cvwright

74 ms·

841.
by cvwright 11y ago
Random Services has some nice online materials. http://www.math.uah.edu/stat/index.html
842.
by cvwright 11y ago
Wait, what? Why does it need to know location? If you want to know what time it is, why not just call localtime()?
843.
by cvwright 11y ago
Wow. It's not every day that Oregon gets to show up WA and CA at the same time. :-)
844.
by cvwright 11y ago
Hacked the CIA, you say? http://xkcd.com/932/
845.
by cvwright 11y ago
Not quite. Confidential is a technical term in the military/IC world. It's a classification, just like secret or top secret. I read somewhere that a lot of the Wikileaks cables were supposedly stuff marked confidential. Storing
846.
by cvwright 11y ago
It shouldn't be any different. In fact there have been court cases in which individuals have been compelled to provide decryption keys for encrypted disks. The difference here is that the government wants vastly more access in the d
847.
by cvwright 11y ago
Reminds me of this quote from John Adams: > I must study politics and war, that our sons may have liberty to study mathematics and philosophy. > > Our sons ought to study mathematics and philosophy, geography, natural history and n
848.
by cvwright 11y ago
And before SRP there was EKE. I thought the main reason it never saw wider use was because it was patented. Although according to Wikipedia, those patents expired in 2011 and 2013.
849.
by cvwright 11y ago
Looks like a "No". It also doesn't instill confidence when somebody talks about "encrypting" passwords rather than hashing them.
850.
by cvwright 11y ago
I agree with the general idea put forth by the article. This is an important issue, and the future could bring a lot of bad things if we (as a society) are not careful. Schneier makes it sound pretty scary. For a general audience, this is
851.
by cvwright 11y ago
These predictions are fun. Is it time for FC 2.0? https://en.wikipedia.org/wiki/Fucked_Company
852.
by cvwright 11y ago
Lavabit got into trouble because they made promises that they were technically unable to keep. Moxie Marlinspike takes them to task here: http://www.thoughtcrime.org/blog/lavabit-critique/
853.
by cvwright 11y ago
Behold the Samsung Anyway Jig: http://forum.xda-developers.com/showthread.php?t=1629359 The link is a few years old. No idea if there is a current version that works on modern phones, but it seems reasonable to assume ther
854.
by cvwright 11y ago
Yeah, protecting the "template" is a pretty basic thing in biometrics. For example, here's a paper from 2005 about a scheme for secure storage of fingerprint templates. http://www.cse.lehigh.edu/prr/Bi
855.
by cvwright 11y ago
You're probably thinking of PhotoDNA from Microsoft: https://en.wikipedia.org/wiki/PhotoDNA Apparently many of the biggest online services, including MS and Facebook, are using it to scan images uploaded by their
856.
by cvwright 11y ago
They have a tech demo showing how you can store encrypted data in BigQuery, only touching the plaintext on the client. https://github.com/google/encrypted-bigquery-client
857.
by cvwright 11y ago
Thanks. It's definitely been a fun project. And yes, our goal is to keep this area moving forward towards better and more secure systems. CryptDB was a big step, but there's still lots to be done. If you're interested in o
858.
by cvwright 11y ago
CryptDB is cool, but be very careful if you're thinking about actually using it for anything. Muhammad Naveed, Seny Kamara, and I have a paper appearing at ACM CCS next month where we show that the approach used in CryptDB and other
859.
A 1200-Year-Old Hacking Technique Can Already Crack Tomorrow's Encrypted Vaults(forbes.com)
2 points by cvwright 11y ago|0 comments
860.
by cvwright 11y ago
I see what he's saying, and he makes some good points. But I think he's too pessimistic. There are still some bright spots of open protocols on the Internet, even if they're now predominantly used through web browsers and&#x
861.
by cvwright 11y ago
Very cool work. > I'd like to see more review of and enhancements to it by the types of people that broke prior, SFI schemes. I only glanced at the abstract so far, but it looks like they don't protect against non-control data
862.
by cvwright 11y ago
Fastmail is great. They're also doing a lot of interesting work to bring mail access protocols out of the dark ages with JMAP. https://github.com/jmapio/jmap
863.
by cvwright 11y ago
The folks at Galois have a language called Cryptol that can be used for similar things with hardware. https://galois.com/project/cryptol/
864.
by cvwright 11y ago
Can you be more specific? What does ublock do poorly? I find it works well for me with a minimum of fuss. I even got it to block those awful "Powered by Outbrain" clickbait links that have been showing up on news sites lately.
865.
by cvwright 11y ago
They don't fluoridate the water here in Portland, OR. Compared to other parts of the country where I've lived, the difference in people's teeth is pretty shocking. I haven't heard any alternative hypothesis that would
866.
by cvwright 12y ago
> By the way, for the "impossible to secure" argument against online-voting, who cares if it gets hacked? One of the biggest problems with online voting is coercion. If a bad guy can stand over you and watch you vote, he doesn
867.
by cvwright 12y ago
Very cool! I'm assuming this is not just for sending PGP mail, but also for decrypting PGP-encrypted mail that the user receives. Has anyone been able to tell how they protect against the server grabbing the plaintext after it's
868.
by cvwright 12y ago
How would they do this, assuming they wanted to? If they built their tools correctly, nobody knows how to comply with such a request. Or are you suggesting that they maintain a secret list of unknown vulnerabilities in their own code, just