er4hn

29 ms·

331.
by er4hn 5y ago
Clevis/Tang are really cool technologies that enable a new way of doing FDE. I'm surprised they aren't talked about more. With Clevis you can use Shamir Secret Sharing to divide the FDE key into multiple parts. The parts can
332.
by er4hn 5y ago
That just sounds like poor cooperation between teams.
333.
by er4hn 5y ago
Something that is interesting here is on-boarding new devices. Since all the encryption is done by each message being sent to the {all sender devices (M), all receiver devices (N)} you end up with M+N encryptions. When onboarding a new devi
334.
by er4hn 5y ago
A lot of the replies I see to this are people talking about their personal chat histories. For various reasons the trend these days is to not consider those valuable* Where chat histories are valuable and where you see a "store and ind
335.
by er4hn 5y ago
This is by Arkady and Boris Strugatsky, who were contemporaries of Lem. FWIW by favorite Strugatsky novels were Hard to Be a God, and The Doomed City.
336.
by er4hn 5y ago
One feature of Nix is to be able to rebuild something the same way on different systems. The article suggests that adding the debug symbols is a simple flag in the build expression. Based on that, you shouldn't need the debug symbols i
337.
by er4hn 5y ago
> why is a slow deploy cycle ok for non-TLS vulnerabilities? Okay, this is a fair point. I'd say that TLS is something where fixing it faster than the baseline is possible, if it had configurable knobs. In general we should of cours
338.
by er4hn 5y ago
Thanks for the clarification. Being able to disable cipher suites in TLS <= 1.2 takes care of a lot of my concerns. It does still remain a concern for 1.3. I still do worry about the lack of ability to disable cipher suites. Does that ex
339.
by er4hn 5y ago
I'll note that this follows the general trend of the Golang Security team trying to remove all the sharp edges on security code so that people don't cut themselves. I won't say that this is a uniformly bad thing, but it does
340.
by er4hn 5y ago
Summary: The Golang team is deciding what ranked order TLS cipher suites should be used in. You are not able to decide what cipher suites to use, the Golang team sets that in the code and will update it as they see fit. My take on this is t
341.
by er4hn 5y ago
This wasn't added via a secret order however. RSA had a business agreement with the NSA to add the backdoor. RSA was paid $10 Million for this.
342.
by er4hn 5y ago
Another problem is how NIST should come up with standards. NIST is in charge of standards, but that means that they need to turn to subject matter experts for each separate field. They need to define the standards for everything from measur
343.
by er4hn 5y ago
Exec Summary: No actual changes to how the protocol itself works. Github is requiring modern keys + algorithms for git over SSH connections and removing the unencrypted git protocol as a connection option. Seems reasonable to me. Since gith
344.
by er4hn 5y ago
This model makes a ton of sense for abstracting away individual file permissions to higher level RBAC concepts. I really like the concept that an expandable set of tags gets compiled down to lower level ACLs The follow up question I have is
345.
by er4hn 5y ago
Probably the MITRE CVE database
346.
by er4hn 5y ago
haha okay fair enough! I hope you have learned your lesson in adding pictures to a long blog post :) Jokes aside - I did enjoy reading through it and thank you for educating me on macaroons, CATs, and biscuits.
347.
by er4hn 5y ago
I have no idea if I am reading the chart right, but it looks like biscuits are the worst for scalability. Why is that? I would imagine that if the entire policy is encoded in the biscuit, it is very easy to evaluate without needing to call
348.
by er4hn 5y ago
As a Bay Area transplant to LA I would say that Los Angeles has a large and diverse food scene. There are lots of places to get good food, and because there are so many places it never felt that hard to get reservations. Even a place as fam
349.
by er4hn 5y ago
A big one mentioned at the start of the article is pasteurized milk. I'll add another one that the article skipped - water. Processing and distribution of clean water has been a major boon throughout the world. You can see a regression
350.
by er4hn 5y ago
I can try and explain this one - I do this a lot when writing down meeting notes / sending emails. The problem is that when a company has 3 Steves, 5 Freds, and you need to refer to someone, you need an unambiguous way to do so. So I t
351.
by er4hn 5y ago
Not quite. Silverblue is based around flatpak's (containers) and composing your OS from a set of containers. NixOs is based on Nix, which doesn't use containers but links binaries against specific versions of dynamic libraries to
352.
by er4hn 5y ago
> One approach would be to monitor what management considers productive / successful employees and also on employees who have gone on PIP's - then train the AI on that data set. I look forward to the papers on how to slack off
353.
by er4hn 5y ago
This makes it even better. Thank you for that insight!
354.
by er4hn 5y ago
> The user told the hackers to try depositing the stolen tokens without Tether, which the hackers did successfully and they deposited all the addresses into Curve. The hackers then sent the anonymous user about $45,000 worth of ethereum
355.
by er4hn 5y ago
Very fun! Would a similar visualization work for showing the insides of a go binary? It would be super cool to have a way to visualize how different modules add bloat in size (and may pull in other bloaty modules as well)
356.
by er4hn 5y ago
The dots were used afterwards to see what happened to the document. By showing that the document she had printed was given to the press, they are able to take her in. Otherwise if multiple people had printed the same document in the past se
357.
by er4hn 5y ago
I guess facial recognition systems should allow for a "distress" face that will lock the device being authenticated down further. Yes, clear violation of a legal order, but it's in the same spirit as TrueCrypt's "hi
358.
by er4hn 5y ago
I'm going to use this as an example of why commit signing is really awesome for git repos.
359.
by er4hn 5y ago
This isn't about you. This is about their taking control of how others sexualize them. By making this about your reactions and telling them to change (even jokingly) you are being part of the problem.
360.
by er4hn 5y ago
Alastair Reynolds, especially his Revelation Space trilogy are great hard sci Fi novels. He's a former astrophysicist so he knows the hard limits. I find most of his works to be good musings on humanity with a bit of alien horror.

More ›