QuiEgo

7 ms·

121.
by QuiEgo 8mo ago
You read it. You now have an infinite army of overconfident slightly drunken new college grads to throw at any problem. Some times you’re gonna want to slowly back away from them and write things yourself. Sometimes you can farm out work to
122.
by QuiEgo 8mo ago
> The "cryptographically sound seed" however is stored inside the secure enclave for anyone with the capability to extract. Sorry, I'm not sure I follow here. Is anyone believed to have the capability to extract keys from
123.
by QuiEgo 8mo ago
I recommend reading the AES-XTS spec, in particular the “tweak”. Or for AES-GCM look at how IV works. I also recommend looking up PUF and how modern systems use it in conjunction with user provided secrets to dervie keys - a password or fin
124.
by QuiEgo 8mo ago
Well there is one known technique. https://xkcd.com/538/
125.
by QuiEgo 8mo ago
Safari is 90% this, and maybe before they changed how extensions worked it was like 99% this. I weep for how close it was.
126.
by QuiEgo 8mo ago
I had a professor who did this. One letter grade bump *after curve* applied per assignment per bug found (reproduce case and fix required). Loved that class.
127.
by QuiEgo 8mo ago
Having the privilege to live in a house without common walls to a neighbor is the biggest quality of life improvement I've ever had the good fortune to experience. I'd take a hell of a long commute to the burbs' before I&#x27
128.
by QuiEgo 8mo ago
Social media broke society. The echo chamber effect from the feed algorithms has led to everyone living in their own little realities and it's so terrifying to watch what happens when people don't have the same truths. I remember
129.
by QuiEgo 9mo ago
The next best is probably an Apple TV 4k, but it can't direct play as many audio and video formats as the Shield.
130.
by QuiEgo 9mo ago
Crunch time in those days sucked. I remember mandatory nights and weekends and the managers ordering in pizza for everyone.
131.
by QuiEgo 9mo ago
Yes. See attacks like Pegasus.
132.
by QuiEgo 9mo ago
> That's fundamentally incompatible with my worldview and I explicitly think it should be legislated out of existence. The model that makes sense to me personally is that private companies should be legislated to be absolutely clear
133.
by QuiEgo 9mo ago
Example: https://www.techspot.com/news/108318-stolen-iphones-disabled...
134.
by QuiEgo 9mo ago
Modern devices try to prevent this by cryptographically entangling the firmware on the flash to the chip - e.x. encrypting it with a device-unique key from a PUF. So if you replace the chip, it won't be able to decrypt the firmware on
135.
by QuiEgo 9mo ago
Almost every modern SoC has efuse memory. For example, this is used for yield management - the SoC will have extra blocks of RAM and expect some % to be dead. At manufacturing time they will blow fuses to say which RAM cells tested bad.
136.
by QuiEgo 9mo ago
100%, if you steal a phone from the Apple store they just remote brick it.
137.
by QuiEgo 9mo ago
Very hard. FIB is the only known way to do this but even then, that's the type of thing where you start with a pile of SoCs and expect to maybe get lucky with one in a hundred. A FIB machine is also millions of dollars.
138.
by QuiEgo 9mo ago
Open the case and pogo pin on a flash programmer directly to the pins of the flash chip. Sophisticated actors (think state-level actors like a border agent who insists on taking your phone to a back room for "inspection" while you
139.
by QuiEgo 9mo ago
It depends. Usually there are enough "knobs" that adding that many balls to the package would be crazy expensive at volume. Most SoCs of even moderate complexity have lots of redundancy built in for yield management (e.x. anything
140.
by QuiEgo 9mo ago
Sure. Or the supply chain attacker (who is perhaps a state-level actor if you want to think really spicy thoughts) selling you a device on Amazon you think is secure, that they messed with when it passed through their hands on its way to yo
141.
by QuiEgo 9mo ago
I grew up poor in the US. It was not super awesome, but not as bad as the article would make you fear. The public schools (and activities tied to them) were great, even in my "bad" district. Libraries were everywhere and very acce
142.
by QuiEgo 9mo ago
It'd be ideal if the phone manufacturer had a way to delegate trust and say "you take the risk, you deal with the consequences" - unlocking the bootloader used to be this. Now we're moving to platforms treating any unloc
143.
by QuiEgo 9mo ago
OTP memory is a key building block of any secure system and likely on any device you already have. Any kind of device-unique key is likely rooted in OTP (via a seed or PUF activation). The root of all certificate chains is likely hashed in
144.
by QuiEgo 9mo ago
If you hold $100k in Bank of America (or a linked Merrill Edge account), they will give you up to 5.25% cash back for their credit cards in certain categories, and 2.62% unlimited. https://frugalprofessor.com/bank-of-america
145.
by QuiEgo 9mo ago
I highly recommend the Fidelity CMA (Cash Management Account), it behaves mostly like a checking account but it autosweeps into SPAXX so you get the best of both worlds - your money is instantly accessible but you get the earnings of a mone
146.
by QuiEgo 9mo ago
I think best case, we’re looking at a “do what spreadsheets did for accountants” type moment here. You still need to be able to prompt the thing what to do, and relatively fine granularity, but if you know what to ask (and know enough to ve
147.
by QuiEgo 9mo ago
I can hear the retort of “fake news” before I get past the headline. When people are living in a different reality, facts from the “other” reality no longer have influence.
148.
by QuiEgo 9mo ago
There is a conspiracy theory Trump is under active control by blackmail by the Russian government. Moments like this make you wonder.
149.
by QuiEgo 9mo ago
This comment assumes Trump has some grand plan and is playing 4D chess. The simplest explanation is usually the correct one.
150.
by QuiEgo 9mo ago
Low density text (most of screen has no content) is easier to read on a black background with bold, light color text. High density text (most of screen has content) is easier to read on a tan background with black text. HN knows what’s up.

More ›