anologwintermut

51 ms·

421.
by anologwintermut 14y ago
working link http://blog.cryptographyengineering.com/2012/09/on-provable-...
422.
by anologwintermut 14y ago
On the contrary, it seems to be fairly decent timing. Since it draws attention to the issue of formal security in TLS. The formal proofs he refers to have caveats either 1) they use actually secure asymmetric crypto whereas TLS does not o
423.
by anologwintermut 14y ago
From a Wired article citing this post[1] 'Update: An Amazon spokesperson says “For a single request the billable peak rate is the size of the archive, divided by four hours, minus the pro-rated 5% free tier.”' This seems to imply the cost i
424.
by anologwintermut 14y ago
There is regulation against theft( though does any legal authority investigate bitcoin thefts?) . I meant regulations dealing what bitcoin exchanges can do with your money or what steps they have to take to protect it. For example, although
425.
by anologwintermut 14y ago
I may or may not subscribe to your politics, but you are sorely mistaken if you think bitcoin stops most of the problems with the worlds financial system( unless you consider how Central Banks handle the money supply such a problem). Using
426.
by anologwintermut 14y ago
Hype.
427.
by anologwintermut 14y ago
No, it's not. Your laptop doesn't know your password and hence you can actually use it to generate and encryption key. This system needs the laptop to know your password.
428.
by anologwintermut 14y ago
The paper is cheap and assumes they have a human attacker." Threat model: The proposed system is designed to be used as a local password mechanism requiring physical presence. That is, we consider authentication at the entrance to a secure
429.
by anologwintermut 14y ago
It's not even that. YOu can't store a key with this divice because for the authentication game to work, the system has to have the password.
430.
by anologwintermut 14y ago
This proves Authentication, not key storage that enables encryption/decryption. Per the paper, for authentication "a participant is presented with multiple SISL tasks where one of the tasks contains elements from the trained sequence." Hen
431.
by anologwintermut 14y ago
I think most of the comments here are missing a key ( and in my opinion the most detrimental) effect of stack ranking at microsoft: it prevents talent from clustering around good projects (unless they are so good as to be exempted from it).
432.
by anologwintermut 14y ago
Can anyone confirm the articles assertion that " Before you 'grounded' your system, the AC voltage in general acted pretty safe for your customers. The only way they could get a shock was if they touched both wires at the same time?" It se
433.
by anologwintermut 15y ago
It absolutely needs to be random. If not, the adversary can predict the IV and use that to conduct either a chosen plaintext or ciphertext attack. This is what happened to SSL a few months ago. See http://crypto.stackexchange.com/question
434.
by anologwintermut 15y ago
The hype is indeed a little absurd. But look at it another way: Bard's paper enumerated a very potential exploit i 5 years ago .Issues with the IV were disclosed on the openssl list 3 years before that. For the past 8 years TLS was know to
435.
by anologwintermut 15y ago
Fundamentally is precisely the wrong word to use here. It may be the case that this particular attack is not an issue -- I doubt it given the authors track record -- but the paper marshray links to is an actual real issue even if this part