dvdkhlng

32 ms·

241.
German Email Provider Implements Lavabit-Style Encrypted Inbox(posteo.de)
1 points by dvdkhlng 12y ago|0 comments
242.
by dvdkhlng 12y ago
Is there a technical way to implement a service like that in a non-compromising way? I.e. user sends you his public key, you brute-force some nonce value, until the key's ID is "nice"? Non-native speaker here, I didn't
243.
by dvdkhlng 12y ago
I think it's a very bad idea to use this service. Your secret key should never be shared with a 3rd party. Using an untrusted 3rd party service to generate a public/private key pair is like asking a thief to sell you a new door l
244.
by dvdkhlng 12y ago
Note that the linked site, cs.lmu.edu, has a broken IPv6 DNS record: $ dig cs.lmu.edu AAAA cs.lmu.edu. 3493 IN AAAA ::1 When loaded on IPv6-enabled clients, you'll connect do localhost:80 instead.
245.
by dvdkhlng 12y ago
No, that does not make dragnet surveillance easier. Dragnet surveillance depends on not being easily detectible. However, a SSL MITM attack is easily detected, as it changes the fingerprint of the SSL-key of the site you're talking t
246.
by dvdkhlng 12y ago
Just putting the data on german soil does not seem to help at all, as long as these data are accessible to Amazon personnel located in the US. See this case about data located on Irish servers for example: http://www.theinquirer
247.
by dvdkhlng 12y ago
I use a similar construct for managing config files (mostly the stuff that goes to /etc/*): put all the config for a specific program (or problem) into a VCS-handled directory, then add a Makefile with an "install" targe
248.
by dvdkhlng 12y ago
[Edit: yes the code above seems to be valid for the author's non-standard "jonesforth" implementation of Forth. ;CODE is defined in the ANS Forth standard to mean something very different.] Sorry for the nit-picking, but the
249.
by dvdkhlng 12y ago
According to wikipedia [1], they planned to use their Loongson MIPS chips for some of the Dawning supercomputers, but later reconsidered. I'd guess using Loongson MIPS didn't make any sense given its poor performance compared to
250.
by dvdkhlng 12y ago
> c) some deployments do both signing and encryption with the same RSA key, which is terribly dangerous. I think that just switching to DHE creates its own set of very dangerous problems. When using RSA the same secret key will be used
251.
by dvdkhlng 13y ago
Shortly after submitting my reply I had a similar thought but after some googling I cannot find any source that this kind of "port sharing" NAT is actually used. Looking at RFC 3022 "Traditional IP Network Address Translator
252.
by dvdkhlng 13y ago
Haha, I'm laughing at that statement. You do realize that NATs merely extend the address space by mapping connections to computers with non-public IPs onto a uniquely identifiable port number? So depending on the average number of co
253.
by dvdkhlng 13y ago
> Certificate revocation does not work. I have to second this. Just days after the Heartbleed disaster struck, my Firefox (v24; Debian "Iceweasel") sometimes takes more than 30 minutes (!) to load SSL-encrypted websites, as
254.
by dvdkhlng 13y ago
You're right, I overlooked the reference to the function reading a single byte.
255.
by dvdkhlng 13y ago
Grep expressions are not a turing-complete language, so I guess that won't count. You could claim that you solved the task using a shell script (that invoked the grep "function") but if you programmed in shell, the shortest
256.
by dvdkhlng 13y ago
> Even java can do that setOut(system.in); I was referring to an empty SED-program that would then be run via 'sed -f empty-file.sed'. Of course you need >0 bytes to invoke the SED program.
257.
by dvdkhlng 13y ago
> there is nothing better to do instead of waiting for input. In case no more input is available it would be best to already output the data that have accumulated in buffer. Else in case the input program deadlocks you're never goi
258.
by dvdkhlng 13y ago
SED is shorter (0 byte). SED /is/ a turing complete language [1] so don't try to claim that I'm cheating. sed < input > output :) [1] http://robertkotcher.com/sed.html [update] s/set&
259.
by dvdkhlng 13y ago
I don't know much Java. Does 'System.in.read(buffer)' block until stdin is at EOF or buffer is full? Then this solution would be somewhat broken. Imagine a low-bandwidth source on stdin and a audio player connected to stdo
260.
by dvdkhlng 13y ago
Can you verify whether that URL is geo-IP restricted to germany? I've read it is (but can't easily verify it here). Consider linking to the copy on archive.org: https://archive.org/details/snowden_interview_
261.
by dvdkhlng 13y ago
Note that Diffie-Hellman with 1024-bit keys is roughly equivalent to symmetric encryption with 80-bit keys [1]. The resulting connection is thus less secure than AES-128. [1] https://en.wikipedia.org/wiki/Key_size#Asymm
262.
Enabling DHE ciphers in Apache limits encryption strength(blog.ivanristic.com)
1 points by dvdkhlng 13y ago|1 comments
263.
by dvdkhlng 13y ago
Should be feasible with GNUnet [1] which has pretty generic foundations for implementing anonymous and secure peer-to-peer services. Think of an encrypted overlay network that uses addresses that cannot be linked to IP addresses and relayi
264.
by dvdkhlng 13y ago
While the "51% attack" [1] allows an adversary to control the block chain, she can only control which transactions to include and which not to include, so in the worst case bit-coin transactions can be (selectively) shut down. Doi
265.
by dvdkhlng 13y ago
This functionality has been available in Emacs (ELisp) for a long time: http://www.emacswiki.org/emacs/RegexpOpt
266.
by dvdkhlng 13y ago
After reading multiple comments criticising Emacs for wearing down the hands, there's some more stuff (apart from viper-mode) that makes Emacs use less damaging: * ergo-emacs key bindings ( http://ergoemacs.org/features.
267.
by dvdkhlng 13y ago
When talking about physical therapy, did you ever consider referred pain patterns [1], like neck/shoulder muscle tension causing pain in the wrist/fingers? I found the Trigger Point Therapy Workbook [2] quite enlightening in that
268.
by dvdkhlng 13y ago
AFAIR Bittorrent transmits IP-addresses in plaintext and thus hurts the privacy of any Tor-node that runs a BitTorrent client over Tor: http://arstechnica.com/tech-policy/2011/04/not-anonymous-att...
269.
by dvdkhlng 13y ago
> It would be interesting to see a global equivalent emerge, maybe built upon bittorent DHTs/magnet links. Maybe one already has, e.g. on Tor? GNUNet [1] is very similar in technology to Perfect Dark (at least from what I can tell
270.
by dvdkhlng 13y ago
Also, the collection has to be implemented by each communication company itself (as opposed to by the police or secret service), so no central storage of data and no easy data-mining and network-building across the data sets of indviduals.

More ›