korrents
Colin Percival

Colin Percival

@colin-percival · 7 positions · 0 changes of mind

FreeBSD developer and former FreeBSD Security Officer; founder of the Tarsnap online backup service and author of the scrypt key derivation function.

Everything they publish, on ppll ↗

Colin Percival did not write this page.

We collected these quotes from things they published elsewhere, and every quote links to where it was said. They have no account here and have not endorsed this site. Quotes are word for word; the short line under each one is our own restatement, not their wording. Their own site. Is this you? Claim it or ask us to remove it. Or tell us what is wrong here.

  1. Our reading

    End-to-end cryptographic signing of requests and responses is more secure than relying on transport-layer encryption like TLS alone.

    privacycryptography

    Their wordsWith requests going over TLS it is obviously less critical now, but end-to-end signing is always going to be better than transport-layer security.

    ↗20 Years on AWS and Never Not My Jobdaemonology.net 1st of 3 in this piece

  3. Our reading

    Eventually Known Consistency is a better theoretical model for distributed systems than plain eventual consistency, even though it's harder to reason about.

    Their wordsbut I still think the model of Eventually Known Consistency is the better theoretical model even if it is harder for users to reason about.

    ↗20 Years on AWS and Never Not My Jobdaemonology.net 2nd of 3 in this piece

  5. Our reading

    Exceptions are an inherently poor way of handling errors because they make bugs harder to spot on casual code inspection.

    Their wordsexceptions are an inherently poor way of handling errors because they make it easier to write bugs which won't be immediately obvious on casual code inspection

    ↗20 Years on AWS and Never Not My Jobdaemonology.net 3rd of 3 in this piece

  6. 5 months earlier

  7. Our reading

    Automation is a lie: every automated thing needs a human on top of it making sure it is working.

    AI agents

    Their wordsThat's great, but I don't think it can replace a human poking at virtual machines; my experience with EC2 is that images break in all sorts of wild ways, and nothing beats a human for saying "huh, I have no idea what's going on here but something seems weird".

    ↗How to support FreeBSD on your clouddaemonology.net

  8. 2 months earlier

  9. Our reading

    Listening to customers is invaluable, but you should not build the thing they asked you for.

    Their wordsCustomer Obsession is great, but I often see Amazonians taking this too simplistically: "Start with the customer" doesn't have to mean "ask customers what they want and then give them faster horses".

    ↗Thoughts on (Amazonian) Leadershipdaemonology.net 1st of 3 in this piece

  11. Our reading

    Working with the entire ecosystem produces better long-term results than focusing solely on your own organization's immediate needs.

    Their wordsWhile the same does not directly apply in other fields, working with others to produce the best results for everyone will be much better in the long-term than focusing solely on what Amazon needs right now.

    ↗Thoughts on (Amazonian) Leadershipdaemonology.net 2nd of 3 in this piece

  13. Our reading

    Shipping a half-baked product permanently damages customer trust, even after it is later fixed.

    Their wordsWhen AWS ships a service which is half-baked, it diminishes customer trust in AWS as a whole; even if the problems in that service ultimately get corrected (either by fixing them or in some cases by simply getting rid of a service which should never have existed in the first place) the memory of a failed launch will live on in customers' minds for years to come.

    ↗Thoughts on (Amazonian) Leadershipdaemonology.net 3rd of 3 in this piece