In the time it takes to read this sentence, the AWS Identity and Access Management (IAM) service will handle several billion requests. Pretty close to every one of those requests is authenticated using the AWS SIGv4 protocol, before IAM authorization policy is applied to check if the request is allowed or not. I didn’t have a hand in designing the AWS SIGv4 protocol so hopefully it’s not too…
Starting with OpenJDK releases on 4/20/2021, TLS1.0 and TLS1.1 connections will no longer work by default. Traffic to/from legacy applications and appliances such as hardware load balancers and out of date devices may break.
In 2015 we began development of s2n , an open source implementation of the TLS/SSL protocols. We use s2n broadly at Amazon Web Services. The mission has always been to focus on security first, primarily by staying small and simple, but also by incorporating automated testing and formal verification in our development process. The testing and verification tools that we’ve sponsored in the area of…
After a twenty year gap, I’ve been taking photographs on film again. Earlier this year I’d started toying with the idea of buying a second hand Hasselblad 500. It was the camera of my dreams when I was growing up, but totally unattainable to a teenager in a Dublin working class family. Even though they’re not manufactured any more, pre-owned Hasselblads and lenses in good condition are now cheaper…
This blog post is very late. It’s well over a year since I posted a coding challenge on twitter . The idea was simple, I’ve always felt that code readability is undervalued so I figured I’d put cold hard cash up. I announced a $1,000 pot, divided into $500, $300, and $200 prizes for the most readable implementations of Daniel Lemire’s nearly divisionless algorithm for selecting a random number…