JoachimSchipper

11 ms·

61.
by JoachimSchipper 7y ago
Signals Works For Me, on iOS, and for many others. I get that you're frustrated, but Signal really can work.
62.
by JoachimSchipper 7y ago
tzs' solution is clever, but if you're planning to simply toss a bad drive (and don't particularly care which blocks are bad), something like tee /dev/the/disk </dev/urandom | sha256sum and sha25
63.
by JoachimSchipper 7y ago
Rogue CAs can do almost anything, but the browsers will kill any CA that is found to be (repeatedly) mis-issuing. And checking the CAA has apparently been in the CA/Browser Forum Baseline Requirements since 2017. That said, LetsEncry
64.
by JoachimSchipper 7y ago
The Thinkpad X1 Extreme comes with a NVIDIA GTX1650, which isn't bad. The X1 Extreme isn't exactly a budget model, of course... (Lenovo also sells Legion laptops, which are more gaming machines. But not Thinkpads.)
65.
by JoachimSchipper 7y ago
Yes; there is some discussion of attacks in https://github.com/trojan-gfw/trojan/issues/14 . Personally, I'd be very careful telling people to rely on my software for avoiding the Chinese surveillance -
66.
by JoachimSchipper 7y ago
Specifically on > it's good practice to periodically reseed the CRNG. And so that means you still need to have an entropy pool and some way of measuring how much entropy you think you have accumulated, and how much has been possibly
67.
by JoachimSchipper 7y ago
Your parent is talking about register spills to memory. Using memory instead of registers may be somewhat inefficient, but it's still constant-time (i.e. no dependence on the key etc.)
68.
by JoachimSchipper 7y ago
OpenBSD now has binary packages for -stable, but AFAIK this does not include e.g. Chromium: https://news.ycombinator.com/item?id=20694338 . Running -current does give you up-to-date Firefox and Chromium packages.
69.
by JoachimSchipper 7y ago
There is a "group game" of sorts going on at navalgazing.net: https://www.google.com/search?q=rule+the+waves+site%3Anavalg... . And if you're interested in this sort of thing, you'll probably also appreci
70.
by JoachimSchipper 7y ago
E.g. GMail supports rfc822msgid:<id> searches.
71.
by JoachimSchipper 7y ago
Earlier discussion on (mostly) the same topic: https://news.ycombinator.com/item?id=21201768 .
72.
by JoachimSchipper 7y ago
Why not just do it manually 20 times first? It'll show you what to look for, what customers want, etc. - and a bit of manual work is cheaper than building the wrong thing.
73.
by JoachimSchipper 7y ago
This is not a high-quality response; please be polite, and point out any actual errors you see.
74.
by JoachimSchipper 7y ago
FWIW, I find that form quite useful for defining short aliases, e.g. int *const current_foo = &items[i].bar.foo; before some complicated manipulations on current_foo. (A decent (SSA-)optimizing compiler will produce identical c
75.
by JoachimSchipper 7y ago
Sure, but generating random bits is fast with e.g. AES-NI, RdRand or a software implementation of e.g. ChaCha.
76.
by JoachimSchipper 7y ago
Supposedly you can use a Lua script - although that’s a somewhat big hammer for such a simple problem...
77.
by JoachimSchipper 7y ago
You’ve already received sensible answers, but let me add that “Android” pretty much means a Google device here; an Android device that doesn’t get updates, or only after a long delay, is decidedly less secure.
78.
by JoachimSchipper 7y ago
Pretty hard. Unison is nice, but... - Unison is written in OCaml, which is (probably) a perfectly fine language but not commonly used - Unison synchronizes files to files, but for a Dropbox-like system you really want deduplication for spac
79.
by JoachimSchipper 7y ago
A quick search suggests that GraphQL should usually cause one client -> server -> SQL-server query - i.e. only one network round trip. No?
80.
by JoachimSchipper 7y ago
That’s not a commodity market, but there’s still plenty of economic freedom?
81.
by JoachimSchipper 7y ago
Quoting the article, “competition from AWS is simply the price to pay for developing OSS. Restrictive licensing including AGPL can slow down AWS but cannot stop it so the real impact of such licensing is lower user adoption. (...) this mean
82.
by JoachimSchipper 7y ago
C11 has _Generic.
83.
by JoachimSchipper 7y ago
It's always sad to see someone taking down a project that is run with the best intentions. However, it may be time to move away from the entire PGP ecosystem. Consider the post's "We've known for a decade this attack is
84.
by JoachimSchipper 7y ago
How would a proof-of-work system, let alone a blockchain, work? Apparently, GnuPG breaks badly at 150 000 signatures. You want adding a signature to be doable on a really old laptop and/or low-end Android phone; a motivated attacker ca
85.
by JoachimSchipper 7y ago
The usual answer is background checks, no? (If nothing else, ensuring that employees don't e.g. have massive debt makes it less likely that an otherwise-reliable person feels forced into doing something bad...)
86.
by JoachimSchipper 7y ago
It’s unfortunate that, under this proposal, one may end up splitting an application into multiple iframes to get “enough” budget (or, somewhat more nasty, an embedded iframe could decide to add a second internal iframe). I could imagine an
87.
by JoachimSchipper 7y ago
ssh-agent has prompting and you can set up a Yubikey with ssh. The problem here was agent forwarding , which you should almost always replace with opening a new connection via ssh -J (or equivalent.)
88.
by JoachimSchipper 7y ago
Do you happen to have a link to a page explaining these techniques? I code in C and dabble in Rust, but this sounds interesting. (Sorry, I know this is a few days old by now...)
89.
by JoachimSchipper 8y ago
Eh, this works fine (on Python 2.7): class A(object): def foo(self): return 'foo' a = A() a.foo() # returns 'foo' a.__class__.foo = lambda self: 'bar' A().foo() #
90.
by JoachimSchipper 8y ago
You may be inspired by "Fork yeah" - https://news.ycombinator.com/item?id=16839529 - bcantrill on Solaris. But that was a situation in which an earlier version was already open-sourced. You could consider reimplem

More ›