irundebian

23 ms·

211.
by irundebian 9y ago
The same logic would apply to an 8192 bit key. One more bit doubles the key space. Someone who is be able to crack 2048 bit keys, probably also has the opportunity to crack 4096 bit keys. It may not be cheap for your communication partners
212.
by irundebian 9y ago
2048 is enough.
213.
by irundebian 9y ago
Strict HTML, CSS and JavaScript parsing. One single error => Site won't be displayed. These lazy web devs need some more discipline!
214.
by irundebian 9y ago
I'm dreaming of a language which prevents bugs a priori so that there is no need for static analysis. I know Rust is out there, but I'm not sure if all state of the art knowledge is getting into the language specification. Is ther
215.
by irundebian 9y ago
If you write good code, there won't be that many FPs.
216.
by irundebian 9y ago
Is there something like a state of the art one time pad implementation which provides integrity and other security properties which are lacking with pure OTP?
217.
by irundebian 9y ago
What do you mean by "pure encryption method"? No one (no smart people) uses AES purely, but of course in some mode of operation such as GCM which provides integrity.
218.
by irundebian 9y ago
What languages / technologies did you use?
219.
by irundebian 9y ago
Of course law aren't magic, but of course they can have impact on society such as the reduce of weapons.
220.
by irundebian 9y ago
I'm not sure that HN is the confluence of the smartest minds in technology. Indeed a lot of very smart people are publishing stuff here, but for the first HN is rather a confluence of young more or less trend-driven technology enthusia
221.
by irundebian 9y ago
Ok. Could you give me the sources of these quotes? Or other reputable sources and papers who claim that the code quality of OpenBSD is high?
222.
by irundebian 9y ago
If you want to improve your C knowledge there are probably more efficient ways to do it instead of randomly reading OpenBSD sources such as reading more advanced C books or reading source codes of projects which are known for their good cod
223.
by irundebian 9y ago
How about using a static security source code analyzer and going through all findings? The very good ones, the commercial ones, are free to use for open source projects. That would be real benefit to the project I think.
224.
by irundebian 9y ago
The best start would be to read a book about operating systems such as Tanenbaums. Reading the source of an OS has a really really low signal to noise ratio in getting important knowledge about operating systems due to implementation detail
225.
by irundebian 9y ago
Have you ever thought about you are being toxic? No offense, really, I'm just arguing by anecdotal evidence: I claim that people who are putting too much value on their gender - be it their biological or their social - tend to poison t
226.
by irundebian 9y ago
Yes I hate C. > You clearly like software written in it, ie Debian. Yes, but not because it's written in C, but because of its functionality, which can of course be implemented in other languages. > Starting a new software projec
227.
by irundebian 9y ago
I think there so reason to be competent, whatever you mean it, to complain about C. What I learned about C is that you can never be competent enough for it. And that's the problem. A technology which isn't designed to get under co
228.
by irundebian 9y ago
And because I hate C I should run an operating system written in Rust or Ada or what? Don't understand what's so funny about that. > Also there are many projects even today where C is the only choice, like embedded programming,
229.
by irundebian 9y ago
The point is, if it's possible to have maximum control over the program without hardness of writing secure code. And it is, as Rust and Ada are showing.
230.
by irundebian 9y ago
Haha, real understanding. Any language which requires a standard of 700 pages should be seem suspicious. And any language, which lead to thousands of vulnerabilities needs to disappear.
231.
by irundebian 9y ago
Being a language not far form assembly shouldn't mean being broken and error prone.
232.
by irundebian 9y ago
You're totally right. But wannabe C experts will never accept that. Stupid broken language. The only valid reason why it should be used is for legacy reasons.
233.
by irundebian 10y ago
cperciva, sorry, but you're these type of people who should be kept away from security critical code. It's not that I would doubt in any way your deep knowledge of the C language, quite the opposite, it's just your arrogance,
234.
by irundebian 10y ago
Could you give me a reason why to use macros instead of typed static inline functions? If it's performance, where can I find something like a rationale documentation or empirical measurements of this list implementation?
235.
by irundebian 10y ago
No offense. The widespread of XSS makes it not less harmful. Although attacks with XSS vulnerabilities requires further actions by the attacked users, these are often easily provoked. IMHO a vulnerability shouldn't be rated by its triv
236.
by irundebian 10y ago
OLOL LITERALLY!?! What's your problem dude? A single XSS vulnerability can have severe impacts up to a compromise of a system when sensitive data from authorized users are stolen.
237.
by irundebian 10y ago
I still assume Signal is the most secure public messenger which has more than several thousands of users. Still I have the feeling, Signal behaves kinda broken and immature. The phone functionality never worked properly for me. Sometimes I&
238.
by irundebian 10y ago
Anonymous developers, no public code audits by renowned security experts. Haha.