brl

32 ms·

301.
by brl 18y ago
I took that job and for 5 years each day when I arrived at work I would have to go around looking for somebody that had carelessly wandered off to the bathroom and steal their chair. Eventually I just settled on one that was missing two wh
302.
by brl 18y ago
You can't securely exchange keys to do #2 without having #1. Not sure why you think active attacks are more rare than any other attack against TLS/SSL sessions. Any time you are in a position to perform a passive attack (snooping) you coul
303.
by brl 18y ago
No, you just must not say them here. Political discussions about the US president are inappropriate and off-topic for a thread about Argentina on a forum about 'Hacker News'.
304.
by brl 18y ago
Now that Firefox has explicit support for key continuity management, I think I'll just dump my root CA store and go with that. Global PKI is just not such a great idea.
305.
by brl 18y ago
Interesting. How did you find the companies you have listed?
306.
by brl 18y ago
That's an interesting criticism of OpenSSL. Do you know of a general purpose cryptographic library that has done a better job than OpenSSL at hardening against side-channel attacks? By default, OpenSSL has: RSA blinding, constant time mont
307.
by brl 18y ago
...WEP, Kerberos, GSM, PPTP
308.
by brl 18y ago
Even expert designed and peer reviewed cryptographic standards usually need a couple of versions to get rid of all the holes-big-enough-to-drive-a-van-through. :)
309.
by brl 18y ago
Forward secrecy was one of the important mistakes I had in mind actually. If you use TLS naively, you have none. You probably didn't even realize you needed it. Verifying certificates correctly is not so easy to get right either, if you c
310.
by brl 18y ago
There are pretty big mistakes to be made on the other side of this philosophy as well. If you need to solve some cryptographic problem which is not exactly the same as something which has already been designed, implemented, and reviewed by
311.
by brl 18y ago
I guess we're not as skeptical about this underwear-gnome business plan as you are. We don't know for sure what #3 is going to be and I don't think we have enough information yet to decide. It's not just a product (or a product at all, sin
312.
by brl 18y ago
Where do C++ programmers go when the move to Java and discover garbage collection?
313.
by brl 18y ago
We just released a second beta of our application which is a network security tool platform. Our distribution strategy is to release everything for free as open source and hope that people like it enough to tell other people about it. At
314.
by brl 18y ago
You might like dzone.com which is a link/news site for developers that has a huge bias in favor of news about Java.
315.
by brl 18y ago
This should be "Five Deliberately Goofy Programming Languages". Strange programming languages are J and Prolog (and APL, as already mentioned).
316.
by brl 18y ago
Step 1: Read Peter Norvig's essay about how there is no shortcut to learning how to program. Now your expectations should be tuned to a realistic setting. Step 2: Read and write code as often as possible. Step 3: Wait at least 10 years. Ste
317.
by brl 18y ago
You can safely skip learning C if you don't want to know how an operating system works or what a device driver does. Also no C is needed if you just don't care about the internals of the runtime of your favorite programming language (and p
318.
by brl 18y ago
They are asking for profits because that is one of the legal remedies they are entitled to. It sounds pretty severe, like Cisco stands to lose a lot of money but I really doubt that the FSF would be awarded anything here. The defendant (Ci
319.
by brl 18y ago
"What's the going rate for infringement? $150,000 per copy or something?" There is a range for statutory damages from $750 - $30000 per WORK (not per copy). There is no reason to believe that the FSF would be awarded anything more than the
320.
by brl 18y ago
"Any decision that declared the GPL invalid would have to be so novel, and so far reaching that it would probably break all software licenses." This is not true at all because regular software licenses are enforced under contract law and op
321.
by brl 18y ago
Blatant is not exactly the right word to describe the situation here. http://tinyurl.com/5mw2ms
322.
by brl 18y ago
When I first heard about this I thought that it sounded like suicide too but for entirely different reasons: If Cisco decides to fight rather than reconcile this case might not turn out the way everybody thinks it will. And then what?
323.
by brl 18y ago
"Don't use line numbers" Excuse me? Line numbers? "Don't put your entire application in one method." Bu..but I can't call GOSUB anymore because you took away my LINE NUMBERS dude! "Write lots of code" This is solid advice, but when you're
324.
by brl 18y ago
Crossing a picket line is not the right way to take a principled stand against unions. If you don't like unions, then don't take a job in a union shop. I'm surprised that nobody else has mentioned the social consequences of the decision yo
325.
by brl 18y ago
"For anyone who hasn't been paying attention to the software industry lately, I have some bad news. The open-source business model is broken." Yes, if you haven't heard that open source as a business strategy is broken, it's because you are
326.
by brl 18y ago
Wow, thanks for posting those links! I read the first two chapters of the book and I must say that Chaitin is a brilliantly lucid and entertaining writer. I am pretty much mathematically illiterate but I am still enjoying his book immensel
327.
by brl 18y ago
Recovering overwritten data from a modern hard drive is impossible. Even Peter Gutmann himself admits that in the paper that everybody cites but nobody reads. Fill your disk with zeros (just once) and you're good to go.
328.
by brl 18y ago
Can you really compile Clojure into .class files? I was wondering that the other day, and the conclusion that I reached was that it doesn't work that way.
329.
by brl 18y ago
ICanHasCheezburger.com is a VC backed startup?
330.
by brl 18y ago
Put up? Fyodor described exactly how the attacks work (attacks which have been widely known for a very long time). The only thing he didn't mention here is that you can abuse selective acknowledgement to make one variation of the attack e

More ›