Christian Huitema @[email protected]

Of course, I am not the only one who is posting from Mastodon nowadays. More than 2 millions users joined Mastodon last month, including a lot of people working on Internet Standards and Internet Security. disruptiveconversations.com/2022/12/mastod…

Not posting much on twitter these days. You can follow me on Mastodon.

@csperkins @csperkins you may want to talk to @kolkman

…also, can someone recommend a mastodon instance that works?

I hope someone’s doing a measurement study of how quickly mastodon instances fall over when people start using them…

I know several of my friends are looking for alternatives, so here we go: you can follow me on Mastodon as @huitema@social.secret-wg.org

@charlesfitz Yes indeed. The story of nuclear power in Europe looks every bit as if the European Greens were in cahoots with Russian gas producers. And it is hard to explain why New England is not yet buying hydro from Quebec.

@huitema Not a problem in WA because we have so much hydro they can’t screw it up (even as try). But California, New England, Europe have made their grids unreliable.

$800 million that would have better spent on reliable nuclear power for the cloud instead of fickle and intermittent energy sources… bloomberg.com/news/articles/…

@charlesfitz @charlesfitz not currently a problem -- local power coop buys from BPA, which can release hydro power pretty much whenever there is demand. But have you considered what the same argument implies for the computer farms of the cloud?

@huitema You can be selfish but you’re going to be unhappy when the grid isn’t there when you need it…

Obsolete! I need a new phone, because iPhone 7 will not get software update, and one of the companies I work with will not allow an out-of-support phone for 2FA. Obsolescence enforced by network effects!

@charlesfitz As an individual ? The selfish maximum is to use your free PV energy you can, buy from the power company only when you cannot, use batteries to buy when it is cheap. Let them deal with base load, etc.

@huitema Still need reliable base load

@charlesfitz For individuals, the equivalent of build your own plant is to install PV, and maybe batteries. Nice way to insure low cost power.

@huitema The more I dig into energy/grid investments, the less confidence I have that we’ll have reliable and plentiful electricity.

@michelvolle Ou bien "un roi, une foi, une loi"...

Ça me rappelle "Ein Volk, ein Reich, ein Führer".

@Moneycantbuytim The French and German socket designs are officially variants of the same standard. The European standard plugs work with both. The outliers are UK and CH (not in the EU). Italy kinda sorta also supports EU plugs.

@rmhrisk Ryan, saying that "used EVs are priced nearly the same as the new ones" is not exactly an indictment of EV's. Free market, capitalism, etc., supposedly price follows value. Much less wear and tear on EV than ICE...

The used EVs are priced nearly the same as the new ones, the core difference is that you can at least get some of them, but they are older than their used ICE equivalents and the ones I have found have not exactly aged well.

Middle of last week my parents were in an accident (they are OK) and I am now shopping for cars. I know it's no surprise, and even better now than a few months ago, but it is still nuts out there.

@SwiftOnSecurity Actually, the new version of TCP is not just on top of UDP. QUIC is on top of UDP and packet encryption, which protects the transport headers and mitigates a bunch of known attacks on TCP.

“HTTP is too slow we built an alternative called QUIC it will make everything faster.” “Nice how did you do it.” “We used UDP then built a new version of TCP on top.”

Apple security for the win -- NOT! Yesterday, I tried downloading an app on my iPhone, but entered the wrong Apple password, and gave up. But after that, I could not receive or send any iMessage. It would just fail, no warning, no prompt to retype the correct password!

First (?) evaluation of DNS over #QUIC : "encrypted DNS does not have to be a compromise between privacy and speed" #DoQ "DNS Privacy with Speed? Evaluating DNS over QUIC and its Impact on Web Performance" vaibhavbajpai.com/documents/pape…

@KarlBode Actually the route to privacy involves banning personalized ads.

@claucece @dangoodin001 If Matrix had submitted their protocols to the IETF, they would have been reviewed for security and other issues.

A formal security analysis of the protocol design is required. For more questions, see: #anticipated-questions--answers" target="_blank" rel="nofollow noopener">nebuchadnezzar-megolm.github.io/#anticipated-q… Also, read the piece from Dan Goodin (@dangoodin001) at Ars Technica about our attacks: arstechnica.com/information-te…

Today, we are publishing several practically-exploitable cryptographic vulnerabilities in the Matrix (@matrixdotorg) standard and their flagship client Element, with Daniel Jones (@djwj_), Benjamin Dowling (@dowlingbj) and Martin R. Albrecht (@martinralbrecht).

@rmhrisk 78c is above the standard range of electronics, 0 to 70c. I doubt that the Nest is built to the more demanding industrial standards. Very likely misbehaving. en.m.wikipedia.org/wiki/Operating…

@huitema There is truth in that tweet. Plus some things are so simple they are hard to get wrong :)

The sauna has two thermometers. The NEST claims it’s 143f while the classic claims it’s 168f. Which one do we believe?