colmmacc

21 ms·

241.
by colmmacc 7y ago
Speculative execution optimizations, e.g. branch prediction, are even data dependent. It's a very complex measurement space!
242.
by colmmacc 7y ago
There's another reason too; there are strong reasons why the timing of successive code executions should not be linear. Typically the first call to a function will incur the cost of fetching data into a cache. At minimum the basic bloc
243.
by colmmacc 7y ago
Skywalker's island was shot at Skellig Michael - https://en.wikipedia.org/wiki/Skellig_Michael - an island off the southwest coast of Ireland. The stone huts on the Ireland are the ancient homes of monks.
244.
by colmmacc 7y ago
How do these DoH partnerships work with DNS split views? If folks are running an internal copy of "something.company.com" and it's expected to resolve to RFC3330 space "on the company network" ... that depends on fo
245.
by colmmacc 7y ago
I've contributed to unbound, and I wrote a lot of the DNS server that we use at Amazon. The main security risk in DNS is DDOS; it's by far the biggest concern and day to day pain, and a big part of a strategy for dealing with it h
246.
by colmmacc 7y ago
Yes! we do recursive, nested, shuffle sharding in these cases. Our Open Source infima library doesn't quite include direct support for this, but you can get a sense of how we put it all together: https://github.com/aw
247.
by colmmacc 7y ago
constant max rate tends not to be practical in remote roaming VPNs for cost and contention reasons. It would blast through typical mobile usage rates, for example, or get you throttled on a shared wifi network.
248.
by colmmacc 7y ago
Best practice for preventing traffic analysis is to send encrypted messages of a constant size, at a constant rate. It's better to pad to a max size, than to randomize the packet length. Sending at a constant rate may not always be fea
249.
by colmmacc 7y ago
Applications are the real "end" in end to end, and TLS is already e2e. Good TLS does thwart this attack; an attacker still can't generate a valid certificate. It's taken a lot of focus and attention to make TLS reliable
250.
by colmmacc 7y ago
Disclaimer: I work at AWS, on Amazon Linux and our VPN products; those aren't impacted by this issue. The attack that the researchers describe is very impressive, and using traffic analysis and error messages to find the details of an
251.
by colmmacc 7y ago
Disclaimer: I work at AWS, on Amazon Linux and our VPN products; those aren't impacted by this issue. The attack that the researchers describe is very impressive, and using traffic analysis and error messages to find the details of an
252.
by colmmacc 7y ago
Originator/Maintainer of NeverSSL here. AMA. Funnily enough, I'm on a plane to Fresno right now, and I used it to get online. FAQ: 1. Why does neverssl.com use Javascript to redirect to a random subdomain? Over the last year users
253.
by colmmacc 7y ago
Even for the bits you send, although TLS1.3 includes support for record padding, it's not mandatory. In practice, both Content-Length finger-printing attacks and traffic analysis attacks work against TLS1.3.
254.
by colmmacc 7y ago
This paper is misleading IMO. The abstract says - "On the positive side, we prove that TLS 1.3 protects the privacy of its users at least against passive adversaries, contrary to TLS 1.2, and against more powerful ones." But if yo
255.
by colmmacc 7y ago
I like the idea of full income and tax transparency for the reasons you mention, but worry that some of the negative consequences can be long-lived and very hard to tackle. For modest earners, their public income can become a kind of super
256.
by colmmacc 7y ago
NLB is built on top of AWS HyperPlane, a hybrid system that has components distributed in our Nitro security system, and pseudo-central components that keep flow-tracking state. It's different from IPVS.
257.
by colmmacc 7y ago
Google are stating that the lyrics to the Star Spangled Banner are owned by Concord Music Publishing and are somehow derivative of the Super Bowl. That's just plain false, absolute misinformation. It is obvious in this case that the in
258.
by colmmacc 7y ago
I think Google are being deceptive here too. I find a lot of lyrics on Google that are mis-attributed and seem very unlikely to be correctly licensed. The best example is that Google claim that the copyright to the Star Spangled Banner, the
259.
by colmmacc 7y ago
128-bits of random data is sufficient to securely generate a stream of 100s of terabytes of random data. It's not /that/ hard to find 128-bits of true entropy, even during boot phase. Here's one example: 1. Seed wi
260.
by colmmacc 7y ago
I've monitored elections in Ireland and the Netherlands which both have an interesting problem. They each use Proportional Representation and ranked voting. Voters filling in their ballots mark each candidate with a number indicating t
261.
by colmmacc 7y ago
Of course it would work. A real world "attack" is more like a regressively patriarchal household where everyone "votes" at the dinner table. Yes, an 18 year old around that table could later make their way to a ballot st
262.
by colmmacc 7y ago
Australia has this and it gets turnout rates in the 90%+ range. In 2015, Obama threw out that maybe it was time for mandatory voting in the US: https://www.cnn.com/2015/03/19/politics/obama-mandatory-vo
263.
by colmmacc 7y ago
Committing identity fraud in person, in locations likely to have an elevated police presence, is extremely risky and getting caught carries severe consequences.
264.
by colmmacc 7y ago
This is true of all remote voting. The all-postal ballots in Washington and Oregon are certainly subject to this, and there is a certain rate of voter coercion that goes undetected, particularly within households. For the proponents of all-
265.
by colmmacc 8y ago
Yes :) Well, technically they need a different plaintext too.
266.
by colmmacc 8y ago
Nonces don't need to be secret. You can just use a counter value if you want, unencrypted. It gets harder when you have many uncoordinated senders. You can shard your nonce-space; give each sender a unique prefix, but this reduces the
267.
by colmmacc 8y ago
The later iterations of Poly1305 removed the need for AES by using a synthetic Salsa20 derived key that is unique per key-nonce input pair.
268.
by colmmacc 8y ago
A naked GHASH is not a secure MAC; the key can be reverse engineered from the value. So it's encrypted to make the tag.
269.
by colmmacc 8y ago
Here's a TLDR in case you're curious: AES-GCM is an API that takes 4 inputs. AES-GCM(key, nonce, additional_data, plaintext). The nonce is also called an initialization vector (IV). The key and nonce/IV are used to encrypt t
270.
by colmmacc 8y ago
Just because Planck times are the smallest possible measurement of time intervals doesn't mean that time progresses in discrete Planck time chunks. That's obvious enough, but maybe seems unmeasurable ... and so what difference doe

More ›