fryguy

32 ms·

121.
by fryguy 11y ago
They have the concept of "shielded" users, which are users that are shielded by the shared secret, but don't contribute to it. Though, they don't really specify when to put people into the shared-secret group and when to
122.
by fryguy 11y ago
I find it amusing that this was in there: "Universal's claim that a victim of takedown abuse cannot vindicate her rights if she cannot show actual monetary loss". Almost assuredly Universal can't show actual monetary los
123.
by fryguy 11y ago
MD5 is a primative. Many algorithms specify a hash/compression function (which MD5 is) or a permutation (which AES is) in how they work. Message authentication (HMAC) can use any compression function, key derivation can use any compr
124.
by fryguy 11y ago
How dynamic? Resources can be updated to point to new immutable objects. For instance, as an operator of a website, I can sign the resource `/comments/10189265.json` as referencing an object with a particular hash, and then when t
125.
by fryguy 11y ago
My understanding is that entanglement doesn't actually allow for transfer any information faster than the speed of light but is more like having two coins sealed in a box and given to two parties, that "God" always keeps the
126.
by fryguy 11y ago
Access to good refrigeration is inversely proportional to the spiciness of the food.
127.
by fryguy 11y ago
The thing is, it only takes one non-TLS web request to be harmed. There are a number of attacks that can be done that require MITM and/or local snooping that are easily done at a conference like this (the TLS export-level security down
128.
by fryguy 11y ago
KDF should be slow. Stream ciphers should be fast. Message authentication should be fast. Hash functions can be used in any of the above, therefore it should be fast. Key derivation functions generally work by taking a secure hash (that can
129.
by fryguy 11y ago
People mention this frequently, but they never mention how often they procrastinate on stopping by the gas station when it's time to fill up. And the additional anxiety associated with not knowing if you pushed it too far and aren&#x27
130.
by fryguy 11y ago
My guess is that the OS kernel has a better idea of the total bandwidth available than each individual process. If two processes decide to increase their bandwidth at the same time, and both of them would miss a packet falling back. I'
131.
by fryguy 12y ago
If it were possible to stop some of that 10X before it even got to the pipe, would be the only kind of mitigation for that kind of attack. For something like that though, would require some pretty sophisticated firewall technology that live
132.
by fryguy 12y ago
Doesn't it make sense that a codec that's heavily patented would be more likely to have all of the patents known, rather than one that hasn't been looked at, and is likely to accidentally infringe one of the patents in the mi
133.
by fryguy 12y ago
This approach is known as Monte Carlo Tree Search, which usually follows a weighted search by how good the move is until it finds a leaf in the explored tree. Then it makes a new set of leaves for its moves and scores the path by randomly m
134.
by fryguy 12y ago
Unfortunately, there's an ambiguity here. Suppose that you're going to watch the Super Bowl with your friends in Chile. So you set the appointment for 1830 local time in Chile. Then Chile changes their timezone, and your local tim
135.
by fryguy 12y ago
The example is a good one, you are just misunderstanding what the problem is. Here is the synopsis: 1. User makes an appointment for 11am local time when he meets his friend in Chile. Using current timezone rules (GMT-3), the program saves
136.
by fryguy 12y ago
Encryption without authentication solves a majority of threat vectors that would allow people to look at your private communication. (authentication here means knowing that key K belongs to some organization, not authenticated encryption).
137.
by fryguy 12y ago
Optimal strategy for a given hand isn't that hard to calculate, either. There are 32 choices of how to hold. 5 of them have 46 possible outcomes, 10 have 2070 possible outcomes, and the remaining can be looked up in a table with less t
138.
by fryguy 12y ago
>Then it's not "just ECMAScript 6", is it? It's not "Javascript with a bunch of proprietary extensions", either. Type annotations can't be the difference between understanding code in Typescript if
139.
by fryguy 12y ago
I disagree. Typescript is just ECMAScript 6, with type annotations. Most of the differences come from the language changes (ES5 -> ES6), than the superset that Typescript explicitly adds.
140.
by fryguy 12y ago
Would you complain if a c++ project started using c++/14 features, because "now you need to learn c++/14 to contribute or grok the source files?" Typescript is really just Javascript with type checking, and what would be
141.
by fryguy 12y ago
Hash rate is independent from bandwidth/storage. Assuming you can do N hashes/s, you can still do N hashes/s with merged mining of multiple sidecoins. Also, presumably any bandwidth incurred by a sidecoin would have been incu
142.
by fryguy 12y ago
The main purpose of adding sidechain support to bitcoin is to allow coins to be "burned" on sidechains in order to get them back on the bitcoin blockchain. It's already possible to have unidirectional burning from bitcoin to
143.
by fryguy 12y ago
I don't necessarily agree with the conclusion at the end. Supposing that sidechains can be mined simultaneously with the bitcoin at no additional cost, and that there is a fixed bitcoin <-> sidecoin conversion ( not market based
144.
by fryguy 12y ago
I still feel like the better alternative to asm.js's approach is a VM with a static javascript interpreter/transpiler. It would have worked just as well politically, and been a much more direct benefit.
145.
by fryguy 12y ago
XMLHttpRequest wasn't around yet, but there were certainly ways of doing AJAXy things before GMail was popular with things like invisible refreshing iframes. I worked on such an app around 2001-2002.
146.
by fryguy 12y ago
The reason it is costly, is because it needs to be costly (sorry for the circular logic). ~3600 Bitcoin is given away each day to miners, which means that rational actors in the mining network are going to be able to spend that same amount
147.
by fryguy 12y ago
Also, they must be a lottery, in that it's lots of "easy" problems that have a small chance. Otherwise it weakens the "50% attack" by meaning that someone with the most computing power can efficiently "hard&q
148.
by fryguy 12y ago
Proximity cards themselves are secure, but usually the thing that opens the door isn't: https://www.youtube.com/watch?v=Bttr7fEfxiE
149.
by fryguy 12y ago
Except that `checkout` makes the working copy match the target branch, which destroys the pending changes in the working copy, if a path is specified. It's the same as `revert` in other version control systems.
150.
by fryguy 12y ago
referenced talk: https://www.youtube.com/watch?v=l6jTFxQaUJA

More ›