ctz

21 ms·

181.
by ctz 11y ago
SGX is a major point and one I thought the linked post would deal with from its title. For a user-owner point of view, I agree with your assessment of SGX. I imagine that, once it becomes used for things like media DRM and games copy prote
182.
by ctz 11y ago
TrustZone is just another processor mode and associated memory protection, nothing more, nothing less. It's equally as incoherent to say supervisor mode and the MMU is 'DRM-oriented'.
183.
by ctz 11y ago
Yes. Even worse, because their are elliptic curve methods for factorising products of primes (Lenstra's ECM), there will be a knock-on effect on RSA. RSA keys will now need to be 131,072-bits to maintain their current level of securit
184.
by ctz 11y ago
The thing you're talking about ("secure enclave") is not present in the phone the FBI are trying to attack. Also, the Secure Enclave co-processor is on-die, so there will be no need to authenticate or encrypt communications w
185.
by ctz 11y ago
Personally I just bought a figure 8 cable for a pound.
186.
Proposed limited exception to SHA-1 issuance(groups.google.com)
2 points by ctz 11y ago|0 comments
187.
by ctz 11y ago
I don't think it's a strategic question like that. It's more simple: Mobile World Congress starts tomorrow. It's the default venue to launch new devices (assuming you're not Apple or Google).
188.
by ctz 11y ago
People need to read this. There are many things to take into account when choosing a CA to use for your site. But security, jurisdiction and any history of mis-issuance are not relevant to you; only reliers. And no relier has any choice i
189.
Too many people have peed in the pool(stephenfry.com)
694 points by ctz 11y ago|511 comments
190.
by ctz 11y ago
"CRC32 value of the SubFile's real data. Used to verify decryption and decompression." Nope.
191.
by ctz 11y ago
> Answer: none, they are equivalent as far as semantics go. The C function does not have any defined semantics for certain values of a and b. The Common Lisp function merely adds two integers (or runs out of memory trying).
192.
by ctz 11y ago
Here's a use case where protobuf is terrible because it isn't self-describing: write a wireshark plugin which parses and pretty-prints protobuf messages for human consumption. You can't, because such a plugin would have to ha
193.
by ctz 11y ago
This is a pretty black-and-white view of things. A security technology does not need to solve all problems simultaneously to be of use. (But, you do need to do thorough analysis and be cognisant of the risks.) Ignoring the cloud computing
194.
by ctz 11y ago
The SDK documentation does, almost, tell you: > The signing tool supports a single-step signing process, which requires > the access to the signing key pair on the local build system. However, > there is a requirement that
195.
by ctz 11y ago
"chain of digital signatures" was referring to the method of assigning value between owners via transactions (s2). That's not the blockchain, nor was it a new concept -- see bmoney, Wei Dai, 1998. They described the blockcha
196.
Using SGX to harden password hashing(jbp.io)
6 points by ctz 11y ago|0 comments
197.
by ctz 11y ago
Yes. Probing at 14nm is immensely challenge but seemingly possible (see, eg, http://dcgsystems.com/products/nanoprobing/nprober-ii/ which looks terribly expensive!)
198.
by ctz 11y ago
Has there actually been a statement that python 4 will be backwards compatible to python 3?
199.
by ctz 11y ago
This kind of magical innovation takes time!
200.
by ctz 11y ago
https://en.wikipedia.org/wiki/Joule_heating#Microscopic_desc... Basically, physical movement of electrons involved in the current flow is hindered by other electrons.
201.
by ctz 11y ago
Current contactless payments are limited to transactions of £30 or less. That rules it out for 99% of fuel transactions.
202.
by ctz 11y ago
I recently learned this first hand. Even more confusingly, your account is not attached to your country of payment but instead done by geoip, so travelling will mean you likely can't continue to watch the same series. This is a major
203.
by ctz 11y ago
I think it's extremely, vanishingly unlikely that the code contains a line like this: if (strcmp(login_password, "<<< %s(un='%s') = %u") == 0) ... This feels much more like a "reflections on tr
204.
Proactive measures in digital certificate security(googleonlinesecurity.blogspot.com)
39 points by ctz 11y ago|6 comments
205.
by ctz 11y ago
So you'll display a challenge on your website issued to someone else. This certifies an attacker's key for your domain. An authentic connection to LE is literally fundamental.
206.
by ctz 11y ago
I think the parent is saying that pointers need storage too and this can add up, not that sizeof expressions are computationally difficult :)
207.
by ctz 11y ago
> the imitation leaves out the ground connection Genuine Apple adaptors come with plugs with plastic earth pins. You can feel the tingle from leakage current with such plugs.
208.
Abusing U2F to 'store' keys(jbp.io)
2 points by ctz 11y ago|0 comments
209.
by ctz 11y ago
Here's a test website from Kenn White: https://bogus.lessonslearned.org/
210.
by ctz 11y ago
Site is not responding. "The Realities of serving static HTML with Wordpress"? (I'm assuming its wordpress and a static blog at this point.)

More ›