brohee

61 ms·

751.
by brohee 11y ago
It's worth mentioning it on the homepage, it looks very scary without it.
752.
by brohee 11y ago
Is it really using CFB mode without any kind of authentication? If so, mostly useless...
753.
by brohee 11y ago
It's prose. When you say someone is of average height, you usually mean within a standard deviation of average, not that the person is exactly the locale appropriate average height... At best that sentence is very poorly worded, at wor
754.
by brohee 11y ago
Because it's stupidly wrong. He misses the possibility for average people to have high IQ children. The sentence parses as : 14% high IQ children are from lower IQ couples, 0% are from average IQ couple, 86% are from high IQ couple...
755.
by brohee 11y ago
In Coming Apart, Charles Murray estimates that there will always be 14 per cent of children in the top 5 per cent of the IQ distribution curve who are the offspring of parents with below-average IQs. Admittedly, that’s not much when you co
756.
by brohee 11y ago
The "ff" thing kinda looks like an attempt at ligatures gone horribly wrong on the web, but possibly OK in print.
757.
by brohee 11y ago
I guess you should follow that Crypto StackExchange question. http://crypto.stackexchange.com/questions/29695/what-is-a-fr...
758.
by brohee 11y ago
What makes a convicted murderer doesn't always implies killing anyone, as in the case of the burglars charged and condemned for murder after the death of their accomplice, killed by a homeowner... Numbers on "murderers" who d
759.
by brohee 11y ago
If you feel "Les Espaces d'Abraxas" is oddly familiar, it's because you've seen it before. It's one of the set of the Terry Gilliam movie Brazil ... If you don't mind the French, http://www.lemo
760.
by brohee 11y ago
Someone actively avoiding the NIST curves might use them, but it looks more and more like chosing between Scylla and Charybdis.
761.
by brohee 11y ago
If anyone wonders about the potential practical impact of the subversion of the Brainpool curves, it's pretty bad, as the curves have been standardized for use in TLS by RFC 7027. Any other standard using Brainpool curves?
762.
by brohee 11y ago
Banks aren't subject to company wide PCI DSS audits. Which makes sense as you don't usually input your credit card number anywhere...
763.
by brohee 11y ago
Plenty, PBKDF2 is ASIC friendly and not memory hard, things addressed by better schemes...
764.
by brohee 11y ago
> Are there any gender neutral pro sports leagues? Horse riding definitely neutral, so are motorsports. Possibly others skill based without speed/strength element.
765.
by brohee 11y ago
I don't see how signed firmware solves that issue at all. It could solve BadUSB, where one corrupts a legitimate device with poisoned firmware, but it doesn't address at all a user tricked into plugging a bad device...
766.
by brohee 11y ago
You input your password, it the attacker knows that, you are likely toast anyway...
767.
by brohee 11y ago
Ever ran with a machine gun? The fact the women seem to have done as well as men wrt hit probability using the M4 but not the heavier weapons, really point to physical limitations and not lack of skills. The casualty evacuation issue is als
768.
by brohee 11y ago
http://www.bbc.com/news/world-latin-america-20315415 > Raphael Martinez of Belize's Ministry of National Security said no charges had been filed in the case and Mr McAfee was simply "a person of interest&q
769.
by brohee 11y ago
He was only ever a "person of interest", if they had anything material against him he'd have been officially suspect likely. And there are various citations of unnamed Belize officials, stating that he's no longer even a
770.
by brohee 11y ago
AFAIK he was never really under suspicion. But being possibly paranoid he thought he was, and he didn't trust Belize justice system (and is possibly right about that).
771.
by brohee 11y ago
By proving control of the domain, there is a link between the certificate and the person asking for it thru the registrar. And thru the payment information to the registrar, you can usually get to someone. It's a tenuous link, but a lo
772.
by brohee 11y ago
They would have gotten a valid certificate that couldn't be tied in anyway to their identity. Coupled with e.g. a XSS vuln on a secured website, you could serve a nasty browser exploiting payload from a secure site, without any warning
773.
by brohee 11y ago
That statement will totally prevent bad guys from using the trusted cert to scam...
774.
by brohee 11y ago
What? Revoking expired certificate is not required, and would be a completely useless thing to do, bloating CRLs for no gain whatsoever.
775.
by brohee 11y ago
sslabuse@comodo.com it is 4.9.2 Who can Request Revocation A Subscriber or another appropriately authorized party can request revocation of a Certificate. An authorized party includes an RA, regardless of whether on behalf of the Subscriber
776.
by brohee 11y ago
COMODO policy is compliant, they just didn't act on it yet https://www.comodo.com/repository/Comodo_CA_CPS_4.1.4.pdf 4.9.1 Circumstances for Revocation Comodo may revoke a digital Certificate if any of the followi
777.
by brohee 11y ago
That it's nor revoked yet doesn't reflect well on COMODO at all, not that it's the first thing that doesn't...
778.
by brohee 11y ago
Someone that intercepts the traffic act as a proxy and will just PFS with the client and the server. Confidentiality should be ensured by PFS if the attacker is only sniffing. But so many scenarios where even an unsophisticaded attacker can
779.
by brohee 11y ago
Writable exclusive OR eXecutable policy, applied to memory pages it makes memory safety bugs a lot harder to exploit, as an attacker can't simply load an executable payload (typically, shellcode) in the address space of the exploited p
780.
by brohee 11y ago
Given that it's now clear that seldom any real woman used the site, it's more likely than Greenwald was taken for a ride by Ashley Madison marketing dept. Not what I want from a journalist...

More ›