kbolino

47 ms·

631.
by kbolino 2y ago
TXT records are 255 bytes or 2040 bits. This is plenty of space to support RSA-1024 keys even with a small prefix and after base64 encoding them. However, it is obviously not enough to support RSA-2048 which is the minimum recommended size
632.
by kbolino 2y ago
What is your definition of cracked? Collisions are easy to produce; there's one right on the Wikipedia page.
633.
by kbolino 2y ago
No, even setjmp/longjmp are not as powerful or dangerous. The issue is not the locality of the jump, but the lack of any meaningful code structure enforced by the language. Using setjmp and longjmp properly still saves and restores c
634.
by kbolino 2y ago
Ok, that makes sense. As far as I can tell, even truncated to "just" 122 bits, there's still no known way to generate a SHA-256 collision, so the MD5/SHA1 versions are comparatively vulnerable vs an hypothetical SHA256 U
635.
by kbolino 2y ago
Yeah, I think their reputation isn't what it used to be. But it takes a long time for these things to percolate up from developers and lawyers to management, and another long time for them to spread from IT-focused businesses to other
636.
by kbolino 2y ago
They sell to people who buy. I realize that sounds like a tautology, but most of us don't buy software (at least, not often) and instead we primarily use software. People who primarily buy software care about and optimize for very
637.
by kbolino 2y ago
Two modern groups of people looking different does not necessarily prove a lack of common ancestry. The people of the past in a certain place did not necessarily look like the people of the present in that same place. In particular, the rea
638.
by kbolino 2y ago
My experience was growing up in a semi-rural area in the U.S. in the 90s. At that time, DOS software was plentiful, but rarely purchased and usually shared over floppies. The users tended to be geeks, and so they had some pretty sharp tools
639.
by kbolino 2y ago
Could you provide an example of such a prohibition? I've never heard of that before. I doubt that the quality of the hash function is the real issue. The problem with MD5 and SHA1 is that it's easy (for MD5) and technically possib
640.
by kbolino 2y ago
At least for HDCP, that's exactly how it works. From the HDCP 2.2 spec [1]: > Device Key Set. An HDCP Receiver has a Device Key Set, which consists of its corresponding Device Secret Keys along with the associated Public Key Certifi
641.
by kbolino 2y ago
It's not clear to me how widely Cinavia is actually deployed. The Wikipedia article hasn't really been updated in over a decade, and that's where I'm getting my info from. However, the detection and enforcement can theor
642.
by kbolino 2y ago
It doesn't detect the act of recording live, it detects that a piece of media was obtained via recording. So, you can still point a camera at the screen and obtain a video file without any disruption to the original signal. However, th
643.
by kbolino 2y ago
In my experience, there was a big difference between DOS, where programming tools were relatively easy to find, and Windows, where they weren't. Until widespread Internet access, programming on Windows as a kid required finding the rar
644.
by kbolino 2y ago
There are a lot of games that will never make it to consoles because they don't play well (or at all) without a keyboard and mouse. It's also easier (sometimes much easier) to develop games on PC. That having been said, most gam
645.
by kbolino 2y ago
This feels like the biggest misstep that may impede the success of passkeys to me. It's not that surprising, though, since it's pretty rare to find genuine support for multiple authentication factors of the same type already. You
646.
by kbolino 2y ago
This fad was also helped, I think, by the memory architectures of the day. Without modern multilevel caches and ridiculously expensive cache misses, it might have seemed reasonable to converge on a one-size-fits-all structure. The cost of j
647.
by kbolino 2y ago
Drones can capture much higher resolution images, and from very different angles, than satellites. Both are useful, and neither really replaces the other. A high-res composite image taken from multiple angles and exposures can confirm or re
648.
by kbolino 2y ago
And now the Internet is largely a sterile place where the primary business model is built around advertising, selling "data" to "partners", and exploiting gamblers and addicts, while the companies most "saved"
649.
by kbolino 2y ago
China has faced less strict sanctions and has been able to engage in much more aggressive academic and industrial espionage than post-Soviet Russia. It remains to be seen whether, now that sanctions have ramped up, and access to Western&#x2
650.
by kbolino 2y ago
Desktop is much better than mobile in terms of developer and end-user freedom, but it's getting worse over time. It's becoming clear that desktop freedom is viewed by the major OS vendors as a holdover of a bygone era and not some
651.
by kbolino 2y ago
This has little bearing on desktop software, which usually doesn't go through the App Store. Apple does not (yet?) require review for traditionally distributed desktop app bundles or executable binaries. The developer fee is paid in th
652.
by kbolino 2y ago
I've never gotten local streaming to work, but that might just be down to the age of my "smart" TV though (which is now disconnected from the network due to lack of updates). But I have noticed that setting up a network print
653.
by kbolino 2y ago
This is just brain-draining the rest of the world for the short-term boosting of some myopic statistics. This isn't going to improve the employability of median-intelligence people, and in the long run, it's going to exacerbate th
654.
by kbolino 2y ago
I like this vision, but I'm not optimistic about it coming to fruition. IoT vendors want their devices phoning home over the Internet, it gives them traceability and platform lock-in.
655.
by kbolino 2y ago
I wouldn't expect the average person to set anything up. I'd expect the AP to isolate all devices by default. Most of these devices and their corresponding apps are just reaching out to "the cloud" anyway. It's not
656.
by kbolino 2y ago
I like the idea of isolating every client, or certain clients at least, but I don't see why this needs special apps or services. Just treat these clients as existing on their own VLAN segments and either get rid of the GTK (forcing bro
657.
by kbolino 2y ago
Yep, if you want wrapped errors in Rust, you use the anyhow crate. It leans heavily into dyn so has some performance tradeoffs, but it's roughly the same performance-wise as Go's error interface (which also uses a vtable under the
658.
by kbolino 2y ago
I don't agree, but having said that, this feels like an entirely predictable/justifiable perspective to hold, given the terrible design of net/http in the standard library. Of course it feels easier to just panic, it's n
659.
by kbolino 2y ago
If that was the case, then they shouldn't have bought ATi.
660.
by kbolino 2y ago
Digital phone audio, which was μ-law [1] rather than linear PCM, was not exactly uncompressed. However, the compression involved was very simple, and was designed to offer the 8-bit samples a higher dynamic range than linear PCM would be ca

More ›