juhanima

12 ms·

61.
by juhanima 11y ago
> the browser has no idea when you are supposed to be > operating on a secure channel (HTTPS) Agree about the sentiment, but there are some ways to help this. The server can for instance tell the client to always require https: https
62.
by juhanima 11y ago
Unless you are only dreaming of thinking, of course
63.
by juhanima 11y ago
No. Surviving to 1941: 1,800, wartime mortality: 700, surviving to 1946: 1,100. 700/1,800 = 38%
64.
by juhanima 11y ago
And even without any other source of trust, anyone who is willing to go through the automake/config hell, already scored some initial trust points. I rest my case.
65.
by juhanima 11y ago
Yes, that is one of the things that turned out to be a bad idea. That's why it was dropped. Look, it's all about trust management. If you trust everyone's good will, like in an academic community, it's fine. If not, you
66.
by juhanima 11y ago
This might be related to another article about OLE execution, to cast a shadow of doubt that it is not an isolated habit. Having outside stuff executed when not meaning to is always bad. I for one would be badly disappointed, if tar xvf une
67.
by juhanima 12y ago
Proceedings of the 11th USENIX Security Symposium Pages 171-190 USENIX Association Berkeley, CA, USA ©2002
68.
by juhanima 12y ago
Not a terrible idea at all, IMHO. Isn't the core idea of OSS to enable those who use the software to modify it and keep maintaining it? It doesn't mean you have to give it to everyone else as well for free. One reasonable choice w
69.
by juhanima 12y ago
Not being happy with what you have accomplished so far is a sign of greatness. Once you feel you have achieved enough, you become complacent. Do not feel inferior. As long as you feel there is room for improvement, you will keep improving.
70.
by juhanima 12y ago
Amen
71.
by juhanima 13y ago
Yes, but you don't really need the Makefile. Just check out README.md and do as it says, and it should build just fine. Actually just $ gcc -o heartleech -lcrypto -lssl -ldl heartleech.c might work dependening a bit on the distro. Seem
72.
by juhanima 13y ago
When for instance an AES-key is being used by OpenSSL, it is put into a 'struct aes_key_st' which is not random at all but quite easily recognizable when scanning memory. The Cold Boot attack paper by Halderman, Schoen et al. here
73.
by juhanima 13y ago
That's a pretty old list. Just to name one, I would recommend taking a look of Radamsa https://www.ee.oulu.fi/research/ouspg/Radamsa ...from the Oulu University. It's more like a framework for generating
74.
by juhanima 13y ago
> via an open and largely unencrypted internet connection. Doesn't have to be that way, you know. You can use VPN, SSH, OTR or any other way to secure your communications, if the endpoints can be trusted at least to some extent.
75.
by juhanima 13y ago
Going from $21 to $1410 in 90 years would be about 4.8% price increase aka inflation in a year.
76.
by juhanima 13y ago
Maybe the whole concept of genius is a bit aged, weird and odd to start with? A glorified genius-concept comes uncomfortably close to the concept of a führer. I think all men are created equal and when someone looks way smarter than the res
77.
by juhanima 13y ago
How about this one? http://www.justice.gov/atr/cases/f3800/msjudgex.htm The relevant chapter is III.H.64: "An aspect of Microsoft's pricing behavior that, while not tending to prove monopoly power,
78.
by juhanima 13y ago
Not exactly a new idea. Here is some prior art http://openaccess.uoc.edu/webapps/o2/bitstream/10609/14761/6... http://www.computer.org/csdl/proceedings/ares/2009/
79.
by juhanima 13y ago
> they used legal process They used a secret legal process. There, fixed that one for you!
80.
by juhanima 13y ago
Yes, check out the many variations of the EAP and PEAP authentication protocols. Client authenticates the access point by its certificate, client gets authenticated by his/her client certificate. While some combinations have some flaws
81.
by juhanima 13y ago
That is just sad. Why do you think most people get nothing out of art? Do you not consider Bach's fugas art? Or the Brothers of Karamazov? Or the statue of Nefertiti? I suppose you must mean that most people do not get an immediate mat
82.
by juhanima 13y ago
Coupled with the rest of the backed up data, it doesn't really matter if the SSID were not unique.
83.
by juhanima 13y ago
Actually, fear of Russia is the most powerful argument of the right-wing types. That is the very reason why Sweden has been eager to co-operate and assimilate with the west. Luckily for them, Finland has always been there to buffer and prot
84.
by juhanima 13y ago
Goes to show that if you have the means, you'll come up with the ends, eventually. I agree, a very good point.
85.
by juhanima 13y ago
The Nobel peace prize is actually given out by a committee nominated by the Norweigian parliament. Alfred Nobel did'nt trust his countrymen in this matter.
86.
by juhanima 13y ago
960 boxes, representing 80 years.
87.
by juhanima 13y ago
Long Term Support
88.
by juhanima 13y ago
Nothing wrong in reversing entropy, if you do it by adding energy into the system. I guess shooting photons counts.
89.
by juhanima 13y ago
It doesn't. By definition, translation should not add meaning, just preserve the original. It is not possible to turn an arbitrary text into poetry by any mechanical means. A poem by Ginsberg or any other good poet is the densest mediu
90.
by juhanima 13y ago
AES is not unbreakable, just very hard to break. Schneier in 2009: http://www.schneier.com/blog/archives/2009/07/another_new_ae...

More ›