1. 3

    What’s most interesting about this article is that Intel’s Chief Thread Researcher left, formed a company, and Intel turned around and invested directly into it instead of slapping his departure and subsequent disclosure with some form of anti-compete or anti-disclosure clause.

    At this level you can be sure there was something like this in his prior contract. A conspiracy theorist might surmise that Intel figured this a way of avoiding lawsuits against themselves, while opportunely positioning themselves to profit from whatever additional defensive techniques and services the newly formed “subsidiary” comes up with.

    1. 1

      I’m interested if http2 data frames change this picture significantly or not - trade offs for mobile support and cpu or memory usage both at client and server, reconnection in face of unreliable intermediate proxies.

      1. 9

        It is possible to do it, just not easy. It would be nice if mozilla addressed this, but in the scheme of severe privacy violations it’s pretty low IMO. Bookmarks, cookies, history, passwords are already exposed in the web ui which serves almost everybody except the most paranoid.

        I’ve not used https://github.com/Thrilleratplay/node-jsonlz4-decompress but have used https://github.com/twolfson/firefox-bookmarks to export 20 years (yes, 20 years) worth of firefox bookmarks into CouchDB for a better search and sync experience.

        Have you seen how many open bugs firefox has? Like all open source projects, if this bugs you enough you can of course submit a patch, or pay somebody else to. I’m super delighted to contribute a few $$ to Mozilla and further their open web, as opposed to the nice but walled gardens of Apple, Google, and Microsoft. I don’t see them as being evil (eval?) nor being motivated by greed.

        1. 3

          I’ve been using FreeBSD as my main laptop & desktop since around 2012 or 2013 I think, it was near EOL for 9.3 so I started off running 10.0-CURRENT for boot direct to zfs, and haven’t looked back since. Running current has been (a) a great learning experience and (b) a lot less scary than I expected because of boot environments - see http://www.callfortesting.org/bhyve-boot-environments/

          • I rebuild roughly a week, into a Boot Environment, which makes rollback in case of issues pure cake.
          • zfs everywhere is so damn awesome, and <3 dtrace as well. I use jails & bhyve extensively for work & testing.
          • pretty typical lean desktop - i3wm, firefox + iridium for browsers, git-cola for git UI stuff, fish shell, the new i915kms packages for intel on the laptop, and nvidia dual monitors for the workstation
          • I can screen share my desktop using https://appear.in/ and firefox, but I miss proper WebRTC with audio, or things like zoom for videoconf. Also no netflix. I don’t miss any other apps.
          • when I was re-purposing my old macbook, I was surprised how much faster FreeBSD was compared to linux & OSX at the time. Boot time in FreeBSD is nowhere near as good as modern ubuntu or solus linux though.
          • S3 hibernation has worked for > 1 year on my Dell XPS13 laptop under 12.0-CURRENT
          1. 5

            I totally subscribe to the points that the author makes, regarding making poor trade-off decisions for build vs buy.

            Logging and metrics are a great example of these. However, in my small organisations, the cost for 20 application servers servers (just servers) for metrics was greater than the actual server leasing costs! Madness from Microservices!

            Logging also has the unfortunate habit of leaking passwords or credentials when developers forget that logging is actually, well, logged somewhere, or debug/dev logging sneaks into production. Privacy and in some cases evidential tamper-free trails is critically important.

            Once you’ve got metrics being stored, you immediately find that the real effort – and value – is in creating and layering business-specific graphs, reports, and alerts, on top of that raw data. No hosted solution can ever help you with this as its always bespoke.

            In both cases, setting up our own logging & monitoring tools was trivial effort, on our own kit. Once you’ve done that, the expertise is portable to almost any other business or customer, and you can knuckle down to the real effort of delivering business value through data insights.

            1. 3

              collectd, graphite, riemann, graylog, influxdb, prometheus etc all deliver a hell of a punch on their own if you want to go the opensource route. Once you’ve developed a metrics/monitoring/logging stack once, you’re good to re-use it every time. The long-term payoff is huge.

            1. 4

              That is a crazy bug. So I wasn’t wrong to be suspicious of M:N threading? I understand why Go went that route, but the complexity is crazy.

              Here is another example of a years-long bug related to M:N threading (which I saved years ago):

              https://github.com/golang/go/issues/1435

              1. 1

                the only runtime that gets this right is Erlang/OTP’s BEAM, with pre-emptive concurrency.

                1. 1

                  I’d argue that the bug is having direct calls between code produced by two different compilers that disagree about what the ABI is, rather than it being m:n threading itself that’s the culprit. You could hypothetically want really tiny stacks for some other reason than m:n threading and get the same bug?

                1. 2

                  Jess is super smart and doing amazing things with containers, that being said the claims she makes about what jails & zones can’t do are not correct.

                  I would also argue that while you can’t take apart the jails deathstar, in practice you have all the flexibility you need:

                  • run X11 apps like firefox in a jail https://forums.freebsd.org/threads/53362/
                  • filesystems can be constructed as needed using zfs + nullfs, and hopefully soon 9p2000 and shared across containers
                  • you design the network as required, you can drop in loopbacks, external interfaces as you like, and access them from the host if you want to

                  I’m not sure on how much of this could be changed at runtime, but most of the usual needs (introspection, sharing) have straightforward solutions.

                  I haven’t succeeded in getting dtrace working from the host system into a jailed process but maybe somebody will point out how to do that. Then its pretty much a full house as far as I’m concerned.

                  I’ll stay in my FreeBSD prison tyvm.

                  1. 2

                    As a FreeBSD user, I cannot disagree with the argument in here. I think that “boring” is entirely the wrong word. Perhaps the author is trying to ride the bandwagon of “boring” posts lately. It sounds to me more like he just wants his infra to work and Linux isn’t cutting it.

                    Speaking of how much time one spends debugging infrastructure, I’d say Apache Foundation projects represent a significant fraction of my debugging time.

                    1. 1

                      Personally I do find this stuff exciting. ZFS makes me want to do upgrades every day, and while sending snapshots across the network I’m positively jumping for joy. The simplicity of CARP and network load balancing with haproxy gives me goosebumps. But for most of my colleagues they definitely want boring infrastructure, stuff that doesn’t wake them up at night, stuff that helps them ship apps, not the layers underneath it.

                    1. 1

                      previously, erlang & webmachine, now Elixir + Cowboy + Plug or Phoenix.