brohee

85 ms·

931.
by brohee 13y ago
Extremely bad and practical : http://cr.yp.to/antiforgery/cachetiming-20050414.pdf
932.
by brohee 13y ago
Some Chinese play on the world server but it's actually more or less illegal (wrt Chinese law) for them to do so... Some years ago there was also an hilarious "invasion" of the Chinese servers by euro/US people, with pat
933.
by brohee 13y ago
SHA_Update is for the SHA-0 hash, and SHA1_Update is for the SHA-1 hash, so it's hardly completely illogical. The main issue here, is that people that don't know the difference between SHA-0 and SHA-1 should likely not be in charg
934.
by brohee 13y ago
Historically GnuTLS had even more security trouble than OpenSSL (like that bug where it was trusting a self signed root certificate even if not in the certificate store that went undetected for years). And NSS is pretty light on the server
935.
by brohee 13y ago
OpenSSH is in Kernel Normal Form ( http://www.openbsd.org/cgi-bin/man.cgi?query=style&section=9 ) which doesn't have any qualms about it. Specifically it says : "When declaring variables in functions, decla
936.
by brohee 13y ago
You'd think that someone on this site would know patent haven't worked like that for a while...
937.
by brohee 13y ago
"computer tech is only 30 year old"
938.
by brohee 13y ago
My father was programming before you were born... Working in a bank, not for an editor...
939.
by brohee 13y ago
Not in a flawed PRNG was used. Lets not forget we talk custom wallet implementation here...
940.
by brohee 13y ago
> If they lost the keys(as in, lost the wallet.dat with the keys in it) and were able to generate a valid private key given only a public bitcoin address... bitcoin is dead, game over, pack it up. This is a realistic scenario. If the pri
941.
by brohee 13y ago
http://en.wikipedia.org/wiki/2002_Karachi_bus_bombing could qualify (a bit short of the 20 casualties, but not for lack of trying).
942.
by brohee 13y ago
Does he seriously assume that the cabin pressure is not monitored?
943.
by brohee 13y ago
Newsweek is very akin to someone's blog nowadays. Nothing justifies taking it as a reliable source of news...
944.
by brohee 13y ago
It's not journalism when everything hints at the wrong person being doxxed http://www.reddit.com/r/Bitcoin/comments/1zpmo8/the_face_beh... He now likely has ground to sue Newsweek, sadly I'm af
945.
by brohee 13y ago
Do you realize there is not the beginning of a proof he's the original author of bitcoin? Being good at science doesn't count.
946.
by brohee 13y ago
The main issue here is that Newsweek is not a newspaper anymore. It was sold for a pitance to a small Internet only publisher named IBT media ans is now a glorified blog. A recent article on France showed that fact checking wasn't part
947.
by brohee 13y ago
The issue is that they designed a API taking a NUL terminated string in the first place, as it should have been something more generic. They knew little enough of X.509 they didn't bother to handle every cases. My understanding of RFC
948.
by brohee 13y ago
> In an efficient market without monopolies there's no such thing as rent seeking Seriously, read Zombie Economics ( http://press.princeton.edu/titles/9270.html )
949.
by brohee 13y ago
Nope, that's what an "under convention" GP gets for a visit (there is an issue with that number not having followed inflation in a long time). The patient will pay very little of it, nothing if completely covered (CMU). Docto
950.
by brohee 13y ago
Complete with completely wrong geolocation...
951.
by brohee 13y ago
The PR damage control team is pulling extra hours, I just got an atrazine advert reading another unrelated New Yorker article. And certainly nothing would indicate I would be interested in any agricultural product...
952.
by brohee 13y ago
Sorry need an app : https://play.google.com/store/apps/details?id=org.nick.crypt... Discussion about the issue : https://code.google.com/p/android/issues/detail?id=29468
953.
by brohee 13y ago
Not true anymore. Device encryption can differ from lock screen nowadays. But speaking of lock screen, people have built robot to brute force it, so shutting down after a few failures is definitely a good idea.
954.
by brohee 13y ago
About as reasonable as Kaczynski's Manifesto.
955.
by brohee 13y ago
http://en.wikipedia.org/wiki/Georg_Paul_Thomann Henning's humor isn't THAT inaccessible...
956.
by brohee 13y ago
Dropbear, seen for example in OpenWRT. Not that it's nearly as feature full as OpenSSH, nor as architected around security (process separation and all). But it's nice when you need a small sshd.
957.
by brohee 13y ago
What kind of "why" do you expect? There is a pretty large collection of computers, network equipment, UPS and HVAC stuff. You want a machine per machine watt usage? 8 year old image of one of the racks, is only grew since... http
958.
by brohee 13y ago
Is it telling that in his review of Black Swann he's seriously citing Malcolm Gadwell of all people?
959.
by brohee 13y ago
A lot less secure if not using full disk encryption.
960.
by brohee 13y ago
There is likely no point anymore, pretty much everyone agrees about that. But how do you transition to a new system in a fair manner?

More ›