dlenski

13 ms·

241.
by dlenski 2y ago
Does a jail broken Kindle allow me to remove the DRM from Kindle ebooks downloaded to it? (I genuinely don't know. Until now, I've always downloaded Kindle purchases via ”Download and transfer via USB”, then stripped the DRM and t
242.
by dlenski 2y ago
Yes.
243.
by dlenski 2y ago
Ah. You're referring to the issue of devices which don't have sufficient sources of entropy to generate high-quality random numbers, particularly at early boot, particularly on first boot, and particularly for headless network-c
244.
by dlenski 2y ago
(I'm the author.) > hardware compatibility I don't have any evidence that hardware compatibility plays any significant role at all in the persistence of insecurely-sized or badly-generated keys for public-key cryptography. Do
245.
by dlenski 2y ago
Thanks for the heads-up. I didn't realize this is discouraged. I am not ChatGPT though… I am the author of the survey in question. And did not use any LLMs in any way at all in performing or documenting it.
246.
Debian weak keys are still out there on the Internet(cryptographycaffe.sandboxaq.com)
3 points by dlenski 2y ago|10 comments
247.
by dlenski 2y ago
A survey of ~20 million public keys (from TLS certificates, SSH server keys, Github and Gitlab users, and DNSKEYs). An innovative technique compared to other commercial and open-source scanning software: downgrade TLS and SSH scanners to ol
248.
by dlenski 2y ago
First they ignore you, then they laugh at you, then all of a sudden when your rival starts cozying up to the incoming Trump administration — boom. I guess we delved too deep. Or something.
249.
Hacking Mysa cloud-based smart thermostats(github.com)
2 points by dlenski 2y ago|1 comments
250.
by dlenski 2y ago
Includes the ability to "magically upgrade" low-end Mysa V2 Lite thermostats into more full-featured devices. https://github.com/dlenski/mysotherm?tab=readme-ov-file#magi...
251.
by dlenski 2y ago
Indeed. Their 2FA manages to hit the sweet spot of being incredibly laggy, never remembering me, and maximally insecure. > I no longer use it and can't suggest other folks do. Same. I was lured in by their interest rate bonuses a
252.
by dlenski 2y ago
As I understand it, Wealthsimple was founded independently but then quickly bought by Power Corporation. It is indeed quite interesting that its innovation and competitive pricing ( https://news.ycombinator.com/item?id=428380
253.
by dlenski 2y ago
Glad you're not the only one to point out Canada's comparatively stodgy financial industry. https://news.ycombinator.com/item?id=42838063 The account management interfaces of Canadian banks are pretty universally
254.
by dlenski 2y ago
From my vantage point, with accounts in both Canada and the US, the US market seems hard to disrupt because its financial sector is already highly competitive . Meanwhile Canada has long been completely dominated by 5 or 6 massive big bank
255.
by dlenski 2y ago
Almost the entirety of the enthusiasm for this post is based on people running crippled OSes (iOS, mainly) which won't let you tunnel 100% of traffic over a VPN.
256.
by dlenski 2y ago
> A 4G/5G router creates a "real" WiFi network rather than a personal network. A properly functioning phone hotspot is a "real" WiFi network. The ones created by Android devices, at least, are running `hostapd`,
257.
by dlenski 2y ago
> From your quote: > > With a good driver scanning takes only a few seconds You omitted the immediately following text: "*and the driver breaks the scan into chunks*, returning to the associated access point’s channel period
258.
by dlenski 2y ago
> Scanning works by tuning the radio to listen for a beacon sent by the AP every ~100ms on every channel (there are 11 2.4 GHz and ~22 5 GHz channels in the US). Yes, but good drivers can mitigate the latency hit by not scanning all the
259.
by dlenski 2y ago
> It's a pretty common issue overall regardless of the OS, it's more of a device and driver quality question. Right. I suppose I've been both lucky, as well as intentional in seeking out hardware with high-quality drivers
260.
by dlenski 2y ago
> To do that, among other things, Mac scans WiFi around you (probably for the names/SSID?) and to do that, the current WIFI connection is temporarily put on a back burner, resulting in a brief delay in traffic. Scanning for nearby W
261.
by dlenski 2y ago
> and recently copilot I, for one, have never even used ChatGPT. ¯ \ _ ( ツ ) _ / ¯ I'm a software engineer, pretty highly regarded as very skilled by everyone around me, almost entirely self-taught (programming since age 7), an
262.
by dlenski 2y ago
> IMHO cleve tricks like "domain fronting" is just freebooting What do you mean by "freebooting"? We added domain fronting support to the OpenConnect TLS-VPN client _in 2022_ because it is still working and useful for
263.
by dlenski 2y ago
I’m familiar with _the term_ and the phenomenon, but I am incredulous at the evidence-free claim that the project’s README is AI slop.
264.
by dlenski 2y ago
My personal threat model for all Apple products is that I don't care about them at all: http://dlenski.github.io/macOS_nope.html
265.
by dlenski 2y ago
What…?
266.
by dlenski 2y ago
There are a large number of similar projects out there. I implemented login credential extraction for both Chrom* and FF-based browsers in the somewhat shambolic but generally-useful `browser_cookie3` Python module last year: https:/&
267.
by dlenski 2y ago
> > Literally China/Russia are more trustworthy. > > Only in the sense that, as a US citizen who has no desire to travel to China or Russia, I don't feel all that worried that either country is going to do anything ba
268.
by dlenski 2y ago
This is ART.
269.
by dlenski 2y ago
Interesting read. It's quite intriguing that x86-64 processors of different microarchitectures and from different vendors basically all have similar non-determinsm for retired instruction counters but — at least in the authors’ brief
270.
by dlenski 2y ago
> There is no guiding hand, metaphorical or literal, choosing how a quantum system evolves. Indeed, nicely put. To be even more specific about why not: Bell's theorem ( https://en.wikipedia.org/wiki/Bell%27s_theo

More ›