csandreasen

9 ms·

31.
by csandreasen 11y ago
Dual_EC was the default PRNG for the RSA BSAFE library. The only actual numbers I've seen regarding how popular the library was this researcher's findings[1] in which he did a scan of 21.8 million IP addresses and managed to find
32.
by csandreasen 11y ago
Alternately, it could just be that Certicom saw a means to profit off of an emerging standard by modifying it to support key escrow. It's not like key escrow in general was something that no had thought of before in 2005. If this was
33.
by csandreasen 11y ago
I think that this is overall a good paper, but I have one major issue with it. They quote from a presentation given by Richard George from the NSA twice in this paper. I had seen that presentation before, and in it he speaks to why the algo
34.
by csandreasen 11y ago
If you consider drone strikes to be indiscriminate, compare the upper bound of about 6,000[1] or so drone strike casualties over more than a decade to the 90,000[2] or so Vietnam bombing casualties, which in turn is dwarfed by the World War
35.
Thoughts on Encryption and Going Dark: The Debate on the Merits(lawfareblog.com)
2 points by csandreasen 11y ago|0 comments
36.
United States Courts Wiretap Report 2014(uscourts.gov)
1 points by csandreasen 11y ago|0 comments
37.
by csandreasen 11y ago
I'd like to think that discussions on HN ought to be a little more rigorous than dropping unexplained links to a pre-FISA purely domestic FBI program from half a century ago when discussing today's interactions between the CIA, Ge
38.
by csandreasen 11y ago
> How do you know it? The burden of proof rests on the person alleging it happened, not the person saying there is no evidence. You're asking me to concede that something must have happened in secret unless I can prove a negative.
39.
by csandreasen 11y ago
Reading through that paper, it seems pretty clear that the author is discussing the rights of foreigners inside the US. The idea that the US should be upholding US constitutional rights for non-US citizens residing in another country'
40.
by csandreasen 11y ago
How so? Der Spiegel didn't even know they were being spied on (that is, assuming they were). No one stepped in to prosecute them, no one threatened them, and no one interfered with their ability to publish any story. If anything, th
41.
by csandreasen 11y ago
A couple of things... 1) The first half of the headline reads "An Attack on Press Freedom". How exactly was freedom of the press attacked? Did the US or German governments stop Der Spiegel from publishing something? Were they b
42.
by csandreasen 11y ago
> A pair of judges ... Do they spend an hour? A whole day? A whole week? All we have to go on is one vague article. The FISC has its own website which happens to answer your question right on the "About" page[1]: The Court sit
43.
by csandreasen 11y ago
> Could you provide a similar list ... I may very well be able to do that, but it wouldn't do anything to disprove the notion that Wikileaks has a pro- Russian, anti-US bias. I see two simple reasons for the lack of Russian coverage
44.
by csandreasen 11y ago
You could accuse him of being a shill if he repeatedly appeared on the BBC solely to advance the policies of the British government. Assange didn't merely appear on RT, he hosted a weekly show on RT entitled "The World Tomorrow wi
45.
by csandreasen 11y ago
After surfing around https://wikileaks.org/wiki/Category:Countries for a minute or two: - Category:Russia - 57 pages total - Cyprus - 54 pages - Latvia - 50 pages - Lithuania - 47 pages - Estonia - 46 pages
46.
by csandreasen 11y ago
I'll provide a quick TL;DR as the paper is somewhat lengthy but I think the message is worth discussing: Much of what privacy advocates focus on in terms of privacy violations on the internet neglect to take into account privacy gains
47.
The privacy paradox: The privacy benefits of privacy threats [pdf](brookings.edu)
15 points by csandreasen 11y ago|5 comments
48.
by csandreasen 11y ago
All of what you just provided are examples of methodology. What GabrielF00 was referencing is something like "Prime Minister Alice contacted Secretary Bob and discussed their recent dealings with President Carol." This is differ
49.
by csandreasen 11y ago
That's nothing new - the Electrospaces site has called into question the claims of Snowden and Greenwald on numerous occasions. For example: - Snowden would not have been able to legally "wiretap anybody": http://
50.
by csandreasen 11y ago
I know I'm late to the conversation, but Bruce Schneier posted an update on the Lawfare website: http://www.lawfareblog.com/do-russians-and-chinese-have-snow...
51.
by csandreasen 11y ago
> Perhaps you could go further and tease out why... I suggested it for much more mundane than you suggested: Google is likely to have valuable political, economic and political information because politicians, businessmen and service mem
52.
by csandreasen 11y ago
> You being in the role and expertise that you are... I didn't mean to imply that I have any inside knowledge of the hack - I'm basing my views on this from what I've read in news outlets. I doubt I have any more knowledg
53.
by csandreasen 11y ago
I think the point you're trying to make is that this database of accounts under FBI surveillance is such a juicy target that it enticed China to go after Google. If the database didn't exist China wouldn't have had a reason
54.
by csandreasen 11y ago
There are a few federal cases that say otherwise. In US v. Kirschner[1], it was ruled that forcing the defendant to reveal his password through a grand jury subpoena was a violation of his 5th Amendment rights. The prosecution used a loopho
55.
by csandreasen 11y ago
Eventually her husband provided the cops with the correct password[1]. The 5th Amendment prevents you from providing testimony that would incriminate yourself. In this case, though, she was being compelled to decrypt the laptop to produce
56.
by csandreasen 11y ago
Jesus Christ - way to bury the lead. The headline reads 'prevent encryption above all else', but three paragraphs in: "But Steinbach's testimony also suggests he meant that companies shouldn't put their customers&
57.
by csandreasen 11y ago
Those UX elements are actually part of the OS and appear in every app. The triangle is "back", the circle is "home" (essentially the same thing as the circle button on iOS), and the square button opens the list of recen
58.
by csandreasen 11y ago
The US spends $454B on welfare programs[1], but has a population of 321M. If you scrapped the existing welfare program in favor of BI, you'd be able to give everyone only $117 per month. You can make adjustments for things like childr
59.
by csandreasen 11y ago
> At which point it doesn't matter whether you know an intrusion has occurred, you have to treat it as though it had... Which gets you into benefits/trade-offs territory; I think it's probably an overreaction for NASA to t
60.
by csandreasen 11y ago
> The sensible first response when you find a vulnerability is take a snapshot of the existing system ... without having to disable the production systems. Which would involve taking the system down to conduct the snapshot. What gets pu

More ›