eliteraspberrie

10 ms·

31.
by eliteraspberrie 11y ago
If you have one of the three: 1. a one-way hash function; 2. a block cipher; or 3. a secure random number generator; then you have the other two. So replace "RC4" with Keccak and the argument stands. Keccak doesn't fit in a t
32.
by eliteraspberrie 11y ago
Only cryptographers care about "unpredictability." Outside of cryptography, the interesting properties of a PRNG are speed, period length, and state size. But a good CSPRNG has excellent statistical properties. So if you make &quo
33.
by eliteraspberrie 11y ago
I'm glad you brought this up. I know people who benefit from secure software today (they actually exist) and they are all customers . I don't know many users who can say the same. For example, I've heard rumours about a fo
34.
by eliteraspberrie 11y ago
I doubt the NSA needs to instigate much. There is so much bad code in the world, and it just keeps growing, they would be in business forever just sitting on their thumbs.
35.
by eliteraspberrie 11y ago
A word of advice to founders from the US: ignoring user requests to delete accounts or personally identifying information is a crime in some countries. (I'm only familiar with French and Canadian law.)
36.
by eliteraspberrie 11y ago
I use Fortran code which was written before I was born on a daily basis. It works exactly as you expect. I can't get C code to behave the same from one release of the compiler to the next. Thank goodness NASA uses Fortran.
37.
by eliteraspberrie 11y ago
libgcrypt (GPG) does the same thing OpenSSL did. It uses /dev/random to seed an internal PRNG. But you can switch to using just the system PRNG: gcry_control(GCRYCTL_SET_PREFERRED_RNG_TYPE, GCRY_RNG_TYPE_SYSTEM); I don&#x
38.
by eliteraspberrie 11y ago
You can reproduce some of the image processing described here with software today. For example, in Figure 3, the histogram at the top right is a "periodogram" of the original image data. It shows that the original image is skewed
39.
by eliteraspberrie 11y ago
To single one out, the Full Belly Project is a great example. Their Universal Nut Sheller has had a real, measurable impact on economies. In general terms, several industries have had a real, measurable impact on economies. The scooter, the
40.
by eliteraspberrie 11y ago
The reference collection of polynomial approximations is: Approximations for digital computers by Cecil Hastings Jr. The method to derive the polynomials is described there as well as coefficients for many common functions. It isn't
41.
by eliteraspberrie 11y ago
Don't eat salad for the lettuce, it's just water and fiber. Eat salad for the dressing. Traditionally, dressing is about 3/4 oil (olive oil) and 1/4 acid (vinegar), which is nutritious.
42.
Spacial frequency in images(eliteraspberries.com)
1 points by eliteraspberrie 11y ago|0 comments
43.
by eliteraspberrie 11y ago
I have immense respect for the author, and I know these are just notes, but the tone of technologists who talk about Snowden is very annoying. We know certain technologies like Tor and OTR are safe because of the weight of scientific resear
44.
by eliteraspberrie 11y ago
The BSD licenses mention code and documentation together ("this software and associated documentation files") so I assume any of those would provide you the same protection for your entire work. I don't know much about the GP
45.
by eliteraspberrie 11y ago
Bindings can leverage the ownership and borrowing principles in Rust to codify comments typically found in a C header about how its API should be used. Could the Rust compiler make use of design by contract style annotations in the C head
46.
Browser extensions are kernel modules for browsers(composition.al)
2 points by eliteraspberrie 12y ago|0 comments
47.
by eliteraspberrie 12y ago
There are a couple alternatives to GPG being developed right now. One is reop ( https://github.com/tedu/reop ). The cryptography is done by libsodium and it is well-written. Another is NetPGP ( http://www.netpg
48.
by eliteraspberrie 12y ago
This worked back in the day, when printers had no network-level access control, maybe not anymore... Go through the printer's settings, and select the one that prints out all the current settings; on it may be the printer's IP add
49.
by eliteraspberrie 12y ago
If no one wins the contest, it proves nothing. But contests like this are a bad idea for another reason: people will hoard bugs instead of disclose, sometimes for years. For example, the Pwn2Own contest boosted the discovery and disclosure
50.
by eliteraspberrie 12y ago
I wish they would recommend alternatives to Pidgin or Adium. (Because they are graphical interfaces to libpurple, which wasn't written with security in mind, to put it nicely.) Gajim and Jitsi are both free software IM clients, cross-p
51.
by eliteraspberrie 12y ago
As well as being the author of the algorithms in NaCl, djb is also a specialist in secure software development, as tptacek mentioned. You can be reasonably sure that his code is bug free, but they went the extra step of proving the absence
52.
by eliteraspberrie 12y ago
This general case of this method is sometimes called Lagrangian interpolation. As the article describes, there is one caveat with using these formulas: you can only decrease the step size so much before it backfires. Because you are dividin
53.
by eliteraspberrie 12y ago
In China, strategic industries like energy, steel, and telecommunications are state controlled. Huawei, for example, is a "national champion," which means it receives subsidies, foreign employees cannot own shares, the Party appoi
54.
by eliteraspberrie 12y ago
There is no such thing as low latency anonymity.
55.
by eliteraspberrie 12y ago
It would be nice if the server software were open source as well. Call routing information, like all metadata, can only be protected legally not cryptographically. So it's not something I trust to people outside Canada, no matter how m
56.
by eliteraspberrie 12y ago
Watt wasn't convicted for fraud, he was convicted for not snitching. I, for one, trust the man's integrity, and I'll judge his code when I see it.
57.
by eliteraspberrie 12y ago
My mistake, zxcvbn uses that formula only for repetitions.
58.
by eliteraspberrie 12y ago
I am not a cryptographer, but I'll offer some advice, if I may: don't let people choose a passphrase, generate one for them. People are very bad at creating good passphrases, but decent at memorizing a good one. I say that because
59.
by eliteraspberrie 12y ago
This is common in Canada too. I've learned to cancel services in writing, by fax and registered mail. You save yourself a big headache.
60.
by eliteraspberrie 12y ago
This (compound literals) also has the advantage of being strictly valid C, since compound statements are a GNU extension.

More ›