Sanjay M.

Software Engineer @google working on @googlefi

[Sanjay M. @sjy]

@rmhrisk Weird!

I recently learned that USPS has a service where they send you their scan of your incoming envelopes a day or so in advance.

Throw in some OCR and you've got a new ACME challenge waiting to be defined...

[Sanjay M. @sjy]

Hmm...

cc @rmhrisk @sleevi_

[Sanjay M. @sjy]

@rakyll :(

I'm hoping that proposal can get more attention after generics. At least the API could be updated to be type-safe then.

[Sanjay M. @sjy]

@slightlylate Too flaky for my taste.

[Sanjay M. @sjy]

@empijei Great post!

Regarding the section on "Self referring", I believe you can make it work outside a func parameter in a slightly roundabout way: https://t.co/zKqALWeNjO.

(Its actually not that roundabout, its literally factoring it out of the func, it just reads oddly)

[Sanjay M. @sjy]

It would be nice for Go to have great support for batch UDP send/recv that falls back to non-batch APIs on unsupported operating systems.

(ccing @bradfitz @commaok (in a shameless attempt to nerdsnipe this into existence))

[Robin Marx @programmingart]

Microsoft has been doing some stellar work optimizing their #QUIC implementation and formalizing benchmarks for the new protocol. They went from 1.7 to 8 Gbps and you can read all about it in their new blogpost: https://t.co/qr7pBjCyWe

[Sanjay M. @sjy]

@empijei I absolutely agree that cookie dialogs should be a focus.

I don't agree that that has any implications for WebUSB (or any other feature). There are many engineers associated with the Web Platform all pushing it forward in different ways in parallel; that seems healthy and ok.

[Sanjay M. @sjy]

@jin_ @GoogleOSS @bazelbuild That link appears to go to https://t.co/RfZVTFSyW2 for me?

[Sanjay M. @sjy]

@ciphergoth It has whitehouse in the name, Paul...

The only domain more authoritative would be https://t.co/uw5nAakwej, covering between 1.5 and 2 branches of government (depending on how you count).

[Sanjay M. @sjy]

@dg_weber Pretty dumb, yea.

Hulu on my TV also asks me to pick a profile everytime I open the app...

And I only have the 1 profile.

[Sanjay M. @sjy]

@slightlylate @kpk What the hell...

That's gotta be classifying JSON-P as JS... right?

Dear god, please.

[Sanjay M. @sjy]

@cramforce Unfortunately, this only works for (phishable) 2FA codes, as opposed to U2F tokens.

I'd really like some way to authenticate to my browser in a phishing resistant way, and then have my browser authenticate me to sites in a phishing resistant way that isn't O(n).

[Sanjay M. @sjy]

Feels like a weird place to put a line-break...

[Sanjay M. @sjy]

@ivanristic @rmhrisk Yea... I had a very similar thought. That seems like a small delta over what exists.

It'd be kinda amazing to see millions of certificates automatically revalidated and renewed without human intervention in the WebPKI.

[Sanjay M. @sjy]

@chosensecurity @sleevi_ Speaking as someone who reads mdsp for the centithread entertainment value, I am very excited.

(Also, yay for the extra security)

[Sanjay M. @sjy]

@ericlaw @mrisher @Google Isn't https://t.co/oAlJqTI1Nz on HSTS preload list?

I can't remember; will check when I'm at a real computer.

I hope so, we aren't super careful about it either (though I think I added a presubmit at some point to just ban the string "http://").

[Sanjay M. @sjy]

@axboe btw, I think https://t.co/64NrDOWUlZ is down.

[Sanjay M. @sjy]

Lol, the Verge cited @FiloSottile as a "cryptogopher", it is slowly but surely spreading.

[Sanjay M. @sjy]

@jaffathecake Semi-serious proposal: have GFEs obfuscate the user agent and the only unobfuscation library has only feature detection methods (and the browser detection methods are behind a visibility list controlled by the chrome team)

[Sanjay M. @sjy]

@jmmv btw, +1 on footnote 2.

Pretty sure I have a CL switching a genrule to a trivial Skylark rule just so I can have a script output a tree artifact.