3 ms·

https://www.google.com/search?client=ubuntu&channel=fs&q=+%22Carry-propagation+bug%22&ie=utf-8&oe=utf-8 https://www.google.com/search?client=ubuntu&channel=fs&q

by Kalium 9y ago

https://www.google.com/search?client=ubuntu&channel=fs&q=+%22Carry-propagation+bug%22&ie=utf-8&oe=utf-8 https://www.google.com/search?client=ubuntu&channel=fs&q=+%2... I submit that "carry-propagation bug" is easily looked up. You're asking for people to provide footnotes and extra information so that you can learn what they're talking about when they delve into jargon. I get it. It makes it so much easier to follow along. Then you can learn! Two points come to mind. First, the bit of jargon you've picked on is in fact easily investigated with tools you are already familiar with. Second, you're asking people writing for an audience of their choice to redefine it to include arbitrarily lay people. Which may not be maximally reasonable - there's a reason Watson and Crick's paper didn't include a primer on what X-rays are.

kelnos 9y ago
I clicked your link, and the results weren't useful. They were mostly links to reports about fixes for carry-propagation bugs in various pieces of software (which did not explain what a carry-propagation bug is). Ironically, the fourth result was a link to a different HN discussion about someone trying to figure out what a carry-propagation bug is, and failing to find any good resources through Google. (Although, to be fair, if you dig into that link a bit more, someone does attempt to explain.) So I wouldn't say it's impossible to find on one's own, but saying it's "easy" is a bit of a stretch.
- tptacek 9y ago
  It's not especially easy! That's what worries me about laypeople writing crypto libraries. If you know to look, you stand a reasonable chance of learning enough about error oracle side channels to avoid writing something that recapitulates Bleichenbacher's RSA attack. But even if you remember someone telling you to look out for carry propagation bugs, I'm not sure you have a good chance of figuring how how to test for (or exploit) a carry propagation bug. And there are other bugs like this.
lisper 9y ago
> I submit that "carry-propagation bug" is easily looked up. Well, obviously anything is easily looked up. The problem is that in this case the results aren't very helpful if you don't already know what it is. I even said this in my OP: " if you go search for "carry propagation bug" you will find lots of examples of carry propagation bugs being found and fixed, but no explanation of what one is."
- deleted 9y ago
  [deleted]

by Kalium 9y ago

kelnos 9y ago

I clicked your link, and the results weren't useful. They were mostly links to reports about fixes for carry-propagation bugs in various pieces of software (which did not explain what a carry-propagation bug is). Ironically, the fourth result was a link to a different HN discussion about someone trying to figure out what a carry-propagation bug is, and failing to find any good resources through Google. (Although, to be fair, if you dig into that link a bit more, someone does attempt to explain.) So I wouldn't say it's impossible to find on one's own, but saying it's "easy" is a bit of a stretch.

tptacek 9y ago
It's not especially easy! That's what worries me about laypeople writing crypto libraries. If you know to look, you stand a reasonable chance of learning enough about error oracle side channels to avoid writing something that recapitulates Bleichenbacher's RSA attack. But even if you remember someone telling you to look out for carry propagation bugs, I'm not sure you have a good chance of figuring how how to test for (or exploit) a carry propagation bug. And there are other bugs like this.

lisper 9y ago

> I submit that "carry-propagation bug" is easily looked up. Well, obviously anything is easily looked up. The problem is that in this case the results aren't very helpful if you don't already know what it is. I even said this in my OP: " if you go search for "carry propagation bug" you will find lots of examples of carry propagation bugs being found and fixed, but no explanation of what one is."

deleted 9y ago
[deleted]