d-z-m

30 ms·

181.
by d-z-m 3y ago
> And I would absolutely uphold the same expectation from an ISP as an organizational or personal network. No. ISPs provide internet service to customers who pay them for it. The entire situation is different. The ISPs are under no obl
182.
by d-z-m 3y ago
Sometimes language is used, to point to that which is beyond language.
183.
by d-z-m 3y ago
The Tao Te Ching(or at least parts of it) speaks from the place of truth, independent of doctrine or creed. Independent of Taoism, ultimately. As such it will always find appeal across cultures.
184.
by d-z-m 3y ago
My favorite low-tech cipher(e.g. if I ever have to encrypt something by hand) is Quagmire III[0], notably used to encrypt sections K1 and K2 of Kryptos[1]. [0]: https://www.cryptogram.org/downloads/aca.info/ciphers
185.
by d-z-m 3y ago
I would say that this isn't an expression of conservatism, but an expression of authoritarianism. The two often travel together, but authoritarianism isn't an essential characteristic of conservatives. > Well, no. Just because
186.
by d-z-m 3y ago
I actually think that progressive <-> conservative political axis isn't a meaningful one in the current climate, and that the more operative axis is the libertarian <-> authoritarian. Importantly, there can be every combin
187.
by d-z-m 3y ago
> It's not. Limiting the power of government is a central idea in conservative thought, especially in America[0]. [0]: https://en.wikipedia.org/wiki/Conservatism_in_the_United_Sta...
188.
by d-z-m 3y ago
> Invented the PAKE model that croc uses Nit: Magic Wormhole pioneered SPAKE2's application in a file transfer utility, but the actual invention of SPAKE2 predates Magic Wormhole.
189.
by d-z-m 3y ago
Recently, it has also become a term of art in Hollywood to refer to what are deemed racially inaccurate castings.
190.
by d-z-m 3y ago
> I have concluded that it is more likely that he is guilty of these crimes than the various theories in this thread suggesting that he is being unfairly canceled because of his opinions about vaccines I agree, but that isn't enough
191.
by d-z-m 3y ago
> That's why customers line up to pay for it: to get their traffic flow only through private networks instead of through the wild. I believe their point is that it doesn't flow through "the wild" in any case, it is pr
192.
by d-z-m 3y ago
> In all scenarios, the traffic goes over Azure networks and/or Microsoft's private backbone. You have to go out of your way to route traffic "via the Internet". Remember: Network addresses are just numbers! Routing r
193.
by d-z-m 3y ago
Endlessly fulminating on this is useless. The investigation is ongoing: all the facts are not yet known. If there is a case, let it go to trial. Let the truth come to light. Do not be so quick to judge.
194.
by d-z-m 3y ago
The pre-master key is encrypted to the server public key, and can only be decrypted with the server private key.
195.
by d-z-m 3y ago
"BoringCrypto" is a FIPS validated core library in BoringSSL[0]. "Boring Crypto" as an ethos/concept that djb is invoking in these slides is indeed not related to this. [0]: https://csrc.nist.gov/p
196.
by d-z-m 3y ago
It's fine the way it is IMO. However, it might be worth caveating in the README that it's for local testing only, the same way you do in your blog post. Mainly because of the shutdown endpoint, but also that the -cors flag returns
197.
by d-z-m 3y ago
The author of this tool basically took the Shamir code from Hashicorp Vault, which is pretty mainstream. If you're looking for a solid implementation, I would start there[0]. I wouldn't use the Shamir code from this repo, as it&#
198.
by d-z-m 3y ago
Modes like OFB effectively produce a keystream(not unlike a stream cipher) which is then XOR'd with the plaintext to produce the ciphertext. To decrypt, the same keystream is XOR'd with the ciphertext to produce the plaintext. If
199.
by d-z-m 3y ago
Caution, this tool uses AES in OFB mode[0] to encrypt/decrypt the file, without any guarantee of the ciphertext integrity(no MAC). [0]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation...
200.
by d-z-m 3y ago
The key part about Shamir is that having any number of shards short of the threshold doesn't reveal anything about the secret. Let's say you split your 256 bit encryption key into 4 64-bit pieces with each person getting 3 of the
201.
by d-z-m 3y ago
> Trying to do that is a game of whack-a-mole. At some point you decide to enforce a boundary that's far away from the boundary you really want to enforce because it is easier. They are already doing it with myriad other combination
202.
by d-z-m 3y ago
This does not explain why there are not reasonable auto-complete suggestions for the keyword "1776". YouTube can(and does) black-hole certain combinations of keywords it deems not-suitable. e.g. "where to buy"(completio
203.
by d-z-m 3y ago
> So auto-complete on its own probably suggests a bunch of alt-right terms. If this were true, YouTube could simply black-hole the more specific keyword, i.e. "1776 Moment" instead of "1776". For example, the search s
204.
by d-z-m 3y ago
> is there any US related bending of completion of "1619"? Not that I can tell, full list of relevant auto-complete for that keyword.
205.
by d-z-m 3y ago
I also get "1776cc", but this seems to refer to a Volkswagen engine. If I include a space after the "1776" the results disappear. If it's locale related, it seems to make less sense to black-hole it from within the
206.
Ask HN: Why is 1776 a black-holed keyword on YouTube?
61 points by d-z-m 3y ago|54 comments
207.
by d-z-m 3y ago
Not sure if I'm just bad at reading Rust code, but it looks like the end-to-end encryption is implemented by pre-sharing a symmetric key, and communicating a 24 byte xChacha20Poly1305 nonce over the wire as websockets are established.
208.
by d-z-m 3y ago
One of the really cool uses of passkeys is cross-platform sign-in via the QR code flow. (i.e. passkey on phone, scan qrcode on desktop, desktop logs you in). However as I understand it, to be able to do this you need to use the platform&#
209.
by d-z-m 4y ago
If you like learning about Easter eggs in video games, I can't recommend this youtube channel[0] enough. Always very interesting, and the videos are very well edited. Here's one[1] going through Easter eggs in Minecraft. [0]: h
210.
by d-z-m 4y ago
Purchased a copy of this recently. Definitely recommend, although I'm curious how out of date people think the content is, and how a second edition would improve things.

More ›