ctz

34 ms·

391.
by ctz 13y ago
We had a similar problem with an old internal IRC bot written in TCL. Someone joined the company with the initials 'nan' (which was never equal to 'nan' because NaN != NaN). The bot never worked for them.
392.
by ctz 13y ago
That ciphersuite has the following problems: - DHE: the way ephemeral DL-DH works in TLS is unfortunately misdesigned. The client first offers DHE-* ciphersuites, then the server sends a DL group and public key in that group. The problem
393.
by ctz 13y ago
It's worthless in the face on an active adversary, but it works very well as a countermeasure for passive mass surveillance. I do think it's a dangerous idea, though. The difference between 'secure' and 'insecure&#
394.
by ctz 13y ago
There also might be a 4th running on the application CPU: a TEE OS.
395.
by ctz 13y ago
The main benefit of EC over IF/DL based cryptosystems is that it scales much better as you move to higher security levels. Compare, for instance, the speed of RSA with a 15360-bit modulus and the speed of ECC over NIST-P521. These are
396.
by ctz 13y ago
I don't think Android Bootstrap has anything to do with HTML5. It's a set of themes for native Android apps duplicating the style of Twitter Bootstrap.
397.
by ctz 13y ago
Also, BLE support on most 4.3 devices is just broken . Fitbit's experience: https://help.fitbit.com/customer/portal/articles/987861-andr...
398.
by ctz 13y ago
> Key exchange between people should always require some kind of offline verification. Or a trusted third party (see IBE.)
399.
by ctz 13y ago
It would be really cool if they parsed the issuer from the certificate you provided, and informed your CA that your private key was just compromised if the key matched.
400.
by ctz 13y ago
So leaking my private key to somebody is OK if I do so over HTTPS, and even better if I encrypt it with a javascript crypto library beforehand? I don't think you've thought this through.
401.
by ctz 13y ago
Peltier heat pumps are inefficient; typically wanting a whole bunch of watts for achieving a small temperature gradient. So I'm wondering about the practicalities of powering this thing such that it could be worn as a personal item.
402.
by ctz 13y ago
Avoiding the need for protocol version negotiation might be a useful feature in some systems, but it seems to me that the things you lose makes it really not worth it. Particularly, a protocol without atoms invariably ends up like most JSO
403.
by ctz 13y ago
I'm disappointed there's no comment here from tptacek telling you off for that decidedly dodgy-looking mac-then-encrypt, or the timing side channel in your mac verification. He must be slipping :)
404.
by ctz 13y ago
> Would be great if somebody could post Python/Ruby/.. code here that achieves the same, just to compare. It's actually really hard to completely rewrite that program in most scripting languages: they tend not to have the
405.
by ctz 13y ago
Security of such algorithms now: none. Security of such algorithms now where everyone has a 64-bit device: none. Don't confuse hash functions like these and cryptographic hash functions.
406.
by ctz 13y ago
> Does anyone on HN see ads when they search for [what is bitcoin]? Yes: http://i.imgur.com/2iFv7Yf.png
407.
by ctz 13y ago
I think the grandparent is referencing the fact that Referer headers are not propagated from HTTPS sites to HTTP sites. The rationale was that the HTTPS site might have a secret or otherwise sensitive URL. This is obviously a tremendously
408.
by ctz 13y ago
The amusing thing about sending ciphertexts over twitter compared to english text is that you can actually fit in more information, assuming you do the encryption and ciphertext encoding right. That's because twitter transports 140 uni
409.
by ctz 13y ago
So 10^15 H/s is about 2^50 H/s, or 2^71 H/Y. Assuming you could rededicate the whole network to attacking SHA-1 (which you practically couldn't, the ASICs would need replacing) you could break 2^10 intermediate SHA-1 sig
410.
by ctz 13y ago
'decentralized' yet needs $15000 PA for server hosting?
411.
by ctz 13y ago
ECDSA verification on P-256 is slower than RSA verification with 1024-bit or 2048-bit modulus, but they are thought to achieve such vastly different security levels that comparing them at all for performance is wrong.
412.
by ctz 13y ago
They could be arguing they are protected under database rights, but its probably just plain copyright.
413.
by ctz 13y ago
It's more likely because you can't achieve modern security levels with cryptosystems built on the DLP or IFP at acceptable performance. Suite B aims for 128-bit or 192-bit security levels; for comparison 1024-bit modulus RSA is cu
414.
by ctz 13y ago
Is this another mod-bodged post title?
415.
by ctz 13y ago
We develop organically: first, we get it working; then we get it working right. The approach to writing security software which launched a thousand defcon talks.
416.
Guessing the Android SecureRandom vulnerability(jbp.io)
1 points by ctz 13y ago|0 comments
417.
by ctz 13y ago
I don't think $99 as a price point for a bear with an single DOF animitronic mouth and some dumb control hardware is unreasonable.
418.
by ctz 13y ago
I would say that the root cause is not the multiple implementations of zipfile reading existing, but that the JAR signing is just mis-designed. A significantly simpler, faster, and more secure method would be to sign the whole ZIP file, and
419.
by ctz 13y ago
I'm afraid I think that video just misrepresents how ISO14443A anti-collision works. Most reader devices (like phones, door locks, etc.) will select the tag with the best signal (usually = the closest) and deselect others during the
420.
by ctz 13y ago
I love the idea and design of this; it's beautiful. But using storage-only NFC tags as an authentication token? This is not a good idea.

More ›