beefhash

19 ms·

1. 151.▲
   by beefhash 7y ago

   *webauthn.io, I assume EDIT: Disregard the rest of what I wrote here previously, I didn't realize it was Duo Labs's own website.
2. 152.▲
   Curve9767: Efficient Elliptic Curves on Microcontrollers [pdf](github.com)

   3 points by beefhash 7y ago|0 comments
3. 153.▲
   Han Unification(en.wikipedia.org)

   1 points by beefhash 7y ago|0 comments
4. 154.▲
   by beefhash 7y ago

   I really wish it was just one tiny less bit simple. The RISC-V spec doesn't specify that multiplication instructions (if implemented) need to be constant-time. Which means RISC-V cores will need stupid hacks for cryptography like these
5. 155.▲
   Patent-Free Authenticated-Encryption As Fast as OCB (2007) [pdf](krovetz.net)

   2 points by beefhash 7y ago|0 comments
6. 156.▲
   A few comments on ‘age’(neilmadden.blog)

   77 points by beefhash 7y ago|18 comments
7. 157.▲
   by beefhash 7y ago

   What good is a console that makes piracy trivial and even advertises this as a feature?
8. 158.▲
   by beefhash 7y ago

   > Why is the web and Let's Encrypt any different? Websites execute code that can potentially harm your computer (via zero-days.) The web is as much of a remote code execution vehicle as it is an application platform that could theor
9. 159.▲
   by beefhash 7y ago

   > And that is to say nothing of the risks you take these days online by publishing your legal name. I understand that you're in a risky line of “business” with emulation, where one wrong step can get you some lovely letters from law
10. 160.▲
    Link’s Awakening disassembly progress report – part 9(kemenaran.winosx.com)

    1 points by beefhash 7y ago|0 comments
11. 161.▲
    Meloader: Linux i386 tool to load and execute Intel ME modules(github.com)

    121 points by beefhash 7y ago|9 comments
12. 162.▲
    by beefhash 7y ago

    The schedule looks pretty decently packed again this year to me. I'm interested in at least one talk from almost every time slot, personally.
13. 163.▲
    by beefhash 7y ago

    You're not forced to attend/watch the political parts though.
14. 164.▲
    by beefhash 7y ago

    As an aside: I honestly miss the pagination from the plaintext variants of RFCs. I know it's considered a feature in RFCv3, but I do miss it. (They were done away with in RFC 7990, see section 7.3.)
15. 165.▲
    by beefhash 7y ago

    It doesn't help that getting a copy of the actual standard costs an arm and a leg[1,2], especially if you want both parts of the 2019 edition. [1] https://www.iso.org/standard/70907.html [2] https://www
16. 166.▲
    HyperbolaBSD Roadmap: hard fork of the OpenBSD kernel and userspace(hyperbola.info)

    83 points by beefhash 7y ago|112 comments
17. 167.▲
    Please put your papers online (2001)(cr.yp.to)

    3 points by beefhash 7y ago|0 comments
18. 168.▲
    ACM signed letter opposing open access(newsroom.publishers.org)

    265 points by beefhash 7y ago|138 comments
19. 169.▲
    by beefhash 7y ago

    You may be glad to hear that OpenBSD has been working on supporting security keys natively in OpenSSH, which should hopefully obviate the need to depend on GPG for hardware token solutions. See for example https://github.com&#x2F
20. 170.▲
    by beefhash 7y ago

    You're allowed to do that, but the standard is making no guarantees: C11, § 6.3.2.3(6) “Any pointer may be converted to an integer type. Except as previously specified, the result is implementation-defined, might not be correctly al
21. 171.▲
    Terseness: How little is too much? (2018)(arne-mertz.de)

    1 points by beefhash 7y ago|0 comments
22. 172.▲
    by beefhash 7y ago

    Parent said nothing about "turning up with a lawyer". You can get legal advice from a lawyer without just going in guns blazing.
23. 173.▲
    by beefhash 7y ago

    They changed to Apache 2.0 recently, actually.
24. 174.▲
    PCG, a Family of Better Random Number Generators(pcg-random.org)

    11 points by beefhash 7y ago|0 comments
25. 175.▲
    by beefhash 7y ago

    I think this is a split in terminology, actually. IRCds such as InspIRCd and UnrealIRCd speak of cloaks in the sense of user mode +x, commonly set on connection, which scrambles an incoming user's hostname/IP address to e.g. hidde
26. 176.▲
    Practice-Oriented Provable Security and the Social Construction of Cryptography [pdf](web.cs.ucdavis.edu)

    2 points by beefhash 7y ago|0 comments
27. 177.▲
    by beefhash 7y ago

    I've read your post about a brief history select(2) and kind of tried to go down with archaeology as to how the BSD sockets API came to be the way it is (struct sockaddr before struct sockaddr_storage, connect and bind being separate s
28. 178.▲
    by beefhash 7y ago

    You inherit all the weirdness from UNIX domain sockets, such as having the semantics of SOCK_STREAM, SOCK_DGRAM or SOCK_SEQPACKET (or finding out that your OS of choice doesn't support the one you wanted) depending on which one you pic
29. 179.▲
    by beefhash 7y ago

    Abstract sockets sound, to me, kind of like an attempt to retrofit microkernel-like ports back onto UNIX domain sockets for the lack of a better mechanism. It might be worthwhile to consider giving up on that idea entirely and introduce a n
30. 180.▲
    BSD Sockets Addressing(idea.popcount.org)

    75 points by beefhash 7y ago|34 comments