dfranke

48 ms·

421.
by dfranke 17y ago
No, privileged ports are fine. The mistake is not having Linux capability-dropping in UNIX from day one.
422.
by dfranke 17y ago
I wouldn't touch this without first giving it a very thorough security audit. Zed is right that most MTAs in use today are Byzantine horrors, but he misses out on why they were written that way: security. A mail server needs to bind to a
423.
by dfranke 17y ago
I'm having this same problem as well; I'm off from work today and tomorrow in an effort to recover. I have a doctor's appointment scheduled for tomorrow, so I'll let you know what he says!
424.
by dfranke 17y ago
How does it look if you set the cutoff to before the move from "Startup News" to "Hacker News"?
425.
by dfranke 17y ago
My karma appears to be undergoing a vigorous random walk.
426.
by dfranke 17y ago
This is infantile. I hope it gets him new charges if he goes through with it.
427.
by dfranke 17y ago
You have no idea how good you have it. I spent a week on vacation in Ireland last year and spent some time studying your politics and listening to your talk radio. The political astuteness of your median Irishman is lightyears beyond the
428.
by dfranke 17y ago
I needed to use code formatting to get it to honor the line breaks.
429.
by dfranke 17y ago
"Now let me state the present rules," The lawyer then went on, "These very simple guidelines, You can rely upon: You're gouging on your prices if You charge more than the rest. But it's unfair competition if You think you
430.
by dfranke 17y ago
Subversion is the lowest common denominator and you'll end up using it sooner or later. You might as well learn it even if you expect to move to a DVCS later on.
431.
The Dark Side of Security by Obscurity: Cloning MiFare Passes Anywhere, Anytime(eprint.iacr.org)
2 points by dfranke 17y ago|0 comments
432.
by dfranke 17y ago
First of all, calling me a "crypto person" is probably giving me too much credit. Two semesters of number theory (the second with an explicit crypto slant) make up the extent of my formal education on the topic. I've taught myself a fair
433.
by dfranke 17y ago
The idea is to make the KDF expensive in space as well as time. While bcrypt costs a few seconds of CPU time, it uses only a tiny amount of RAM, thus underutilizing the resources you have available. Thus, you can parallelize an attack usi
434.
by dfranke 17y ago
One of you needs to build a secret lair and plot to take over the world so that the two of you can become arch-nemeses. The Intel HT spat from a couple years back just wasn't nearly epic enough to hold my attention.
435.
by dfranke 17y ago
Uh, why him in particular? There are other competent cryptologists out there, y'know :-)
436.
by dfranke 17y ago
I would be very surprised if there were a tractable preimage attack against either algorithm in the next hundred years.
437.
by dfranke 17y ago
PGP is not in especially much danger due to the new results against SHA-1. The new attack is a birthday attack, not a preimage attack. PGP uses SHA-1 in several places, including some where it's "hard-wired" (i.e., parties can't specify a
438.
by dfranke 17y ago
I had an in-depth reply to this, but I accidentally closed the browser tab in the middle of composing it. So I'll leave it at this for now: historical accounts of the duration of sword duels do not distribute themselves qualitatively diffe
439.
by dfranke 17y ago
> a tedious, dirty matter of concentration and endurance Eh? Not at all. In sabre fencing, it's rare for a touch to take more than 15 seconds. Even in épée, which most closely approximates a real duel, one minute is about the norm.
440.
by dfranke 17y ago
I think the realistic version would be more fun. But as both a fencer and the author of a Nethack variant, I might be an outlier here :-)
441.
by dfranke 17y ago
A friend explaining to another friend why he was leaving grad school to start a startup: "Hey, and it could actually work, so it beats studying string theory!" "Yeah, but it could also fail. So that's a disadvantage versus string theory."
442.
by dfranke 17y ago
That only gets me one round trip, and I don't want to stop at the kiosk every day. It lets me buy multiple tickets, but not put multiple trips on one ticket.
443.
by dfranke 17y ago
Farewell, Apogee Software. You were a wonderful part of my childhood. /me gives Commander Keen a final salute
444.
by dfranke 17y ago
I don't like not being able to specify the exact value of the ticket. I always buy tickets in multiples of the cost of a round trip commute, so that a) I'm on my home, not on my way to work, when I need to buy a new ticket, and thus not in
445.
by dfranke 17y ago
Contextful noncog megashort timesave extra howbout?
446.
US Trustee moves to convert SCO bankruptcy to chapter 7(groklaw.net)
1 points by dfranke 17y ago|0 comments
447.
by dfranke 17y ago
The Adirondack High Peaks are a nice range for newbies and casual climbers (which probably all I'll ever be). Wright and/or Algonquin Peak via Avalanche Pass is a stunningly beautiful hike. Wright Peak, the easier of the two, is a little
448.
Another Eurocrypt rump session presentation: printing without ink. Secure and green.(eurocrypt2009rump.cr.yp.to)
1 points by dfranke 17y ago|0 comments
449.
by dfranke 17y ago
Anyone who asserts in blanket terms that his application is secure is providing evidence to the contrary. Anyone who actually groks security won't make any such claim without loading it with carefully-chosen qualifiers.
450.
by dfranke 17y ago
If I want psychoactive chemicals in my beverage, I'll get them from coffee, not tap water, thanks very much.

More ›