Profile

Cover photo
Derek Waters
Attended University of Adelaide
158 followers|211,079 views
AboutPostsPhotosVideosReviews

Stream

 
An interesting byproduct of the #Heartbleed bug is that a number of other limitations of SSL/TLS are surfacing.

In this case, it's not that Chrome is ignoring revoked certificates entirely, they've just got a performance optimized revocation check that works OK when there are few certificates being revoked, but is really going to struggle in the next few days/weeks to keep up with all the revoked/reissued certificates. But the way Chrome is checking revocation lists does mean that loading HTTPS sites is much quicker than the proper revocation check.

Basically, when your browser accesses a https site, it retrieves the site's "certificate", a cryptographically signed record that the site is what it says it is. The certificate is issued by a Certificate Authority (CA) who are independent of the site but provide a third party verification check. When a site gets compromised, they can get their original certificate revoked by the CA.

The web browser, then, when a site returns a certificate, has to do a further check by contacting the CA web site to ensure the certificate hasn't been revoked. This extra check could add anywhere up to a second to the load time of a https site. Additionally, if the CA web servers are down, then any certificates issued by them should, in theory, not be treated as valid. Because this is a likely scenario, browser's typically treat a unable-to-contact-CA as a pass, meaning the CA check is kind of useless anyway. Chrome optimizes this process by generating its own big list of revoked certificates that it updates in the background from time to time. It seems this #CRLset though, is not very large and is unable to cope with all of the revocations going on with the Heartbleed issues. As indicated in the linked article, you can make Chrome operate in the standard (but slower) way using settings.

As an aside, I tried to check this in Chrome for Android - I assume it uses the CRLset too, as I could view the site with the revoked certificate, but I haven't found the setting to use proper checking yet, if it exists at all.
 
Wait, wait, wait, wait, wait. +Google Chrome doesn't check for revoked SSL certificates by default when every other browser does?

What the hell? If you're reading this, enable it in advanced Chrome settings right away.
1
Add a comment...

Derek Waters

Shared publicly  - 
 
/claps

That is a headline.
FIFE: The annual world fish-eating championship was held in its traditional home, the fishing centre of Fife, Scotland, yesterday — but not without some late high drama.
1
Dougal Strachan's profile photo
 
That is something special
Add a comment...

Derek Waters

Shared publicly  - 
 
This is like those old "what animal am I thinking of?" programming exercises. Only with cartoons. And much funnier.
1
Add a comment...

Derek Waters

Shared publicly  - 
 
Buttermere, United Kingdom
1
Add a comment...

Derek Waters

Shared publicly  - 
 
Passau street.
1
Derek Waters's profile photoMarilyn Mather's profile photo
2 comments
 
I uploaded a bunch of old photos. ;-)
Add a comment...

Derek Waters

Shared publicly  - 
 
The Enigma.

At the German Science and Technology Museum in Munich.
1
Derek Waters's profile photoMichael Van Den Eynden's profile photo
2 comments
 
That's German for you.
Add a comment...
Have him in circles
158 people
James Russell's profile photo
Derek James's profile photo
Michael Van Den Eynden's profile photo
Dane Waters's profile photo
Chris Harris's profile photo

Derek Waters

Shared publicly  - 
 
We may have a new IPA winner... This is awesome.
3
Derek Waters's profile photoRobert Norris's profile photoMikel Ward's profile photo
6 comments
 
I also had it on tap at "Hell of the North" in Brunswick Fitzroy. Mrs Parma's (despite the average decor and awful name) is worth a visit.
Add a comment...
 
I really, really want to know how this story turns out. Maybe one of them will end up drowning his twin in a vat of beer? Maybe there will be a taciturn rapprochement over a well-built Scandinavian kitchen table and two beers? 

I don't know, but I'm now thirsty.


Also, I had a thought about trying to brew a truffle beer a little while back. I don't know that I'd take a punt on $8000 worth for my low-quality homebrew though.
1
Derek Waters's profile photoDougal Strachan's profile photo
3 comments
 
this is getting easy then....
Add a comment...

Derek Waters

Shared publicly  - 
 
I was pretty happy to get the lightfall through this park near the tents being set up for Oktoberfest in Munich.
2
1
Mikel Ward's profile photo
Add a comment...

Derek Waters

Shared publicly  - 
 
Tiergarten, Munich.
1
Marilyn Mather's profile photo
 
Are you in Munich? 
Add a comment...
People
Have him in circles
158 people
James Russell's profile photo
Derek James's profile photo
Michael Van Den Eynden's profile photo
Dane Waters's profile photo
Chris Harris's profile photo
Work
Occupation
Software Engineer
Basic Information
Gender
Male
Story
Tagline
Not really Lord Flashheart
Introduction
Android and web developer, cyclist, father, Collingwood supporter
Bragging rights
Once helped Kamahl with directions
Education
  • University of Adelaide
    Engineering
Links
Great service and good coffee. Avocado breakfast was very nice too.
Public - a week ago
reviewed a week ago
Australian Home Brewing has a great selection of recipe kits, raw materials and equipment for the home brewer, and their service is great - whether contacting you to let you know that something you ordered is going to take a while on backorder (and asking if you want to replace it with something else, or send the rest of the order in advance) to replacing an entire order of mine that went missing in delivery, they're very helpful.
Quality: ExcellentAppeal: ExcellentService: Excellent
Public - a year ago
reviewed a year ago
Great food on the set menu. An interesting set of beer and wine selections. And the grill pumps an awesome aroma into the restaurant as you enter!
Atmosphere: ExcellentDecor: Very goodService: Good
Public - a year ago
reviewed a year ago
The breakfast burrito at Las Chicas is justifiably famous. I've tried many times to reproduce it at home, without success. Coffee is great, the only downside is its own success, which means you can expect to wait a while to get a table at weekends. Any wait is well worth it, though!
Food: ExcellentDecor: ExcellentService: Very good
Public - a year ago
reviewed a year ago
7 reviews
Map
Map
Map
We had an impromptu dinner at Cumulus Inc last night, just stumbling upon it as we wandered along Flinders Lane looking for somewhere to eat. Firstly, the food was fantastic. We had one of the specials - fried peppers - which were great. Salty and smoky, although they weren't at all hot. Some quite nice asparagus was served with a wonderful slow-cooked egg, which had a yolk and white that were the consistency of jam; it was great. A nice corned brisket was served with a cabbage salad with a kick of horseradish, but all of these dishes were topped by an awesome tuna tartare with big, juicy cubes of impeccable tuna that really melted in the mouth. Wonderful! The restaurant (or eating house/bar, as it styles itself) was buzzing when we arrived, even late on a Tuesday night. The noise certainly dropped off as the night progressed, making for a more laid-back experience. Unfortunately, the service was a little mixed. When it was there, it was almost over-friendly, but sometimes the service was non-existent. Overall, though, don't let that put you off - the food is worth every minute of the wait.
• • •
Food: ExcellentDecor: ExcellentService: Very good
Public - a year ago
reviewed a year ago
New favourite Hume Highway stop. It's like a great city cafe was transplanted to the country, with only a rural name change. Great coffee, and my ploughman's lunch was superb!
Food: ExcellentDecor: Very goodService: Excellent
Public - a year ago
reviewed a year ago
Had a wheel rebuild and servicing of my MTB here. Great workshop, helpful staff, good prices.
Public - 2 years ago
reviewed 2 years ago