dionyziz

10 ms·

31.
OpenBazaar starts using multisig for project donations(blog.openbazaar.org)
3 points by dionyziz 12y ago|0 comments
32.
Why does OpenBazaar use Bitcoin proof-of-burn for reputation?(blog.openbazaar.org)
4 points by dionyziz 12y ago|0 comments
33.
A pseudonymous trust system for a decentralized anonymous marketplace(gist.github.com)
11 points by dionyziz 12y ago|0 comments
34.
OpenBazaar proof-of-burn and reputation pledges(blog.openbazaar.org)
6 points by dionyziz 12y ago|0 comments
35.
by dionyziz 12y ago
Someone please convert it to git and put it on GitHub...
36.
by dionyziz 12y ago
I'm surprised no one here is talking about Namecoin [1]. It has become obvious that the PKI system is failing, and the main issue is centralization. I don't know if Namecoin itself will be the solution, or some other blockchain-ba
37.
Beach theft(en.wikipedia.org)
50 points by dionyziz 12y ago|23 comments
38.
by dionyziz 12y ago
Spotify doesn't have everything and it has ads.
39.
Dyson sphere(en.wikipedia.org)
7 points by dionyziz 12y ago|4 comments
40.
Trust-on-first-use makes JS crypto feasible(github.com)
3 points by dionyziz 12y ago|0 comments
41.
by dionyziz 13y ago
Standardization is a way. SHA2 and SHA3 are standardized. Unfortunately, with the recent RSA shortcomings, this may no longer be trustable.
42.
by dionyziz 13y ago
md5 is fine for filesystems and databases. I'm talking about using hashes for cryptographic purposes.
43.
by dionyziz 13y ago
These reasons don't matter. What matters is that you use a widely used hash function through a widely used software library. Most security issues are implementation-related, not cryptography-related. And if there are problems with a sc
44.
by dionyziz 13y ago
I'm surprised we couldn't have proven this analytically.
45.
by dionyziz 13y ago
Shift+tab should unindent
46.
by dionyziz 13y ago
Tab doesn't work.
47.
by dionyziz 13y ago
Bullshit.
48.
Specker sequence(en.wikipedia.org)
1 points by dionyziz 13y ago|0 comments
49.
by dionyziz 13y ago
Nobody claimed that we can fix all security problems with unit testing. Unit testing should be used in addition to auditing, reviewing, and other techniques. However, unit testing can dramatically improve the quality of code, including av
50.
by dionyziz 13y ago
Twitter's code is "enterprise" code in that it has to satisfy the organization's needs and a huge part of it is not user-facing, but targeting other enterprises (for example, Twitter ads). At Twitter, we use Scala. So, n
51.
Eccouncil.org defaced with Edward Snowden's passport(eccouncil.org)
5 points by dionyziz 13y ago|0 comments
52.
by dionyziz 13y ago
This exists: http://pilif.github.io/2008/05/why-is-nobody-using-ssl-clien...
53.
by dionyziz 13y ago
If we have quantum computers, yes. By that time, we'll upgrade our elliptic curve algorithms to post-quantum cryptography however.
54.
by dionyziz 13y ago
You don't need a quantum computer to break encryption in order to know that it's breakable. This has already been proven (Shor's Algorthm). You also don't need quantum computers to construct stronger cryptography, immune
55.
by dionyziz 13y ago
I work for Twitter and can confirm that.
56.
by dionyziz 13y ago
If you find a hash collision, let us know. As security people, we'd be very, very concerned if you can find even one collision or even engineer a collision in SHA1 or especially SHA256.
57.
by dionyziz 13y ago
Another win against Zooko's conjecture!
58.
by dionyziz 13y ago
Your peers cannot know if the data originated from you or you're simply relaying traffic. Thus, your IP address cannot be associated with tweets.
59.
by dionyziz 13y ago
You seem to have completely missed the fact that HSTS can be combined with an STS preloaded list, to which the previous comment author also gave you a reference to read. HSTS is TOFU (trust-on-first-use) by default, but the TOFU portion can
60.
by dionyziz 13y ago
https://en.wikipedia.org/wiki/Death_from_laughter

More ›