bascule

13 ms·

61.
by bascule 9y ago
You forgot to mention the kernel extension...
62.
by bascule 9y ago
Just because an AES implementation matches the test vectors does not make it correct or safe. Here is an excellent visual depiction of several different AES implementations, many of which do not run in constant time: https://cr.y
63.
by bascule 9y ago
> fundamental containers like this really benefit from being type-safe Note that, at least in its current form, the native concurrent map type uses interface{} for all keys and values, and therefore offers no type safety: https:/
64.
by bascule 9y ago
Erlang puts all binary data on a heap which is shared between actors
65.
by bascule 9y ago
If these sort of ideas interest you, you might want to check out Interledger: https://interledger.org/
66.
by bascule 9y ago
The "flaw" was a choice of default preferences which are fundamentally a UX/security tradeoff: WhatsApp did not notify users about key change events by default. Those who value maximizing security at all costs, even to UX, di
67.
by bascule 9y ago
This is not a vulnerability in SHA-256. See: https://en.wikipedia.org/wiki/One-way_compression_function#D... "A notable property of the Davies–Meyer construction is that even if the underlying block cipher is tota
68.
by bascule 9y ago
To be fair to the person you're responding to, do you think people looking for copypasta are going to check the fine print? The code sample in question is in no way clearly labeled as being problematic, and a tiny statement buried in a
69.
by bascule 9y ago
Not quite. Try this: import "os" func main() { os.Open("this file does not exist") } This will compile just fine, producing no compiler error or warnings whatsoever. The error is just silently igno
70.
by bascule 9y ago
Tahoe-LAFS supports a mark/sweep-style garbage collection algorithm
71.
by bascule 9y ago
Their homebrew crypto seems very shaky: https://cs.au.dk/~jakjak/master-thesis.pdf https://eprint.iacr.org/2015/1177.pdf tl;dr: they tried to use SHA-1 as a MAC. This is something of a crypto 101
72.
by bascule 9y ago
Some claims: "It is the only cloud backup tool that allows multiple computers to back up to the same storage simultaneously without using any locks (thus readily amenable to various cloud storage services)" "What is novel abo
73.
by bascule 9y ago
What I would like to see is an openly federated payments network that functions more like the Internet (and runs on top of the Internet): https://interledger.org/
74.
Introducing Ivy: a new smart contract language(blog.chain.com)
60 points by bascule 9y ago|13 comments
75.
by bascule 9y ago
TJSON is ultimately being written in service of a credential format I'm working on (however it will be using a compact binary format isomorphic with TJSON) The main inspiration for this format is SPKI/SDSI, which was based on S-ex
76.
by bascule 9y ago
> Case in point: the example in the article from the rust documentation that converts errors to strings just to forward them This section: - Shows you how to define your own Result types. They have chosen a String as an example of wh
77.
by bascule 9y ago
Domain separation. Unless everything is tagged, an attacker can trick the parser into misinterpreting the type of an object. Or, a more mundane explanation: the parser will silently clobber the name because it contains a ":" Leavi
78.
by bascule 9y ago
> And by the same no-ambiguities token, presumably repeated names in an object would be rejected by the parser. Correct: https://github.com/tjson/tjson-spec/blob/master/draft-tjson-... https:/
79.
by bascule 9y ago
TJSON requires arrays be homogenous, and this is presently accomplished by specifying the types of arrays up-front in object member names and rejecting the array if any of the contents don't adhere to the type signature. With toplevel
80.
by bascule 9y ago
Hi, TJSON creator here. I have certainly studied XML and think XML Schema did fantastic work specifying datatypes: https://www.w3.org/TR/xmlschema11-2/#built-in-datatypes I briefly considered adopting this work wh
81.
by bascule 9y ago
You seem to have missed the point: it's not a canonicalization format. Content-aware hashing is a more powerful alternative to canonicalization which avoids many of the problems involved in designing a canonicalization scheme.
82.
by bascule 9y ago
You're describing canonicalization, which incorporates elements of the encoding format into the final hash, and therefore does not facilitate retaining the same content hash when transcoding to different formats. Also, canonicalizati
83.
by bascule 9y ago
Hello, I created TJSON. The answer to your question can be found in the second sentence on the page: > TJSON documents are amenable to "content-aware hashing" where different encodings of the same data (including both TJSON an
84.
by bascule 9y ago
No, again that's a strawman. To explain it for the third time: I was addressing a specific complaint made in the paper and providing a solution. So far I have not seen any counterarguments against this specific solution to this specifi
85.
by bascule 9y ago
You are making the exact same strawman argument as the post I was responding to. I gave a specific example of how lazy-static solves a specific problem mentioned in the paper, and as far as I can see nothing you have said refutes that. Clea
86.
by bascule 9y ago
I develop for Hardware Security Modules, which is probably a bit different than your typical embedded use case.
87.
by bascule 9y ago
Well, their original stated problem was just invoking size_of() at runtime, which lazy-static solves. That said, Rust supports custom allocators now: https://doc.rust-lang.org/book/custom-allocators.html Write your own
88.
by bascule 9y ago
I'm an embedded Rust developer, and was a little confused by this paper until I noticed it was written in 2015. There are now solutions to a number of the problems they pose both at the language level and the library level: Here's
89.
by bascule 10y ago
No, I am using Rust to implement an interpreter for a Lisp-like language
90.
by bascule 10y ago
I can't tell if this is an April Fool's joke or not. If it is, congratulations, troll successful. But I'm going to go ahead and reply anyway... There are exactly two valid* points in this post: - rustc is slow - &qu

More ›