Weekly Reading 0x11

2017-02-27Home

Last week, we mentioned announcement of Google Cloud Spanner. There is an "open source version", CockroachDB, built by three ex-Googlers who also founded a company around it. We would read about how Google Spanner Inspires CockroachDB To Outrun It this week.

Without Google's private network and atomic clock, CockroachDB provides serializer isolation, weaker than Spanner's linearizable isolation. CockRoachDB is based on RocksDB using etcd(Raft) for consensus. It has compatible interface with Postgres, supporting most SQL 92, some SQL 2011 and Spanner functions. They've employed jepsen for consistency analysis and found bugs leading to serializability violations. The software is still in beta at the time of writing. Let's see how it will turn out.

Now, what else ?

Releases

Docker

Google

Security

  • Google has found the first SHA1 collision.

    The attacker could then use this collision to deceive systems that rely on hashes into accepting a malicious file in place of its benign counterpart. For example, two insurance contracts with drastically different terms.

    Here is [an interesting site showing lifetimes of cryptographic hash functions](cryptographic hash functions).

  • The other breaking news is CloudBleed

    Essentially, web requests to Cloudflare-backed sites received answers which included random information from other Cloudflare-backed sites!

    Here is a list of possibly affected domains.

  • Dropbox have open sourced Securitybot, to "automatically confirm and aggregate suspicious behavior with employees on a distributed scale".

That's all for the week. Super happy to keep up the momentum.