Abekkus

12 ms·

91.
by Abekkus 5y ago
And just like Crypto AG is. Power doesn't only subvert public orgs, or only orgs in their own countries. What org would you implicitly trust? I wouldn't immediately discount anything on this list more than anything else I se
92.
by Abekkus 5y ago
Yep, For me at least, acceptance of the unknown and unknowable is a deliberate process, almost a ritual, not a natural state.
93.
by Abekkus 5y ago
"Protect and serve" (the incumbent power structures, not arbitrary citizens)
94.
by Abekkus 5y ago
Same people who pay for the roads and traffic signals?
95.
by Abekkus 5y ago
I know flipping burgers is the colloquial term, but Mcdonalds hasn't been flipping burgers for more than 20 years. They cook their burgers in heated clamshells, which cook both sides of the burgers at once. Half the cook time, no flipp
96.
by Abekkus 6y ago
I paid for youtube for a while, but I did not get a different algorithm. It was the same feed of addictive, stressful content. I stopped paying once I noticed this.
97.
by Abekkus 7y ago
Freeze it, then toast it.
98.
by Abekkus 7y ago
Where is there a rescindment of usg public dnssec requirements? It's still a requirement even for fedramp-low. https://www.fedramp.gov/search-results/?search=dnssec
99.
by Abekkus 7y ago
The right answer is not to have such a tight house. Instead of spending resources to tighten it, then spending more resources to install a compensating appliance.
100.
by Abekkus 7y ago
Small amounts of antifreeze can be used to make bad wine taste better, and kill you faster. https://en.wikipedia.org/wiki/1985_diethylene_glycol_wine_sc...
101.
by Abekkus 7y ago
The US has guns that successfully track missiles and mortar rounds, any drone meant for extended flight won't be faster than either of those. However, hardening against microwaves costs less than the defensive tracking system, so it&#x
102.
by Abekkus 7y ago
There was an informative title. Can't think of a good reason why it was changed here on HN.
103.
by Abekkus 7y ago
Session is a higher OSI layer than transport, and any secure session management would probably be as complicated as TLS in the end.
104.
by Abekkus 7y ago
I keep seeing this argument that dnssec/dane puts more power in the hands of registrars, which are not as trustworthy as CAs. Aren't most TLS certs domain validated anyways? The current TLS practice already puts full trust in regi
105.
by Abekkus 7y ago
Why isn't TLS client auth a turnkey solution for maintaining a single web session as a client moves between network segments?
106.
by Abekkus 7y ago
The largest-value commonly-available coin in the US, is worth about 1/4 of a Euro. I kind of miss the 1,2,5 distributions of euro cash.
107.
by Abekkus 7y ago
In the shortest timescale? Military and Security robots.
108.
by Abekkus 8y ago
shouldn't houseplants be sufficient?
109.
by Abekkus 8y ago
The configuration I spoke of does not eliminate a shared cache, it uses the existing shared cache. In addition, a validating endpoint resolver is no more a "dns server", than a stub resolver is.
110.
by Abekkus 8y ago
You can run a local resolver that forwards all queries to 8.8.8.8 while still running dnssec validation, and get both the speed benefit of a caching infrastructure, and the authentication of dnssec. With only one trusted key.
111.
by Abekkus 8y ago
The tweet you linked to is making false claims about dnssec. It doesn't "blow up the sizes of dns requests" If you aren't explicitly looking up dnssec signatures, a signed zone's responses will be the same length a
112.
by Abekkus 8y ago
Hijacked high-ttl records for signed zones aren't more dangerous than hijacked, high-ttl records for unsigned zones. Why do you claim that they are? They are both invalidated through the same mechanisms. It would be nice if there were
113.
by Abekkus 8y ago
If you want to really supercharge leaf collection, use a large tarp instead of a wheelbarrow, then carry your plunder like santa. Wheelbarrows are a waste of energy for carrying leaves.
114.
by Abekkus 8y ago
If Thomas isn't responding I will. DNSSEC is an important idea, but not something a company's security department should be terribly worried about implementing just this minute. TLS will take care of most of what you need in that
115.
by Abekkus 8y ago
Also first national bank I tried to look up, (actually don't know if that's what you mean by national bank) federalreserve.gov is using dnssec.
116.
by Abekkus 8y ago
Big five tech giants aren't playing, and I don't know any bank domains, but it's not hard to find names: cloudflare.com verisign.com comcast.net *.gov Every time dnssec shows up there's a tptacek comment crapping on the
117.
by Abekkus 8y ago
We are post scarcity for food, clothing, and shelter. In our lifetimes, we could easily move education, entertainment, and some definition of basic medicine into a post-scarce realm. Unfortunately, before any of that happens, security, po
118.
by Abekkus 8y ago
Oh, keeping military power in the hands of the citizenry won't be simple to implement, but it's quite simple that if we don't implement something in that realm, then we're in the twilight of free civilization.
119.
by Abekkus 8y ago
Its simple really, we need a blockchain-style solution to ensure that the populace as a whole directly controls the largest bot army, otherwise the future is just one dictatorship unto oblivion
120.
by Abekkus 8y ago
The drug war has always been a cultural and class war, and of course it cuts along racial lines, as well as political ones. Not nonsense at all. https://youtu.be/sXPOw2unxy0?t=238

More ›