hannob

27 ms·

181.
by hannob 3y ago
The difference is of course that there are biotech applications. There won't be any QC applications for decades to come. If you believe any company today doing QC stuff will earn money ever, you're playing the really long game.
182.
Insecure Password Allowed Administrative Access to Electric Vehicle Chargers(industrydecarbonization.com)
2 points by hannob 3y ago|0 comments
183.
by hannob 3y ago
eprint.iacr.org has no institutional requirement, but it does have minimal standards. It takes a few days for them to review. It's not a real peer review, but they check that you don't just publish gibberish or spam or something o
184.
by hannob 3y ago
Oh, vixra has a reputation. It's the favorite preprint server for pseudoscience. Want to publish anything about free energy, homeopathy, or your favorite personal theory why einstein and darwin were wrong? Vixra is your place to publis
185.
by hannob 3y ago
> I wonder what a system with native bare metal apps would look like today and how far you can push down the hardware requirements while still having a snappy experience in - let's say - a basic office job (mails, sheets, documents,
186.
by hannob 3y ago
I'm not even sure that's so relevant. Ultimately, the question is: Is there a community of people willing to maintain it properly? And it appears to me that's Torvalds' position as well.
187.
by hannob 3y ago
Yeah, but then again, people will argue that in theory a virus infection could cause a co-infection with bacteria. That's the line I often hear when people justify taking antibiotics for a cold. It's probably true for some rare ca
188.
by hannob 3y ago
Iceland absolutely does do that. There are multiple icelandic datacenter operators trying to get european customers with the promisse of being powered by cheap renewable energy. (But Iceland's potential isn't as "infinite&quo
189.
Should we burn Methanol when the Wind does not blow?(industrydecarbonization.com)
2 points by hannob 3y ago|0 comments
190.
by hannob 3y ago
CVE-2015-3193 in OpenSSL, CVE-2016-1938 in NSS. There were more, it's been a while. Ultimately: things like a^b or a/b would return wrong results for certain inputs.
191.
by hannob 3y ago
The thing you linked says "default y" to "Allow legacy TIOCSTI usage". So yeah, you can disable it, no, it's not the default. There's also a related issue with TIOCLINUX and the paste functionality. (That will
192.
by hannob 3y ago
FWIW I wrote one of the papers re RSA padding oracle attacks, and I disagree with quite a few bits in this blogpost. Yeah, there are pitfalls in RSA, but so are there in elliptic curve algorithms. I'm not sure if I'd say RSA has m
193.
by hannob 3y ago
Well, yeah, you can: https://www.plundervolt.com/doc/plundervolt.pdf Paper is from 2019.
194.
by hannob 3y ago
Do you use doas on Linux? It is not protected against tty pushback attack: https://github.com/Duncaen/OpenDoas/issues/106 That's a pretty severe unsolved security issue.
195.
by hannob 3y ago
Last time I checked every alternative to Git was lacking some major feature that would immediately make it a non-alternative to me. (And I wouldn't even remotely call myself a Git power user.) For Mercurial, that was shallow clones. I
196.
by hannob 3y ago
It is a lot, but it's explainable. Such bugs tend to show up in crappy IoT hardware. IoT hardware often comes in large numbers. If you scan the IPv4 space for SSH hosts, most of the ones you'll find are IoT hardware.
197.
by hannob 3y ago
To give some easier explanation: This is an attack against faulty RSA implementations. There is a common optimization in RSA signature implementations that splits up an expensive mathematical operation into two smaller operations. If one of
198.
by hannob 3y ago
They're asking the wrong question. Can you make households self-sufficient with solar? Well, it'll probably work. But also, it's probably expensive. So the question is: should you make households self-sufficient? If you look
199.
by hannob 3y ago
A key idea behind all of this is to sell "qualified certificates". Which is another way of saying "expensive certificates". In the past, CAs sold EV certificates which gave you a nice green look in the browser bar and no
200.
by hannob 3y ago
Ok, this post lacks an important bit of information, and gets something wrong: The reason we disabled SSLv2 at scale is not that it is in itself insecure, or that it is old or anything. The reason we disabled SSLv2 is the DROWN attack. It i
201.
by hannob 3y ago
> SSLv2 is, in itself, harmless since no random user using their browser will ever use it. Erh... No. That was actually the main result of the DROWN paper and eventually the reason why everyone was disabling backwards compatibility with
202.
by hannob 3y ago
A combination of testing with ASAN and MSAN is pretty much always better than valgrind if you have source code. Though MSAN use can be somewhat challenging, as you need to have all dependencies built with MSAN, too.
203.
by hannob 3y ago
Yeah, and java applets + some more tech enabled by plugins. But I guess we always considered the "plugin-web" to be "different" in that regard.
204.
by hannob 3y ago
Interesting enough, I'm probably one of the few people who still has some theora videos on the web in some very old blogposts of mine. Some history for people who are not aware: Theora became somewhat popular in free software / op
205.
by hannob 3y ago
The algorithm that was broken is of course no longer used. The point is: Many of these algorithms are rather new. The fact that multiple post quantum algorithms have been broken that were seen as promising shows that there is a risk with th
206.
Making Glass Without Fossil Gas(industrydecarbonization.com)
3 points by hannob 3y ago|0 comments
207.
Estonia's capital made mass transit free a decade ago. Car traffic went up(fastcompany.com)
26 points by hannob 3y ago|15 comments
208.
by hannob 3y ago
> RowHammer and the other speculative execution are really interesting attacks, but have they ever actually been used in the wild yet? It's a question I've been asking myself for many highly publicized vulns. I once made this t
209.
by hannob 3y ago
Mining is actually one of those other renewable "problems" that is, well, somewhat real, but way overblown in many discussions. I mean, yes, we will need some new mines. We'll have to mine different things. But overall, renew
210.
by hannob 3y ago
> if you're importing solar panels built with Chinese coal and deploy them in Europe / Northern US, you're not actually decarboning anything, and instead you're increasing the carbon footprint but move it abroad. That

More ›