healsjnr1

12 ms·

61.
by healsjnr1 8y ago
I think what is often lost in this debate is that the are levels of decentralisation. Federated networks, committee structures, even the current miner / node structure all have different levels of power concentrated in different amount
62.
by healsjnr1 8y ago
Given where they are, it seems that now the major abstraction they are missing is type safety. Strict types that allowed a monadic structure would simplify this whole mess into a series of maps and folds. Not only does this add the strictu
63.
by healsjnr1 8y ago
This is another thing that adds to my deep sense of shame to live in this country (sadly, that list is long and growing). This bill does nothing to prevent the kinds of things it is intended to prevent. The apps this law targets were engine
64.
by healsjnr1 8y ago
I am constantly surprised by this point of view. Blockchain is a solution to a number of problems that were previously unsolvable, yet so much of the discourse is around the idea that decentralised trust doesn't really solve any useful
65.
by healsjnr1 9y ago
This feels like it comes down to values more than security. Bottom line is you are intercepting my traffic as an employee. I've worked in these places and I won't work for them. It places trust in my employer and other employees (
66.
by healsjnr1 9y ago
I think there is potential for using smart contracts for traditional agent based hotel bookings. Settlement of these booking between the agent (ie., booking.com) and the hotelier is a messy and complicated process. It varies from invoicing
67.
by healsjnr1 9y ago
One thing in particular I dislike about this is that the author lumps all crypto currency into the same bucket. As the prime example of this, ethereum and Bitcoin could not be more different. Work done by groups such as 0x mean that these r
68.
by healsjnr1 9y ago
This article has been so useful to me over the past 5 years. I've worked at a number of places that have tried building their own signing schemes and this, plus the definition of the later AWS Signatures that resulted, have helped buil
69.
NBN Co builds fiber node on the edge of flooding river(delimiter.com.au)
2 points by healsjnr1 10y ago|0 comments
70.
by healsjnr1 11y ago
I think it's also because people on this community have worked at corporations where toxic workers aren't the problem--it's toxic managers. If they are going to do a study on the impact of toxic workers on the workplace, sure
71.
by healsjnr1 11y ago
On the other hand, Semco is an example where this kind of thing worked really well. Their model of empowering employees, allowing innovation and splitting the company into a large number of micro-businesses had dramatic impact and turned th
72.
by healsjnr1 12y ago
This is the worst kind of comment and what is wrong with Hacker News. No one cares about your intellectual superiority, or the fact this might be a special interest for you. This article wasn't written for you, you already know and und
73.
Dota 2: The International prize pool hits $10 Million (mobile.theverge.com)
3 points by healsjnr1 12y ago|0 comments
74.
by healsjnr1 12y ago
About 5 years ago I worked for the guys [1] that provide the journey planning api behind NRE, the train line and most other UK rail journey planners. We built a public api that as far as I know is still running. It was pretty usable and the
75.
by healsjnr1 12y ago
Wow. These .Net guys really missed the point didn't they? I agree with your points completely. The question was 'are these changes enough to bring people over to .Net? '. Most of the responses are all along the lines of: your
76.
by healsjnr1 12y ago
This has brewing for so long. One example is the incident with Ueli Steck last year [0]. Regardless of what you think of what happened, it really highlights how much tension there is between the Sherpas and the 'western' guides. [
77.
by healsjnr1 13y ago
I think that's a very long bow to draw... Especially seeing as the trouble shooting guide for bsafe libraries has a section dedicated to speeding up the toolkit which advises switching to HMAC. I'm not sure about you, but when I s
78.
by healsjnr1 13y ago
This is almost certainly not true given the fact that ECDRBG is chronically slow (think orders of magnitude). Any developers working on implementations which generate a reasonable amount of random data switch to HMAC very quickly.
79.
by healsjnr1 13y ago
For me that whole scene was topped off by the music which was by God Speed You Black Emperor! if you haven't listened to these guys check them out.
80.
by healsjnr1 13y ago
Right, so I should be ok about a company that recently lost 7 million passwords that were 'encrypted' using only SHA1, suddenly getting access to a whole raft more passwords? Access to this many passwords is a threat even if my pa
81.
by healsjnr1 13y ago
This is such an enormous call to make. America may have a good system for protecting free speech, however in terms of many other points their political system is so broken as to be almost unusable. Did everyone just forget that a relative
82.
by healsjnr1 13y ago
To be honest, nearly every developer will change it from the default as soon as they run a stress or performance test using a library that has dual ec as its default (e.g. BSAFE Crypto-J). Dual EC is order of magnitudes slower than HMAC. It
83.
by healsjnr1 13y ago
Agreed. Let's face it, NIST and CMVP have been shoving EC-DRBG down everyone's throats for years. This is in spite of the whole conspiracy around EC-DRBG being achingly old. There is no new information, no fresh concerns. Anyone r
84.
NIST reopens draft recommendation on random number generation for comment [pdf](csrc.nist.gov)
140 points by healsjnr1 13y ago|46 comments
85.
by healsjnr1 13y ago
There is no magic number needed to make a device "cryptographically secure". It depends entirely on the operations being performed. In general if you generating Keys, the DRBG or PRNG used in key generation needs to be seeded with
86.
by healsjnr1 13y ago
Agreed. The whole thing is a bit blase. Also, anyone else find it concerning that they advocate presenting /dev/urandom as SHA1-PRNG when it isn't? I don't even see why they did this? They could have wrapped the default
87.
by healsjnr1 13y ago
All this discussion about dota (and LoL etc) boil down to one thing: you NEED to play as a team. A lot of games involve team work, but it isn't crucial: that is you'll play better if you work as a team, but you don't need to
88.
by healsjnr1 13y ago
Board of Canada. Need I say more?
89.
Embedded systems vendors are careless according to Metasploit author(theregister.co.uk)
1 points by healsjnr1 13y ago|0 comments
90.
by healsjnr1 13y ago
I also wouldn't put too much value in a security article served on page using mixed HTTP and HTTPS. This shows a distinct lack of regard for and understanding of security.

More ›