Hacker News new | ask | show | jobs
by buzzin_ 6 days ago
Nice list. I like it how you also included some made up terms. For completeness, those are not real:

ETag, SAML, CSP, BGP, haproxy, helm file, k8s, SOCKS5, Lamport OTS, Winternitz OTS, SPHINCS, lattice-based, pg-vector, sameSite, httpOnly. (Or, at least, i have no idea what those are ::)
4 comments
jongjong 6 days ago
ETag is the HTTP response header which provides the shasum (hash) of a resource in order to allow the client to check if the resource has changed without having to load the resource. It's for client side (browser) caching.

SAML is Security Assertion Markup Language; an XML based SSO (Single Sign On mechanism).

CSP (Content Security Policy) which allows the application to specify additional security constraints for the browser to enforce.

BGP; border gateway protocol.

Haproxy is a load balancer.

Helm file; another word for helm chart.

SOCKS5 is a tunnelling protocol which allows you to tunnel through a machine over SSH; you can use it to browse the net or access remote services via another machine (hiding your IP)... It's a bit like a basic VPN. Very easy to setup, you can configure your browser (e.g. Firefox) to access the net via a SOCKS5 proxy so if the remote instance is in a different country, websites will treat you as though you are in that country... Just like a VPN except you have to control the remote machine yourself and log into it via SSH with the -D flag.

Lamport OTS is Lamport One Time Signature algorithm.

Winternitz serves a similar purpose but different tradeoffs and smaller signature size.

SPHINCS is a stateless hash-based signature scheme which works by building a tree of OTS keys (Lamport, Winternitz or other) which can be generated deterministically, on-demand.

Lattice-based cryptography is real.

pg-vector is a plugin for Postgres for vector embeddings and it provides some operators for finding records based on the nearest vector.

sameSite and httpOnly are cookie security settings.

link
gjm11 6 days ago
Apologies if I am simply missing a joke (which I think is true with p~=0.3), but:

At least some of these are definitely real things. For instance: "BGP" is the Boundary Gateway Protocol. "Lamport OTS" is a one-time digital signature scheme due to Leslie Lamport. k8s is an abbreviation for a piece of software called Kubernetes.

link
divyekapoor 5 days ago
Not at all! All of these are real. ETag: expiry tag on HTTP(s), SAML: auth protocol, CSP: constraint sat, BGP: border gateway protocol, haproxy: load balancer, helm: k8s package manager, SOCKS5: http proxy protocol, sameSite/httpOnly: configs for HTTP security… and so on.

Never mind. The answer before me did a much better job.

link
reverius42 6 days ago
"helm file" is, of course, supposed to be "helm chart".
link
jongjong 6 days ago
You're right, I was typing each term as it came to my mind. Helm chart is the correct term but DevOps people would know what I meant.
link