Profile picture
Robᵉʳᵗ Graham 🤔 [no longer at DEF CON] @ErrataRob
, 5 tweets, 1 min read Read on Twitter
1/ So this proposal to add a "TLS" socket type to the Sockets API is a good idea, but sadly it tests only "performance" and not "scalability". I thought I'd describe the difference.
usenix.org/system/files/c…
2/ The indicated graph deals with up to 100 concurrent connections to test performance. It needs to test 1-million concurrent connections in order to test scalability, such as with lighthttpd.
3/ The difference is that with 1-million concurrent connections, the system will have to spend a lot more time walking through large data structures and chasing pointers that fall outside the CPU cache. In the 100 connections level, everything remains in the CPU cache.
4/ In other words, the authors of the paper show no performance degradation for their proposal, but there might be a significant scalability degradation (or benefit) at 1-million concurrent connections.
5/ So much academic work deals with "performance" and proves to be completely useless at Internet "scale".
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Robᵉʳᵗ Graham 🤔 [no longer at DEF CON]
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @ErrataRob see all

Profile picture
1/ So I thought I'd write up a few notes on Trump's oval office address (transcript here). The reason I'm writing this is up is because Pelosi/Schumer derided Trump on the "facts" -- and then provided none of their own.
nytimes.com/2019/01/08/us/…
2/ First of all, I think the context is that Trump wants to declare a "state of emergency" to bypass congress. He's either trying to convince us, or test the waters to see if we'll accept it. We should not let him, this would be a horrible abuse of power, what despots do.
3/ There is legitimately a "humanitarian crisis" going on. As this Wikipedia article describes, there has been waves of refugees, including a lot of children, coming from the three countries immediately south of Mexico since 2014.
en.wikipedia.org/wiki/2014_Amer…
Read 26 tweets
Profile picture
1/ Well, to answer this, sign up for the phone company's family plans designed to allow you to track your children. It's hit or miss, sometimes very accurate, sometimes not.
2/ Modern phones and towers have multiple abilities to track your location. For one thing, because of speed-of-light delay, the tower must know your distance from the tower to within 100 meters.
3/ Next, towers know which directional antenna your signal arrives on. This gives them a 120° arc within which to locate you, the closer you are to the tower, the more accurate that is, of course.
Read 13 tweets
Profile picture
1/ In regards to my tweets today about "institutions" that make us great, let's talk about journalism and "both-sides-ism". Nobody likes it, but those who disagree with us are still reasonable people, the are multiple sides to every debate. This is why a free press is valuable.
2/ Let's take "anti-vaxxers" for a moment, which I assume you'll agree are "batshit crazy" and not "reasonable" in any fashion. Yet, we still have a "both sides" issue. Even if "vaccines cause autism" argument is garbage, we still debate whether governments can force vaccines.
3/ It's the same argument whether governments can force you to donate a kidney. Or force you to donate bone marrow (which is relatively harmless to the donor). Or force a woman to cary a baby to term.
Read 9 tweets

Related threads

Profile picture
Good morning from the Palais des Nations in Geneva. Today @RightToKnowIE has a hearing on our complaint to the UN about Ireland's compliance with international treaty obligations.
Back in September 2016 we complained that Ireland was in breach of its Aarhus Convention obligations. This came about as a result of our extensive experience of using the Access to Information on the Environment (AIE) Regulations in Ireland (and partly connected to the NAMA case)
You can read some background here righttoknow.ie/2016/09/11/rig…
Read 92 tweets
Profile picture
Thread.

I was recently privy to a conversation in which some really smart people in security shared their favorite papers or articles. Security engineering, like other disciplines, has a rich history worth learning from.

I'm going to list some of these papers in this thread.
New Directions in Cryptography - Whitfield Diffie and Martin Hellman (1976)

It's hard to emphasize just how revolutionary the concept of public key cryptography is. This paper started it all, introducing D-H key agreement and digital signatures.

ee.stanford.edu/~hellman/publi…
Reflections on Trusting Trust - Ken Thompson (1984)

This paper succinctly describes the concept that it's not enough to trust software, you also need to trust the software that compiles the software, and the software that compiles the compiler, and so on

archive.ece.cmu.edu/~ganger/712.fa…
Read 16 tweets
Profile picture
This is wildly disingenuous, I speak as a flight instructor and major IT incident investigator. Modern software authors have the professional discipline of a cute puppy in comparison to aviation practitioners.
Airplanes *are* under constant attack by gravity, weather, system complexity, human factors, delivery process, training consistency, traffic congestion, and even under attack now by software developers
But every time a disaster happens, we learn from it, publicly, and we share. We're still learning from crashes decades ago. Software developers? Bullshit.
Read 35 tweets
Profile picture
Completely true, and the problem is not just with education. As a field, computer scientists have fooled ourselves into thinking we can skip straight from math/theory to engineering. There's little science in computer science today.
The lack of scientific thinking affects every subfield of CS. A recent paper about computer security points out what should have been obvious: we've been trying to theorem-prove our way to scientific knowledge, but we need experiments and falsifiablily. microsoft.com/en-us/research…
Careful experiments can falsify vast bodies of assumed knowledge. My favorite is this paper arguing that the belief in the usefulness/necessity of distributed computing for processing big datasets is largely the result of poor experiments. usenix.org/system/files/c…
Read 15 tweets
Profile picture
Good evening folks!

First, thank you for all the RT, likes, and kind comments on my thread yesterday. It was a quick look at my life growing up.

For anyone curious, I reconnected with my bio family when I was 26. It was incredibly awkward at first.
I experienced huge culture shock. I grew up in Alberta and had never experienced the culture, climate or the traditional food.

I'll never forget my first meal at my Nanuk's. It was a caribou head. It was baked and served in front of me. I had no idea what to think.
I wasn't sure if this was a practicle joke, or if they were seriously wanting me to eat this. It wasn't until my 5 year old niece said "Oh! Caribou head!" and dug in without any qualms or questions. My pride took over. If a 5 year old girl could eat this, so could I.
Read 58 tweets
Profile picture
Tech buzzwords explained:
AI—regression
Big data—data
Blockchain—database
Algorithm—automated decision-making
Cloud—Internet
Crypto—cryptocurrency
Dark web—Onion service
Data science—statistics done by nonstatisticians
Disruption—competition
Viral—popular
IoT—malware-ready device
Since this going "viral", here's some context for my snarky definitions. Let's start with AI. There's definitely a lot of legit innovation happening, but much of it is a rebranding of old and familiar stuff.
Don't get me started on blockchain :)
Read 13 tweets

Trending hashtags

#anomaly #Americans #battle #economists #struggle #repatriation #NewcastlePride #illegalwildlifetrade #licensing #submission #rustlang #Socialist #ItsTime #Future #Voices #jeans #obedience #Account #chains #trade #Strauss #contribution #ECJ #economy #Yoonmin

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!