Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
RL_Quine
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
54 ms
·
601.
▲
by
RL_Quine
7y ago
For my comment, it's just indicative of design issues. Some designs do trust these devices to make RSA and ECDSA keys though, which we've seen in the past can be majorly screwed up by accident. https://www.ria.ee/e
602.
▲
by
RL_Quine
7y ago
I believe this is mostly down to the obscurity of them rather than good implementation. The implementations of ECDSA predominantly are almost always not constant time, which directly leaks the size of the nonce that has been chosen. That no
603.
▲
by
RL_Quine
7y ago
I don't have any information about this secure element.
604.
▲
by
RL_Quine
7y ago
It's indicative more than a break of encrypted storage. For example ATECC508A, a common secure element chip used in a lot of designs. It does ECDSA signing, using DUAL_EC_DRBG (based on the description, it's not mentioned) and pro
605.
▲
by
RL_Quine
7y ago
I've signed a ot of these NDAs. Dirty little secret, most of them are DUAL_ED_DRBG which is backdoored. None of them have any meaningful protection, and usually they have sidehcannels the size of mountains. There's none of the sec
606.
▲
by
RL_Quine
7y ago
for i in range(1,1000): print sha256("lol what's entropy" + i) This passes dieharder. Completely meaningless.
607.
▲
by
RL_Quine
7y ago
If you use my bandwidth to serve your own traffic, fuck you, honestly. The internet is hard enough without wondering if random websites are slowing down my connection by seeding torrents with webRTC.
608.
▲
by
RL_Quine
7y ago
Unfortunately their landing page doesn’t give and real confidence. It looks like a MVP rather than something they’ve been working on for years.
609.
▲
by
RL_Quine
7y ago
URLs are already removed from search in some locations.
610.
▲
by
RL_Quine
7y ago
Something with safe memory handling.
611.
▲
by
RL_Quine
7y ago
It's not particularly strong end to end encryption, to note. It doesn't have perfect forward secrecy, for better or for worse.
612.
▲
by
RL_Quine
7y ago
I'm a lot more willing to believe that Intel is attempting to cook benchmarks, than it being a decision made out of caution to save face for AMD if the results are incorrect. They sat for an excruciatingly long time making no obvious i
613.
▲
by
RL_Quine
7y ago
The idea that a R&D department has cost restrictions doesn't really hold water. You can be sure that they already have rooms filled with every single AMD processor that's ever been released, and a bunch which haven't. The
614.
▲
by
RL_Quine
7y ago
That's some seriously scummy stuff from Intel.
615.
▲
by
RL_Quine
7y ago
The cannon is injected into HTTP resources.
616.
▲
by
RL_Quine
7y ago
They mean IPMI. All servers have IPMI and there’s remote root exploits against many versions of them.
617.
▲
by
RL_Quine
7y ago
It’s also possible it was stolen. Though a FOI request against my hospital I was able to find the URLs where they store documents (they printed them and sent them to me, with the URLs at the top), which appear (though I obviously didn’t try
618.
▲
by
RL_Quine
7y ago
There’s basically one treatment, and one only that any specialist would recommend at this point, so it’s effectively moot other than the question of it being covered by whatever healthcare or insurance you can muster up. The alternative and
619.
▲
by
RL_Quine
7y ago
I have a rather specific condition that I’ve seen YouTube advertisements for the drugs for, despite not even searching for the details of it except through an anonymizer. I’ve always wondered what the cost per click for an advertisement for
620.
▲
by
RL_Quine
7y ago
You just buy a SIM. Nothing special about it.
621.
▲
by
RL_Quine
7y ago
It can be denied with a policy profile.
622.
▲
by
RL_Quine
7y ago
"Audiophiles" are generally associated with not high end audio equipment at absurd costs and no reasoning. Oxygen free copper cabling, making sure your cables are isolated from the floor on little stands to reduce the vibration th
623.
▲
by
RL_Quine
7y ago
The text suggests whatever it is, it’s close enough to botox for it not to matter.
624.
▲
by
RL_Quine
7y ago
> Well, I did allude to a draft preprint of some arguments that point out the major issues with Grant's paper he is presenting at @BlackHatEvents. Here is that draft: Reviewing Recent Prime Generation Methods for Breaking Cryptogra
625.
▲
by
RL_Quine
7y ago
One of the products seems to be real and FDA approved. https://www.drugs.com/newdrugs/fda-approves-jeuveau-prabotul...
626.
▲
by
RL_Quine
7y ago
Having a team page like that is your first red flag. https://strathspeycrown.com/subsidiary-companies-investments... > "Strathspey Crown is a visionary portfolio of transformational businesses, focused on the most c
627.
▲
by
RL_Quine
7y ago
No you didn’t. A few seconds of proof of work is trivial for a bot, any amount that makes it hard for a bot is unusable to a human. This is why nobody uses hashcash.
628.
▲
by
RL_Quine
7y ago
The cookie warnings mostly end up being meaningless “WE NEED COOKIES TO WORK CLICK OK” on every website.
629.
▲
by
RL_Quine
7y ago
Whenever "blockchain" is mentioned there's always exactly these sort of comments popping up. They are always demos because verifying even 6000 signatures in a second on a normal CPU is not a walk in the park, let alone any ot
630.
▲
by
RL_Quine
7y ago
https://www.usenix.org/legacy/events/sec08/tech/full_papers/... https://en.wikipedia.org/wiki/Helios_Voting You might want to look at some of the issues solved by Helios. Its s
More ›