brohee

12 ms·

181.
by brohee 3y ago
Synfuel for now is super expensive, the one use case that makes sense that I have seen is an aircraft carrier making jet fuel from nuclear fuel.
182.
by brohee 3y ago
If you dismiss hydrogen as fuel made from renewable electricity, and frankly you should on density and safety basis, the two most practical options are methane and ammonia. Ammonia got an easy electrity to fuel process, easier than methane
183.
by brohee 3y ago
That's a very optimistic assumption, the target is 50Hz but if it is below or over for a long period of time (e.g. high load in winter making it hard to sustain the nominal frequency) there are no provision to make it run faster or slo
184.
by brohee 3y ago
Cryptography Research patented quite a few DPA/SPA countermeasures, if there is a non obvious patent on Curve448 it will likely be one of those making it hard to make a non infringing, fast yet not vulnerable HW implementation... Given
185.
by brohee 3y ago
No, Curve448 is as good as can be per the public knowledge, see https://safecurves.cr.yp.to/ . What one could expect given Rambus history is undisclosed patents, possibly the most efficient hardware implementation. They have
186.
by brohee 3y ago
Rambus was pretty well known for using a submarine patent against RAM manufacturers back in late nineties https://www.edn.com/submarine-patents-could-torpedo-rambus/ followed by fifteen years of acting like a patent tr
187.
by brohee 3y ago
Or you find it somewhat credible but still use them because fending off the NSA is not something you want to spend energy on, and you are confident in the fact that NSA think no one else can find the backdoor.
188.
by brohee 3y ago
Writing this article without mentioning AirBnB is quite the exercise in avoiding talking about root causes.
189.
by brohee 3y ago
My understanding is that one patent is still covering it for a few months : https://patents.google.com/patent/US7949129B2/
190.
by brohee 3y ago
Kinda agree but Mathlib and its documentation makes for a big corpus to learn by example from. Not ideal but it helps. https://github.com/leanprover-community/mathlib
191.
by brohee 3y ago
There is something, sadly likely illegal in most of the world, that would help: a blacklist of clout chasing fake security researchers, widely shared by people in position of offering an interesting job, or any job really. Permitting to fil
192.
by brohee 3y ago
Oh... So that's how you end up with class names ending in FactoryFactory... Factorisation at any cost without making sure it makes sense and will keep making sense...
193.
by brohee 3y ago
Let's Encrypt isn't exactly hiding that it's only practical in the context of automation From their FAQ ( https://letsencrypt.org/docs/faq/ ): What is the lifetime for Let’s Encrypt certificates? For
194.
by brohee 3y ago
You seem to operate under the assumption that certificate revocation does anything on the web. In practice it is only useful in the presence of mandatory OCSP stapling. And mandatory it is not.
195.
by brohee 3y ago
Confidentiality isn't the only thing TLS safeguards. Integrity is a big one too. Some ISPs were injecting ads in all sites, sometime breaking them in the process. TLS put an end to it.
196.
by brohee 3y ago
Stapling works, but is a lot more useful if it is mandatory (which it is not). OCSP as intended in the early 2000s where the client query the CA is a non starter, the hosting cost would be such that not only free certificates would end but
197.
by brohee 3y ago
Obtaining the initial certificate is somewhat vulnerable to MitM if the attacker can divert the verification request to a server under its control. Some countries (including Iran IIRC) went as far as using BGP announces to do that (which ma
198.
by brohee 3y ago
CRL are a failure, OCSP can't scale, so to get some assurance that if the private key was compromised somewhat recently, it's either mandating OCSP stapling or shorter lived certs... Why do you hate the short lifetimes?
199.
by brohee 3y ago
BitLocker is mostly worthless if you don't also password UEFI, disable booting off any other disk than the main one, and enable SecureBoot.
200.
by brohee 3y ago
Yeah I was unclear, it's supposed to address the physical attacks part. If no key leaves the CPU unwrapped, it's down to software exploits and decapping the CPU...
201.
by brohee 3y ago
At least TME-MK and its AMD equivalent are supposed to address in memory key stealing/memory bus snooping (even if it's still unclear to me how the key are generated/stored). There is still decapping and probing the CPU itsel
202.
by brohee 3y ago
Well you will boot the laptop but still have to get past the login screen. Intercepting the key permits to read/write whatever you want on the disk, and thus backdoor the OS (as he does).
203.
by brohee 3y ago
TLDR if you actually want to act upon that : Takeaways The use of a discrete (physical) TPM actually decreases the security of the system, using a fTPM would solve the problem. If the discrete TPM has to be used, then a PIN or passphrase
204.
Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop(errno.fr)
352 points by brohee 3y ago|148 comments
205.
by brohee 3y ago
IMHO something is still missing. Bonin's father was a pilot (in Air France AFAIK) and I can't help but think the likelihood he was the best candidate was low, but that legacy played a part. I also wonder if he had much passion for
206.
by brohee 3y ago
https://en.wikipedia.org/wiki/Nixtamalization is done using limewater and actually vital to sustain life on a maize diet. But it should come with a warning.
207.
by brohee 3y ago
Well he definitely misrepresented the conference taking place during Kippur.
208.
by brohee 3y ago
Too bad the dude is the epitome of an unreliable narrator. Last year's discussion got some interesting links... Most notable: https://old.reddit.com/r/suse/comments/umfyku/the_time_suse_...
209.
by brohee 3y ago
It's alive in some smart TVs too. Pretty sure at least Panasonic runs a fork.
210.
by brohee 3y ago
No need to go full polygamy. After WW II (or the Great Patriotic War), USSR didn't exactly became polygamous but put policies to support single motherhood, that works too. Quoting https://www.reddit.com/r/AskHistor

More ›