep on top of the advisories for your network card, the power unit, the enterprise management card, etc. etc. If something goes wrong someone might need to drive in and plug in a keyboard.
Eventually we admitted to ourselves we didn't want those problems.
[ my public key: https://keybase.io/preinheimer; my proof: https://keybase.io/preinheimer/sigs/xuqraBrBI-TAX8MtkyTCa-K8RyFslHOHT1dfAddxO1Q ]
preinheimer.at.hn