bsza

24 ms·

301.
by bsza 6y ago
If my understanding is correct, unless you are a journalist, you're basically saying "this comment is not worth paying attention to", which feels paradoxical to me.
302.
by bsza 6y ago
> It's like saying that a non-machine-checkable mathematical proof is not a proof - something few working mathematicians would agree with. Only because we're not ready for that yet. Given the current technology (Coq, Agda, Miza
303.
by bsza 6y ago
oe3d dev here. I stopped because - the code became unmaintainable - apparently no one was using it for making origami (unintuitive UI?) - I found more interesting things to do (including my day job) It was a fun project but I don't w
304.
Show HN: 3D printable cryptocurrency wallet generator(github.com)
3 points by bsza 6y ago|0 comments
305.
by bsza 6y ago
So it does have position tracking. I guess it uses an external camera directed at you - of course that will be far from perfect, especially if you only have one. But it has potential. With more cameras and an improved model, it could poss
306.
by bsza 6y ago
> Even if tracking was working perfectly, this would be a cut down version of an Oculus Go Oculus Go doesn't have position tracking. I don't know what you're talking about.
307.
by bsza 6y ago
From the News section: "We plan to roll out our technology in disused mine shafts worldwide."
308.
by bsza 6y ago
> Booleans, Turing Machines, Bolzmann machines, Markov Chains As someone with a degree in pure math, I can tell you, we had Turing machines, Boolean networks and Markov chains coming out of our ears. These are not programming concepts; a
309.
by bsza 6y ago
Who is "we"? Both Shor and Jozsa are mathematicians and Deutsch is a physicist.
310.
by bsza 6y ago
What about it? It is just pure luck that Larry Page happens to have the perfect name for the algorithm named after him. Doesn't happen to everyone.
311.
by bsza 6y ago
People's names can be confused too. A few weeks ago I referred to the Legendre symbol as "Lagrange symbol" by mistake when talking to a colleague. Such things are inevitable however you name things; some words happen to have
312.
by bsza 6y ago
These are names for products though, not programming concepts. A more accurate analogy would be calling a class a Kay template or calling a for loop a Lovelace construct. And it's great that we don't do that.
313.
by bsza 6y ago
Seems there isn't https://fas.org/sgp/crs/misc/RL31253.pdf
314.
by bsza 6y ago
In the UK, more than 2500 times in one year, according to this article: https://www.theguardian.com/uk-news/2018/nov/11/super-recogn...
315.
by bsza 6y ago
But you have already committed a crime by skimming a credit card and stealing a PIN. Why not go all the way then? Is it somehow riskier to interact with an ATM than to install a skimmer on it?
316.
by bsza 6y ago
Actually, there is a cryptocurrency for that: https://www.usenix.org/system/files/conference/woot16/woot16... It uses the outputs of the key exchanges as proof that the attack was carried out. I doubt an
317.
by bsza 6y ago
By the same logic, I would like to see every senator's crotch streamed live 24/7 please. Just to make sure there are no child abusers among them. Why stop at Senate, do the same to every law enforcement officer as well please. I&#
318.
by bsza 6y ago
Had similar experiences in Hungary. Cursive style enforced throughout grades 1-4, with a strictly defined stroke order for each letter. Even for numbers. The bottom stroke in 2 is crooked, as well as the top stroke in 7, and God forbid you
319.
by bsza 7y ago
Glad I could get you a bit more interested in this kind of approach. Your summary makes sense to me, though admittedly it is damn hard to reason about the security of these things correctly. Getting the client to do the hard work really is
320.
by bsza 7y ago
If I had a keylogger or other spyware, even my password manager's master password wouldn't be safe, so that line of reasoning still doesn't sound convincing to me. :) Only 2FA could prevent that, and I don't mind using 2
321.
by bsza 7y ago
Compromised where elsewhere? I control my password, so I know exactly where it goes and doesn't go. And the only place it ever goes is the little green box in my zero knowledge password extension (or native app if you prefer). I, as th
322.
by bsza 7y ago
"The user will still be entering in their password into a form-field on the client." You are looking at this problem based on what practices we currently have in place. Entering a password into an HTML form is NOT SECURE, period.
323.
by bsza 7y ago
I mean, leaking an SRP verifier into the logs is analogous to leaking a salted password hash. (Same story if a client key is leaked, since replay attacks are not possible.) That is still 1000x better than a plaintext password leak. Which ha
324.
by bsza 7y ago
Small correction: an attacker needs a password verifier AND the server private key to brute-force an SRP password. Also, I think it's great that there are no known attacks other than brute force - even if it took several iterations to
325.
by bsza 7y ago
I don't think encryption being reversible is anything to be laughed at. This leads to a lot of other caveats. For example, the length of the plaintext is in correlation with the length of the ciphertext. From this, an attacker could po
326.
by bsza 7y ago
That's... not reassuring. Though I would still argue that that is more of an implementation issue, not a deal-breaker for the general idea. And there are many KDF variants that (claim to) offer protection against brute force, so that&#
327.
by bsza 7y ago
At which point, I guess, the key has to be either short enough that you can remember it, or stored on a portable device.
328.
by bsza 7y ago
It is an improvement, for sure. And probably good enough for the average user. On the other hand, if convenience is important, then I see no obvious difference between an online password manager and the OP's solution. In both cases, th
329.
by bsza 7y ago
"we've built the entire internet and banking systems around it" Yes, but in those scenarios we use keys that are truly random. Deriving a symmetric key from a password and encrypting another password with it is simply never g
330.
by bsza 7y ago
Encrypted communication relies on keys generated by computers. They have significantly more bits of entropy than a master password produced by a human.

More ›