HN user

philprx

286 karma
Posts4
Comments169
View on HN

that's roughly 1/45th probable downtime window = 2.22% downtime probability (yeah, it's a figure not a real proba ;-) )

compared to say, roughly 1/365 probable downtime window for a 398 days cert lifetime = 0.25% downtime probability

let's pray you don't need to rotate when it's down...

Dan Geer famously said: "Dependency is the root cause of risk"...

PS: even stricter shortlived durations in some context:

Internal/Private 1 – 7 days Corporate VPNs, Internal apps

Ephemeral 5 mins – 1 hour Docker containers, CI/CD runners

wooohooo... it had been a long long time since I last entered VMS command in a terminal !

Thank you sooo much for making this happen! very happy here

Well they certainly can’t feel good about not detecting egress DDoS from their customer usage.

It could be VPN originating or maybe Worker originating maybe?

Don’t they have a security.txt and security@ email address?

Looks like posting to social media the full analysis of the attack is the sensible thing to do.

What's written is quite right, but is quite short ;-)

I was expecting a bit more "Then what" (the rest of the website is okayish).

One thing that also is important is: luck in timing, mass in market.

You can be as daring as you want, if you don't come at the right time for the market, and if the market is not sizable enough, then your effort will be fruitless.

Which is great because being an awesome tree for bowmaking, nobody cares if you harvest a few straight stave: On the contrary people will say "Good, you're removing these" :-)

Plus they give excellent liquid yellow honey and you can make yummy perfumed donuts with their flowers.

But yeah, it's a pain to get rid of: even if cut, they will regrow nearly endlessly and their thorns are so pointy and durable that they routinely kill tires...

If I was NSA, that's exactly the kind of fud (fear, uncertainty and doubt) I'd try to propagate.

While I appreciate and respect the useful criticism, I would be careful with this kind of content:

Regardless wether you read this before or authored it, if you're right then go ahead and show to the world how we're wrong, if you're wrong you're helping quantum attackers.