atoponce

12 ms·

61.
by atoponce 10y ago
I don't think so. In the terms of "random that does not follow a known deterministic algorithm or formula", both chaotic sources like lightning strikes, and quantum states, like photon spin, can be so random, that for all def
62.
by atoponce 10y ago
Well, not all Linux hardware provides sufficient entropy on first boot, such as solid-state embedded hardware or virtual machines. The CSPRNG will happily provide random bits regardless of initial seeding or not. Flip a coin 512 times, reco
63.
by atoponce 10y ago
There is no difference between /dev/random and /dev/urandom in the Linux kernel, other than /dev/random blocks when the entropy estimate is low or depleted. Both source them same CSPRNG, which is based on SHA-1
64.
by atoponce 10y ago
Well, you do need to seed /dev/urandom with sufficient entropy. Hardware random number generators work here. After it's seeded, my only concern would be backtracking resistence, but haveged(8) works well here.
65.
by atoponce 11y ago
Encrypting files should probably include a salt-per-file, otherwise the same file contents will produce the same ciphertext when the same passphrase is provided. function openssl-encrypt() { openssl enc -aes-256-cbc -salt -in
66.
by atoponce 11y ago
On the one hand, this is really quite good. I'm always interested in making my time at the command line more efficient. If I put this in my shell's config, and remember the function names, I'm golden. On the other hand, I&#x2
67.
by atoponce 11y ago
Interesting, but unnecessary. First, if a private key is protected with a passphrase with sufficient entropy to withstand a sophisticated attack, then even if the key is on a USB thumb drive, access to the remote system where the public por
68.
by atoponce 11y ago
This paper asserts something innacurate: entropy pools can be "used". Entropy is not an object, it's an estimation. Just as you don't use temperature, or barometric pressure, you don't "use" entropy. Furth
69.
by atoponce 11y ago
Supposedly. So far, I haven't found a software implementation that is faster than MD5. However, I have found plenty of Skein software implementations that come close to meeting the speed specification. See http://ae7.st&#x2F
70.
by atoponce 11y ago
You can read about HAIFA here: http://csrc.nist.gov/groups/ST/hash/documents/DUNKELMAN_NIST...
71.
by atoponce 11y ago
Upload a screenshot to http://plaintextoffenders.com/
72.
by atoponce 11y ago
Even better, it appears that it will require legal motivation for them to change their behavior: https://twitter.com/virginmedia/status/595241181065383936
73.
Virgin Media stores user passwords in plaintext?(twitter.com)
51 points by atoponce 11y ago|31 comments
74.
TapLink Announces “Blind Hashing” Password Storage Service(taplink.co)
2 points by atoponce 12y ago|0 comments
75.
by atoponce 12y ago
For Qemu 1.3 and later, there is VirtIORand where you can have VMs attach to a HWRNG on the hypervisor, then food that into the kernel CSPRNG. This should be imaged by default, so on first boot, each VM has enough entropy for key generation
76.
by atoponce 12y ago
> It's still a bit ahead of launch, but we are preparing an open source alternative to OwnCloud OwnCloud is licensed under the AGPLv3. Curious why you think it's not Open Source Software.
77.
by atoponce 12y ago
The Coraid CEO has gone on record about the financial troubles: http://www.channelweb.co.uk/crn-uk/news/2390545/coraid-ceo-s...
78.
Coraid is downsizing, laying off 1,700 employees(theregister.co.uk)
1 points by atoponce 12y ago|1 comments
79.
by atoponce 12y ago
Interesting concept, but no. People should not be having a 3rd party generating their keys. If people want a vanity short key ID, then educating them on how OpenPGP packets work, and how the fingerprint is generated from the timestamp is th
80.
by atoponce 12y ago
> Not everyone does (pregnant or nursing women, or the sick, for example), and not everyone fasts for that period of time. Some people in different roles in the church (what non-Mormons might call a prophetic / visionary role) are e
81.
by atoponce 12y ago
I recognize this as completely empirical evidence, so take it as that. I am a Mormon. As part of our religious observance, we fast for 2 meals on the first Sunday of every month. Also, I have fasted for the entire duration of the Muslim mon
82.
by atoponce 12y ago
100% anonymity online is a myth. Anyone claiming they have it is lying to you, and should be a large, red flag. Nevermind that the app is proprietary software.
83.
by atoponce 12y ago
I have been running ZFS on Linux in production on many storage servers for almost 3 years now. I'd like to address several points from the forum post: If you want ZFS you need lots of expensive ECC RAM. The fact that somebody is runni
84.
by atoponce 12y ago
Competition at https://password-hashing.net Finalists (marked in red) at https://password-hashing.net/candidates.html
85.
by atoponce 12y ago
More details at: https://password-hashing.net/ Finalists (marked in red) at: https://password-hashing.net/candidates.html
86.
by atoponce 12y ago
Is the extension Free Software? Can I get a copy of the source code?
87.
by atoponce 12y ago
China has more Internet users than most countries have for a population. It has a cornucopia of content and services that would rival the "free Internet" you and I enjoy. It's hardly a digital vacuum mainstream media would li
88.
by atoponce 12y ago
Some comment section feedback: The horizontal indentation on the comments might be a bit aggressive, and each comment is taking up a great deal of vertical screen real estate. Further, the clickable "more" makes reading long comme
89.
by atoponce 12y ago
The "Great Firewall" in China has over 600 million active Internet users. That's double the population of the United States. Baidu is the dominating search engine, there are replacement services for Twitter, Facebook, and oth
90.
by atoponce 12y ago
Indeed. After tracking my tasks in Chromium, I have found that Privacy Badger regularly and consistently sits at about 1/2 the RAM usage of uBlock.

More ›