contrarian_

18 ms·

61.
by contrarian_ 9y ago
> In some cases though that is not possible, because at that timescale the signal they're after is degraded by noise that they cannot predict or control: operating system interrupts, memory traffic from other threads, etc. Wrong, th
62.
by contrarian_ 9y ago
So the vulnerability likely isn't something nobody thought of, it's just that nobody seriously expected the CPU vendors to make the mistake of speculating across multiple loads and actually leaving observable modifications in the
63.
by contrarian_ 9y ago
Sounds like servers handling lots of small UDP packets would be hit pretty hard.
64.
by contrarian_ 9y ago
> Ripple Centralized.
65.
by contrarian_ 9y ago
Perhaps an interaction with conditional branches and cache timing? You could then extract individual bits from privileged memory by having the CPU pull in specific cache lines as part of a speculatively executed branch on the value of the b
66.
by contrarian_ 9y ago
Yeah, except for that 30% of your revenue vanishing.
67.
by contrarian_ 9y ago
Qt solves almost the same problems as a browser, all it's missing is sandboxing and fetching resources over the network.
68.
by contrarian_ 9y ago
> but equally it could be a WebGL-based UI Then you might as well ship a native binary. Beyond cross-compilation and window system bindings, there aren't many more portability concerns. But then you're rebuilding the browser, s
69.
by contrarian_ 9y ago
Can't use those with HBCI. Also, I really wouldn't want my Android phone to serve as a single factor authentication method.
70.
by contrarian_ 9y ago
I'm using ING DiBa in Germany and they lack a secure 2fa method. There are only two options available: - SMS-TAN, which is vulnerable to SS7 hijacking and name spoofing. - Index-TAN, aka the enumerated paper slip, which is only "p
71.
by contrarian_ 9y ago
On the contrary, I've gone back to plain C for most projects and it's been a real relief after using C++11/14 extensively. So much accidental complexity just disappears. The compile times are much better, too. Can't wa