dfranke

21 ms·

121.
by dfranke 16y ago
I'm taking issue with the decision stated in the first sentence: "In my previous post about the grand old trade of basket-making I included several extracts from some 18th century books, in which I preserved the long s (ſ) as used in the or
122.
by dfranke 16y ago
'ſ' is just an 's'. It's a typographic variation carrying no semantics. The proper way to reproduce it in a new medium is simply to use 's' everywhere. To do this is no more unfaithful to the original work than using Times Roman on the s
123.
by dfranke 16y ago
No reason you would be. But you can be sure that your personal hosting is more secure than (your personal hosting ∪ Google). In the latter case if either breaks you're screwed.
124.
by dfranke 16y ago
At first I misread the start of the first paragraph as "Psychologist Sasha Baron-Cohen" and wondered what kind of test I was about to see. 34, anyway. I was diagnosed with HFA about eight years ago and probably would have scored considerab
125.
by dfranke 16y ago
He's not the first mathematician to get annoyed by how poorly designed the numeric classes in the Haskell prelude are. But there are better alternatives already out there. http://hackage.haskell.org/package/numeric-prelude
126.
by dfranke 16y ago
I haven't studied IPSec closely. How much of this advice actually got implemented?
127.
by dfranke 16y ago
That depends. Do we just have to find a vuln somewhere in one of NETSEC's check-ins, or do we have to prove it was put there deliberately?
128.
by dfranke 16y ago
Are you earnestly conceding, or are you just bogged down in enough other arguments that you don't want to deal with this one?
129.
by dfranke 16y ago
I am looking right now at Schneier's reference implementation of the Blowfish key setup function, and there is nothing in it that would not be straightforward to parallelize across a CUDA warp (read: no conditional branches). Is it your as
130.
by dfranke 16y ago
The specific improvement scrypt makes over bcrypt is not yet relevant; nobody has ever hardware-optimized a bcrypt cracker, and the project that successfully does so and publishes their results will have made a contribution to cryptography
131.
by dfranke 16y ago
Think what would happen if this became widespread. Book publishers start charging exorbitant prices because most of their buyers don't care. Employers push back and negotiate deals for themselves with publishers. Do you really want the b
132.
by dfranke 16y ago
If I had a billion dollars and had paparazzi chasing me, I would love for them to try this so that I'd get to mount an AA gun on my yacht and shoot them down.
133.
by dfranke 16y ago
Whoops, yes, $7.39. I was taking the prices from memory and remembered the $82 as $85.
134.
by dfranke 16y ago
The amortized cost of a reserved instance is only $7.47 per month.
135.
by dfranke 16y ago
You can do better than that. Run the hash in HMAC mode, hash successive counter values to get a pseudorandom stream of bits. Xor your plaintext with the stream to get the ciphertext. But how does biology contribute to any of this? At bes
136.
by dfranke 16y ago
It's unfortunate this wasn't noticed seven weeks ago. The application was published August 7. The public comment period runs for two months afterward.
137.
by dfranke 16y ago
I don't know enough about biology to comment on their storage-density claims, but as to the encryption, I'm getting a strong whiff of snake oil from "only the client would know the function to derive the checksum". If you want to convince
138.
by dfranke 16y ago
What struck me in that photo is that he looks a bit older than he is. Which, for Forbes' audience, I suspect is deliberate.
139.
by dfranke 16y ago
As soon as you pay out to said official, it's a bribe. Besides, who would you expect to respond?
140.
by dfranke 16y ago
My point is that this business plan is a quick ticket to somewhere where you'll get a considerably more invasive search than you'd get from the TSA.
141.
by dfranke 16y ago
In what sense is that anything other than bribing government officials?
142.
by dfranke 16y ago
SHA-1's vulnerabilities are entirely irrelevant to its unsuitability as a KDF, making SHA-2 no more suitable. As others have recommended, use scrypt or PBKDF2.
143.
by dfranke 16y ago
You should have asked some questions with larger amounts of money at stake, and also asked our current net worth, income, and savings rate. I have enough savings now that my preference for certain outcomes over $2500 intervals is pretty sm
144.
by dfranke 16y ago
I meant this as a general answer to the brute-force-mitigation-without-DoS-vulnerability problem, not as something SSH-specific. Somewhere on my hard drive I have a half-finished draft of a spec for a Kerberos replacement implementing the
145.
by dfranke 16y ago
There doesn't appear to be a way to prevent these attacks without locking out legitimate users There is, but I've never seen it implemented. Throttle login attempts by requiring a cryptographic proof-of-work to accompany each attempt. S
146.
by dfranke 16y ago
You mean all 2000 lines or so of the core that almost everything else is built on?
147.
by dfranke 16y ago
Barring rms's answer being correct, the same people who do now: the people willing to do a good job for the least money. One likely economic outcome of a successful eugenics effort would be that tedious, mindless jobs would be among the bes
148.
by dfranke 16y ago
Please define "exist" as you've used it in your opening sentence.
149.
by dfranke 16y ago
You're right, which is why I'll continue to stick with Debian stable or Ubuntu LTS while this all blows over. It will blow over, however, and I'm happy to have a major player out there forcing it to happen.
150.
by dfranke 16y ago
While I second the BJJ recommendation, if it's the "human chess" aspect that you're after, the martial art you're looking for is fencing.

More ›