bascule

42 ms·

361.
by bascule 14y ago
Sodium will ship whatever algorithm wins the upcoming Password Hashing Competition: https://password-hashing.net/
362.
by bascule 14y ago
That's the goal of Sodium. It builds on Windows.
363.
by bascule 14y ago
While the people you've mentioned haven't been keeping an eye on it, Jean-Philippe Aumasson has. There have been a lot of other "mid-level" crypto people who have been keeping an eye on it as well and giving feedback to Frank. For example,
364.
by bascule 14y ago
I'm the author of RbNaCl, the Ruby binding to Sodium. RbNaCl wouldn't be possible without Sodium, because RbNaCl is written as a Ruby FFI binding and thus requires a shared library. Sodium builds a shared library. NaCl does not. Let me expl
365.
by bascule 14y ago
Perhaps you could try briefly entertaining the thought that there's a modicum of good will between the two projects
366.
by bascule 14y ago
And what's the threat model for this protocol, exactly? How many cryptographers have actually studied it? Encrypted transport protocols are notoriously hard to get correct... just look at how many times TLS, SSH, and IPsec have been comprom
367.
by bascule 14y ago
Salt is using its own homebrew transport encryption protocol instead of TLS (which, among other things, serializes everything as JSON o_O): https://salt.readthedocs.org/en/latest/topics/specs/salt_aut... Why are they doing this? Good ques
368.
by bascule 14y ago
A cell is a physical system. A physical system can either: 1) Be sufficiently large that quantum effects are irrelevant, like a billiard ball, and thus it can be modeled deterministically inside of a computer. The Tegmark paper proposes thi
369.
by bascule 14y ago
This paper specifically addresses microtubules and is definitely not neglecting the interior of neurons. I suggest you read the paper instead of just the abstract before you give feedback.
370.
by bascule 14y ago
According to Max Tegmark's calculations, the importance of quantum mechanical effects on brain processes is negligible: http://arxiv.org/abs/quant-ph/9907009 This paper posits the brain can be modeled as a classical (e.g. Newtonian, "bill
371.
by bascule 14y ago
I think it's like ERb or Haml
372.
Let's figure out a way to start signing RubyGems(tonyarcieri.com)
8 points by bascule 14y ago|0 comments
373.
by bascule 14y ago
A single-threaded event loop gives you low latency... when you're not under load and servicing multiple concurrent connections. As the amount of load on Redis (or for that matter, any single-threaded program) increases, the amount of time R
374.
by bascule 14y ago
Yeah, I was thinking more like Therac-25 giving people radiation overdoses or the Patriot missile failures due to floating point roundoff error
375.
by bascule 14y ago
window.crypto.random() will be able to do this once WebCrypto has widespread adoption
376.
by bascule 14y ago
I just saw that and facepalmed as well. Beyond the sheer number of attacks you can perpetrate on RSA versus AES (never mind in the browser), MEGA is using 2048-bit RSA, which has a 112-bit security level, versus 128-bit AES. Symmetric ciphe
377.
by bascule 14y ago
Doesn't really matter if you're "first" with a cryptosystem if it's horribly, horribly insecure either. Putting out badly designed cryptographic software like this is just irresponsible.
378.
by bascule 14y ago
Confirm. This system was obviously designed by people who had no idea what they were doing, which is about the last thing you want in a cryptosystem. Failing to authenticate the JS cryptographic code (TLS would've helped here) makes this sy
379.
by bascule 14y ago
I think the worst part is they're claiming they're the "first" when really they're not (not even for browser-based systems). There have been many encrypted cloud storage systems which worked according to this philosophy. Allmydata.com (now
380.
How We Survived TechCrunch(blog.twelephone.com)
2 points by bascule 14y ago|0 comments
381.
by bascule 14y ago
takedown.com, the prosecutor's site documenting the arrest of Kevin Mitnick, was the first web site I ever saw that made use of frames (when viewed in Netscape 3.2 iirc?) At the time, I thought frames were amazing and started making a bunch
382.
by bascule 14y ago
I think weev's case is a lot more similar to Aaronsw than Kevin Mitnick's. weev is accused of more or less the same thing as Aaronsw: downloading files off a server, except unlike Aaronsw in weev's case the files were accessible to anyone o
383.
by bascule 14y ago
I gained most of my expertise about the JVM running Ruby apps on it with JRuby (and after that, Clojure). I started out something of a Java-hater and eventually came around to kind of sort of liking Java (although I'd certainly rather write
384.
by bascule 14y ago
That's an interesting suggestion but it has nothing to do with the problem at hand. The problem here was a feature somewhat haphazardly added to Rails for ActiveResource was turned on-by-default and enabled features that should only be acti
385.
by bascule 14y ago
This is great until you depend on anything you actually have to fetch from Github. Bundling project dependencies from git comes to mind
386.
by bascule 14y ago
My understanding of Windows (which I admittedly have not used day-to-day for the past two years) is that most businesses have typically upgraded on "off-years" (or to make an analogy to Intel's tick-tock yearly release schedule, let's call
387.
by bascule 14y ago
I'm curious what sort of realistic disaster scenario you think might occur due to cross-species gene transfer (and for that matter, purely synthetic genes) in GMOs, and how the existing safeguards are inadequate against it. Normally I'm aga
388.
by bascule 14y ago
Short answer: no, but there are plenty of pretenders to the throne
389.
by bascule 14y ago
Ruby decouples the method that was requested (the "message" in Smalltalk OO parlance) from the one that is executed. This allows for a number of neat patterns, like forward invocation, where one object can specify a set of messages to be se
390.
by bascule 14y ago
> At a code level - no need to write the delegation methods/macros. You don't have to. They're built into SimpleDelegator. Syntactically the difference is you'd write: class MyThing < SimpleDelegator instead of: modul

More ›