cyphar

71 ms·

811.
by cyphar 7y ago
A proper implementation uses the correct compiler intrinsics and hints to cause such operations to be constant-time. Timing problems are a fairly well-known problem in cryptography and constant-time implementations are often required for sa
812.
by cyphar 7y ago
Unfortunately, it is a practical necessity if you want to have an operating system that the majority of the public can just pick up and use. Yes, I think it's utterly ridiculous that Microsoft acts as the primary signatory for most har
813.
by cyphar 7y ago
They are necessary to get Microsoft to sign your keys, which is necessary to get Linux distributions to boot on modern hardware without getting the user to install custom keys (and that is a requirement because there is no standard way to
814.
by cyphar 7y ago
> Not all firmware allow you to turn off secureboot or enroll your own keys. Being able to disable Secure Boot and install your own keys is a requirement of the Windows 8 and 10 advertising requirements, so manufacturers almost always al
815.
by cyphar 7y ago
If you're using a modern machine, then you probably are using Secure Boot. For better or worse, Secure Boot requires Microsoft[+] to sign your binaries and they have certain requirements which you cannot break or they will revoke the s
816.
by cyphar 7y ago
My family is from Serbia (my parents were both mathematics teachers in Serbia) and I was raised here in Australia. It's definitely true that the curriculum is many years behind even relatively poor and corrupt countries (like Serbia).
817.
by cyphar 7y ago
I guess I should've said that it's a separate condition, rather than being unrelated. The standard each juror needs to consider when making their own determination is "beyond reasonable doubt" (or "preponderance&quo
818.
by cyphar 7y ago
Beyond reasonable doubt is one of several standards of evidence (along with "preponderance of the evidence" and "clear and convincing evidence"), but this is about whether the jury has to be unanimous in their decision t
819.
by cyphar 7y ago
"Beyond reasonable doubt" is a standard of evidence, it doesn't have anything to do with whether the jury needs to be unanimous. They need to be unanimous regardless of the standard of evidence, even for "preponderance o
820.
by cyphar 7y ago
The problem with disabling this optimisation is that it will produce garbage code for basically every architecture. Code which does unaligned accesses are noticeably slow compared to aligned accesses -- this is why there are separate instru
821.
by cyphar 7y ago
The other issue is that RAID (even RAID 6 with no dead disks) fundamentally cannot deal with data corruption or any of other fun bugs hardware likes to throw at you like phantom reads and writes. This is because it has no checksumming and m
822.
by cyphar 7y ago
Organic products use pesticides, it's just that they often use older pesticide technologies or supplement the use of pesticides with other techniques for repelling pests. Most organic pesticides are no more healthy nor environmentally
823.
by cyphar 7y ago
I really like TOML. It's very similar to old-school INI files except it has a standard and parsers in quite a few languages. It does has its own downsides (while the concept of tables is quite useful, it can be a bit tricky to understa
824.
by cyphar 7y ago
The NSA has built a data center in Utah specifically for this problem[1], so it's hardly beyond the realm of plausibility. [1]: https://en.wikipedia.org/wiki/Utah_Data_Center
825.
by cyphar 7y ago
The NSA figured this out in the 90s -- you filter based on metadata and then retrieve the corresponding data if necessary. Aside from the fact that this (in the NSA's view) allows them to sidestep the 4th amendment, it's usually m
826.
by cyphar 7y ago
Sure that's because the package manager is container-aware (and NixOS is very cool -- don't get me wrong), but the distinction is that on Solaris all system tools are Zone-aware (including things like DTrace which would require
827.
by cyphar 7y ago
Australian here too, just graduated along with my partner (who was an international student). You're right about the long-term consequences for the university, but I would also add that universities actively undermine their internation
828.
by cyphar 7y ago
All system programs could operate and manage the containers running on the system, meaning you can use your existing knowledge to manage a bunch of containers. For instance, you could run your package manager across all containers to see if
829.
by cyphar 7y ago
I don't think it's possible to avoid politics in any profession. Teachers care about education reform, which is a political subject. Doctors care about the healthcare system, which is a political subject. Civil engineers care abou
830.
by cyphar 7y ago
Less well-known papers are difficult to pirate, but even if that wasn't true I also think that it's quite strange to argue that researchers should pirate papers rather than making the papers free to the public.
831.
by cyphar 7y ago
Well, let this be the first case you've heard of this. I just graduated, but while I was a student at the University of Sydney, I found that many journals (including ACM and IEEE, and even ISO) were not accessible through our universit
832.
by cyphar 7y ago
> The last Labour (UK) government [...] I disagree fundamentally with many of the things the last UK Labour government did. However at the same time, the last Australian Labor government combated the GFC with a stimulus package that allo
833.
by cyphar 7y ago
> Unions exist primarily to engage with employers, not government. Labor parties in countries like the UK and Australia specifically exist to act as union-supported (and funded) parties. Unions do exist to help deal with members' em
834.
by cyphar 7y ago
It's strange to me that technology workers are seemingly unwilling to unionise and hold general strikes to protest these kinds of policies -- if we aren't willing to take real collective action, we aren't ever going to have o
835.
by cyphar 7y ago
No, the third party doctrine allows for compelled disclosure (through warrants) of a user's data which the service acted as a carrier for. That's why law enforcement can send warrants to Google (or your ISP) to get the contents of
836.
by cyphar 7y ago
Jitsi Meet works pretty well (though I agent used it for really big meetings). But in the context of this article, it suffers from the same issues it outlines because it's based on WebRTC.
837.
by cyphar 7y ago
> Meanwhile, the unsigned 32-bit count of seconds (also) since 1970 used in pcap output from tcpdump, and used universally throughout the financial industry with no hint of a move away from it, will not roll over until 2106. If they are
838.
by cyphar 7y ago
This is not quite true, though it was reported widely. The legislation doesn't consider individuals as "designated communications providers" if they work for one (unless they are self-employed or sole traders). The way it wor
839.
by cyphar 7y ago
> The server is one of the "ends" in "end to end". Not in the phrase "end to end encryption", which is specifically used to refer to schemes and services where the service provider does not have the ability
840.
by cyphar 7y ago
They are because they provide services to Australians and have an Australian subsidiary -- just as anyone in Australia must comply with a warrant or any other lawful request by law enforcement.

More ›