RL_Quine

39 ms·

421.
by RL_Quine 6y ago
The formatting was stripped. I meant 2^32.
422.
by RL_Quine 6y ago
Oh no, inspecting the transaction means you know where the money goes, absolutely. There's just no assurance that it's all you need to be safe. Given the amount of absurdity going on in this industry you have to be very sure of th
423.
by RL_Quine 6y ago
You have a one in 2 32 chance of making a typo in an address and it being valid for P2PKH, its even less for modern bech32 addresses.
424.
by RL_Quine 6y ago
Sure. The basic idea is that signer can choose a ECDSA nonce (k) that they know, and leak the private key. If I choose a known nonce for my signature, I can recover the private key from the published transaction instantly. With some ECDSA m
425.
by RL_Quine 6y ago
I've been party to large Bitcoin transactions (100M USD or so). It had a team of people involved, each responsible for independently verifying the transaction before it was signed for correctness. It's hard to make mistakes if you
426.
by RL_Quine 6y ago
Bitcoin Core specifically won't let you make transactions with "absurd" fee rates.
427.
by RL_Quine 6y ago
You can't do that easily, you still need the public key file on disk.
428.
by RL_Quine 6y ago
Be aware literally nothing supports this unless it's your own kernel. Gitlab? No. Github? No. My gateway with a hand built gentoo kernel? Yes. It seems functional, but you've also got to be aware that `ed25519-sk` and `ecdsa-sk` h
429.
by RL_Quine 6y ago
I know of companies who store all of their AML/KYC in AWS buckets, going back years. It's scary really.
430.
by RL_Quine 6y ago
You can usually tell react based things from the poor performance and bad handling of network conditions.
431.
by RL_Quine 6y ago
https://en.m.wikipedia.org/wiki/Hexspeak Someone should notify the companies on this list.
432.
by RL_Quine 6y ago
I don't think that's really fair, those classes of exploits (ie, libtiff / jailbreak.me) were around a decade ago now.
433.
by RL_Quine 6y ago
There's no trustzone, no, but boot is completely verified in much stronger ways. Software updates are uniquely signed per device, per execution to prevent downgrade attacks.
434.
by RL_Quine 6y ago
Seems unlikely they were mentioned in the paper in this depth without being made even casually aware that this paper would be published. Which means they just went ahead with it anyway.
435.
by RL_Quine 6y ago
iMessage is end to end encrypted by default. Perhaps not as strongly, but it's a good default to begin with.
436.
by RL_Quine 6y ago
Determinism. https://tests.reproducible-builds.org/debian/reproducible.ht... We're making great strides into software being completely deterministic. The Bitcoin project for many years has had completely determini
437.
by RL_Quine 6y ago
It doesn't, logically, know who sent messages either.
438.
by RL_Quine 6y ago
Many are toxic (vitamin D included) in unsuitable amounts, that’s probably too strong of a statement.
439.
by RL_Quine 6y ago
That's unfortunate for a store.
440.
by RL_Quine 6y ago
Well done.
441.
by RL_Quine 6y ago
I have a crate of probably 30-40 different power supplies. Almost no two are alike, there's 5v, 5.1v, 19v, 32v, 19v, at every amperage from .3 to 30. They all have different sizes of plug, different polarity, different shapes. Converse
442.
by RL_Quine 6y ago
No. Different chip.
443.
by RL_Quine 6y ago
It’s hard to get across just how out of their depth someone is without putting it fairly explicitly.
444.
by RL_Quine 6y ago
https://vercel.com/edge-network This page contains websocket addresses of a CDN that returns ping pong from a huge number of locations. It works surprisingly well for working out very fine grain location in just playing wit
445.
by RL_Quine 6y ago
The client allows them to be alphanumeric, but the default is 4 numbers. The irritating behaviour of repeatedly asking for it to be entered at awkward times means people will just set it to 1337 and call it a day.
446.
by RL_Quine 6y ago
SGX has simply just been shown to be incompatible with secure software and is impossible to justify. Signal can happily operate without the need for this sort of thing to begin with, but they keep insisting on weak solutions for no reason.
447.
by RL_Quine 6y ago
I’d really like to have a more sane version of Signal as a fork, which allows the maintaining of compatibility, but given how hostile they’ve been towards this sort of thing I suspect it would be unmaintainable.
448.
by RL_Quine 6y ago
The previous status quo was that nobody had the data other than your device.
449.
by RL_Quine 6y ago
Way cheaper. I have some Kintex7 PCI boards that were under $150 from aliexpress. Which is less than the cost of the FPGA.
450.
by RL_Quine 6y ago
You can deal with this by using subdomain tags on some providers. user@tag.domain.com rather than user+tag@domain.com.

More ›