Shoothe

17 ms·

121.
by Shoothe 9y ago
U2F requires asymmetric crypto (EC P-256) so it may be more capable than it looks on a first sight.
122.
by Shoothe 9y ago
Does this really affect the cold start? Even if you use the native runtime it still is running in a separate container and you need to start the node process anyway. (Honest question, didn't measure it). The size would definitely be af
123.
by Shoothe 9y ago
> awkward key exchange/setups of XMPP clients What do you mean by that? Conversations.im establishes e2e secure session without any fingerprint approving interaction whatsoever. Of course you can manually scan barcodes for paranoid
124.
by Shoothe 9y ago
The original post offers some more details on this matter: > For context, on newer CPUs such as on Skylake and beyond, Intel has refined the instructions used to disable branch speculation to be more specific to indirect branches, reduci
125.
by Shoothe 9y ago
> no bank provides free APIs to access this for consumers, the only option is to download manually/scrape through their websites. In Europe they will have to provide the API thanks to PSD2: https://softjourn.com/blog
126.
by Shoothe 9y ago
> But generally speaking, this protocol issue is of little interest for end users. > What is of interest to them is the fact that their data can become decentralized with the blockchain I'm not really interested in putting my ema
127.
by Shoothe 9y ago
Feature policy won't help anyone measure site's performance unless your performance metric is "amount of features used".
128.
by Shoothe 9y ago
> I had to switch to DDG just because of AMP. Funny because I did the same and stayed with DDG even though Google has slightly better results. AMP pages have broken controls and I frequently encountered completely broken AMP pages (no co
129.
by Shoothe 9y ago
Let's encrypt certificate is cross signed with IdenTrust, which is widely known, but if you've got an old platform it can fail for other reasons like missing support for SHA2. See this page for details: https://letsencr
130.
by Shoothe 9y ago
Wow, that's really interesting. Is there a web page where one could watch the progress or read the news about this?
131.
by Shoothe 9y ago
Ha, what an excellent timing with another related story on top of the HN: https://news.ycombinator.com/item?id=16087024
132.
by Shoothe 9y ago
So it seems developers are in fact responsible for dependencies that they use... Who would've thought...
133.
by Shoothe 9y ago
I've bought XPS 13 around the same time also maxed out everything and can relate to 90% of your issues. I've also had firmware updates that rendered the laptop completely inoperable (a technician needed to replaced the board). Unf
134.
by Shoothe 9y ago
Macaroons have many moving pieces, caveats being just one of them. Standardization would have to approach it from all edges. For example the binary format while simple is also "de facto" standard resembling protobuf but not exactl
135.
by Shoothe 9y ago
If you compare it to JWT in JWT claims are basically a string name (like "exp") and a JSON value. It's pretty simple. You need to check of the value for exp is a number and is greater than current millis. In Macaroons the ent
136.
by Shoothe 9y ago
I did extensive research on various token types including Macaroons. While Macaroons look simple on the surface there are numerous edge cases that the verifier should take care of (Macaroons form a DAG because you can have multiple ones ref
137.
by Shoothe 9y ago
> Which is presumably the implied motive for Moxie to trash talk OpenPGP. I'd rather say that Moxie implies that OpenPGP is broken beyond repair and thus the only alternative is his centralized solution. While he doesn't say th
138.
by Shoothe 9y ago
> You can send something that looks like email using Signal, but you cannot use OpenPGP for instant messaging or phone calls. Of course you can use OpenPGP in IM [0] but as you note it won't have perfect forward secrecy and has so
139.
by Shoothe 9y ago
> A simple standard doesn't automatically give you an end-user product that is simple and that anyone wants to use. I never said it does. What Moxie claims is that decentralized standard (like OpenPGP) will always be worse than cent
140.
by Shoothe 9y ago
Comodo does [0]. S/MIME and X.509 generally are used in enterprise scenarios where people want one corporate Certification Authority and thus keeping things simple (the underlying encoding is far from simple but that's another top
141.
by Shoothe 9y ago
> But there is more to PGP than just messaging. Exactly, OpenPGP is more like a framework for many things and the underlying structures support cryptographic agility (switching algorithms). OpenPGP can also be used to authenticate to ser
142.
by Shoothe 9y ago
With GPG there are many more options: have internal keyserver, have "certification authority" key that signs new employee keys and everyone else trusts this authority (via trust signatures. For details see: https://www.
143.
by Shoothe 9y ago
For what it's worth Signal client builds are reproducible: https://signal.org/blog/reproducible-android/ I agree with the rest of your arguments.
144.
by Shoothe 9y ago
It's useful to also bring counter-arguments to this exact post: https://gultsch.de/objection.html
145.
by Shoothe 9y ago
Could you elaborate on what do you mean by that? It's possible to use OpenPGP in instant messaging [0] and it works fine (transparent encryption and decryption in a client) although there are newer solutions more suited to IM [1]. [0]:
146.
by Shoothe 9y ago
I think it would be good to read this post remembering that Moxie is competing with OpenPGP with his Signal app. While all what's written is true OpenPGP at it's core is surprisingly simple standard for truly decentralized trust m
147.
by Shoothe 9y ago
I think the usual way: let people buy their tokens with Bitcoin, then sell these Bitcoin, there is no step 3. Or did you mean even more detailed description?
148.
by Shoothe 9y ago
Another rare group is the Bombay blood group: https://en.m.wikipedia.org/wiki/Hh_blood_group (interestingly I can't find it in the submission using quick search)
149.
by Shoothe 9y ago
They don't need to replace Linux in one big event. They'll probably test and safely move some working ideas to their production OSes (similarly as Span was introduced in .NET from Midori). There is also some effort in abstracting
150.
by Shoothe 9y ago
I think they don't know themselves what will become of it. It's more a research project similarly to Midori.

More ›