galadran

12 ms·

61.
by galadran 8y ago
A pretty well written analysis. I think the author is mistaken on two important points though. The author writes that due to Google Play Services, most Android apps are in fact Google Play apps and couldn't be used on a non-Google vers
62.
by galadran 8y ago
This design only requires the hosting server (e.g. Cloudflare, CDN, ...) to support encrypted SNI. It can be entirely transparent to user deployed servers. So it might well be here much sooner than you think!
63.
by galadran 8y ago
I can explain it simply to you. Only the personal data of flesh and blood human beings is protected. So contact info is protected if it is the direct email of a human being. If its a huge faceless corporation and the email is just "leg
64.
by galadran 8y ago
Did you read the letter [1] that was linked in the article? It is much less hyperbolic than the article makes out. Paraphrased: Yes, of course you can keep registration data for your own legitimate usage. Contact information for the lifeti
65.
by galadran 8y ago
The Noise framework (and Wireguard) deliberately support the combination of psk and public key authentication. One clear benefit is that you get redundancy against a failure in either mode. If your DH implemention is broken, the attacker st
66.
by galadran 8y ago
> Nowadays, whenever D is publicly evaluated, the younger languages Go and Rust are often brought up as alternatives. Here, we need not go into an in-depth comparison of these languages because both Rust and Go lack one feature that we r
67.
by galadran 8y ago
> Consent requires a positive opt-in. Don’t use pre-ticked boxes or any other method of default consent. [...] > You must ask people to actively opt in. Don’t use pre-ticked boxes, opt-out boxes or other default settings. Source: htt
68.
by galadran 8y ago
No end to end encryption = no interest. If I use this to communicate with a business (or person!), the carrier can read every word. No thanks. Hell. You can't even download the standards documents without giving GSMA a name and address
69.
Cambridge Analytica and SCL – A Very British Coup(bellacaledonia.org.uk)
3 points by galadran 9y ago|0 comments
70.
by galadran 9y ago
This report looks to have examined the same question in the EU and seems less alarmed: https://www2.mst.dk/Udgiv/publications/2015/09/978-87-93352-...
71.
by galadran 9y ago
Admittedly its less of a risk with your SSH keys than with say your bitcoin wallet. (There's a clear economic incentive there and most bitcoin hardware wallets have pretty low levels of assurance). But nonetheless, the number of peopl
72.
by galadran 9y ago
I'm amazed there's a market for this kind of thing. Since the 1990s its been known how to implement an undetectable backdoor in hardware based crypto which leaks your keys to an attacker. E.g. http://paper.ijcsns.org&#x
73.
by galadran 9y ago
Well this article gave me a good laugh. Poor dinosaur.
74.
by galadran 9y ago
More appropriate comparison would be to the UK where the cost of a private dental X-ray is between £9-£14 ($14-$22) [1], although realistically you would want a consultation as well. Most Brits use the NHS (state socialised) which provides
75.
by galadran 9y ago
Pretty misleading! They test an old version of Keepass with an old KDF (they recently switched to Argon2 which is much more resistant to GPU/ASIC attacks. Additionally KeepassDroid is intended to use vaults synched to the device via Go
76.
by galadran 9y ago
https://pastebin.com/ibZM0C8Q Some of the data from the Appendix on Equality pulled out. The difference between countries is quite astounding!
77.
by galadran 9y ago
Still one better than the US though.
78.
by galadran 9y ago
The UK is already (getting) there. UK Universities are assessed by the "Research Excellence Framework" (REF). In order for work output (i.e. papers) to be considered by REF, final peer reviewed papers must be deposited into an ope
79.
A Formal Security Analysis of the Signal Messaging Protocol(eprint.iacr.org)
253 points by galadran 10y ago|220 comments
80.
by galadran 10y ago
Why should video codecs be patentable? I'm well aware they are currently but it seems ludicrous that you can patent the performance of a sequence of mathematical operations.
81.
by galadran 10y ago
From looking at the Reddit "master thread", everybody reporting they were hacked reports 2FA disabled. Everybody reporting no hack reports 2FA enabled. Sounds like reused passwords!
82.
by galadran 10y ago
Note: This explanation is FAR from precise and is only trying to give an intuition The key point is that qubits aren't limited to finite "multiple values", they can express an uncountable number of values. The best "shor