ktta

50 ms·

511.
by ktta 9y ago
Every line of code written can be a severe vulnerability, not just code dealing with crypto. In case of crypto, being well-informed is good enough to not mess up those kind of implementations (on a theoretical level). The problems mentioned
512.
by ktta 9y ago
I'm also referring to the orgs who used Argon2 in production. If they move to the fixed version of Argon2 in libsodium, they'll have to make a plan to securely move to the correct implementation by hashing the passwords again. I
513.
by ktta 9y ago
I've always seen 'rolling your own crypto' as not being recommendation against writing your own library, but creating your own primitive. Sure, writing your own library is very difficult, but you have a simpler set of probl
514.
by ktta 9y ago
I'm amazed that the reference implementation of Argon2 had a bug. So that means anyone who deployed Argon2 today didn't really use Argon2 (I'm being pedantic), but something else? libsodium also got it wrong, so that brought
515.
by ktta 9y ago
This[1] was linked to in the post. I've been playing around with flutter, and saw a lot of code similar to this. Where is this style from? I've written apps in Java for Android but never encountered such style. The post refers to
516.
by ktta 9y ago
If you mean Jet Propulsion Lab, then no way. I'm sure they're better than that. The IP block is managed by INetU Inc, which was apparently a cloud hosting company now owned by Canadian telecommunications company Shaw Communication
517.
by ktta 9y ago
https://news.ycombinator.com/leaders It's crazy how Thomas has more than double the karma of the next highest person.
518.
by ktta 9y ago
I knew I saw him somewhere before. http://mailchi.mp/mit/how-ocw-transformed-a-learners-life Discussion: https://news.ycombinator.com/item?id=14514686
519.
by ktta 9y ago
Looks interesting. It looks like they are creating the CFD software for their own specific application. While that's cool and all, I doubt any other companies have the resources/motivation to write complex software from scratch, l
520.
by ktta 9y ago
Does anyone have an idea about what software they use to simulate this stuff? I'm wondering if they can even make use of the newfound GPU power or are just going ahead with ancient CPU based software because too much work has already b
521.
by ktta 9y ago
'AI' is often a delicate term (in the sense the real meaning is often hotly debated). It represents what many people worked decades of their lives for, but it is still really as hard and as abstract since the idea was first concei
522.
by ktta 9y ago
How does it compare with FLIF?[1] [1]: http://flif.info/
523.
by ktta 9y ago
>The drug war is fundamentally about the restriction of human rights and invasion of privacy. The drug war discussions will eventually end up with the argument about whether one has complete autonomy over their body, which isn't the
524.
by ktta 9y ago
KeepassXC has a command line option with the latest release.
525.
by ktta 9y ago
> no 1Password ChromeOS app (and I don't think it's really even possible for there to be something like that in ChromeOS) It is possible, but it is being deprecated[0]. Signal uses it currently, so it is viable to run a 'h
526.
by ktta 9y ago
Well this isn't true for codecs anymore. mpv and many other players support many codecs out of the box. The reason VLC has become slow it they keep on adding features. The whole application can pass off as professional video playing
527.
by ktta 9y ago
Because they didn't have the might of Rust Evangelism Strikeforce behind them
528.
by ktta 9y ago
What ever password manager you move to, chose something that will stay far away from your browser. And don't use anything that autofills your passwords. This includes KeePassHTTP.
529.
by ktta 9y ago
For setting it up as a router first, I recommend this[1] guide I usually build the software from source so I don't know if every thing will work fine for you. Nevertheless here are the package names I remember from when I first set it
530.
by ktta 9y ago
True, power consumption should be considered. I guess doing this would be a good choice if someone has a NAS already running. >you're much better off with something like an ER-X I pretty much recommend a plain jane router which can
531.
by ktta 9y ago
That's good to know, thanks for the correction
532.
by ktta 9y ago
When you have 1000+ torrents seeding 24/7, even the tracker lookups add up. Usually you aren't downloading. Most of the time, torrents stay idle which will make DNS requests a significant portion of the total traffic. Sure, this m
533.
by ktta 9y ago
Most routers just have a DNS cache, not a global TTL, sorry about the misunderstanding. I have it set up to be 1 day. Most websites have been setting up low TTLs like 1 hour or less because they don't want to take a chance in case of a
534.
by ktta 9y ago
Performance. Most routers also have DNS caches for the same thing. It is often recommended to use OpenDNS servers for privacy, but it is slower than your ISP's DNS or Google's. This is especially useful when you have an applicatio
535.
by ktta 9y ago
Often people go about doing this the wrong way. It is better to get two cheap routers and use one as an AP only. The AP only can be placed where ever you want so it'll have better coverage than a multi-antenna router any day.
536.
by ktta 9y ago
This might seem weird, but I use an old PC with a wireless card in it (get one with a good antenna, and connect wireless APs via ethernet if you want more coverage). I've put Ubuntu server on it, and it has quite a few advantages over
537.
by ktta 9y ago
>purportedly a bit more secure? The worst bugs in LastPass are: 1. Four months ago a bug was discovered by project zero[1] about how all of your passwords can be stolen just by making a user visit a webpage. Moreover, any code can be exe
538.
by ktta 9y ago
>I don't want a subscription service, I want something that keeps an encrypted file that I can put in dropbox.
539.
by ktta 9y ago
Best way is to google your phone model and see if it is in the list of affected devices list. Or you can get the chip's details by prodding with the adb shell. If you are the adventurous type, this[1] comment has links to the blog post
540.
by ktta 9y ago
Looks like a good fit on first look but I'm wondering about the architecture/compiler fit with the rest of pmOS. Especially with the ARM chips being so varied, a more popular language with wide arch support might be a better choic

More ›