lvh

54 ms·

571.
by lvh 7y ago
I asked that upthread; apparently the answer is "inspectability", they're updating the blog post to highlight that, and I have a hunch my suggestion is going to be the AD in AEAD :)
572.
by lvh 7y ago
The answer to your question is OAEP but I feel like I'd still be doing you a disservice there because I am convinced the answer ought to be box/secretbox or Fernet or AESGCM maybe -- but that hinges on my question about asymmetric
573.
by lvh 7y ago
Huh, yeah, sorry I definitely missed that. Could you ping me if you make that change? I'd love to read that bit.
574.
by lvh 7y ago
JWT is multiple layers of bad. My favorite summary is that it has poor implementations of a harebrained scheme designed to solve a problem you don't have. The idea that I need to read the header, which is unauthenticated, to parse the
575.
by lvh 7y ago
Firstly, great writing. Secondly, magic proxies are awesome. And pyca/cryptography instead of something terrible like pycryptodome! All great stuff. Some critique of the crypto bits, since I'm a crypto person. 1. Do you actually n
576.
by lvh 7y ago
In what sense are those two comments tone deaf?
577.
by lvh 7y ago
This is neat! When I first started reading and it described itself as "transforming nested data structures" I immediately thought of specter, which we use quite a bit at Latacora. We've published a library, eidolon[0], with c
578.
by lvh 7y ago
It’s been available that way for over a year: https://github.com/python/black/blob/master/plugin/black.vim
579.
by lvh 7y ago
pip is the default package manager for Python, and while anaconda knows how to install from PyPI, you just pip install things into anaconda environments. So, the answer is "pip".
580.
by lvh 7y ago
I've been working with GraalVM a bunch and one of the things I'm most excited about is that it also supports LLVM via Sulong. This is great because it means I finally have to care a lot less about native v JVM gaps, and it becomes
581.
by lvh 7y ago
What can systemd do better than GRND_NONBLOCK in the non-x86_64 case?
582.
by lvh 7y ago
I mentioned getrandom.
583.
by lvh 7y ago
The scheme we’re discussing XORs the two at the end, so that flaw doesn’t apply. Also: empirically, “kernel leaks CSPRNG” state does not seem to be as much of a problem as “userspace is convinced it knows better than urandom/getrandom”
584.
by lvh 7y ago
Do you mean if a PRNG is available? Because the answer is obvious if RDRAND is available: you don't do that because sometimes it fails, failure is almost always catastrophic but sublte, and CSRPNGs are not a bottleneck in almost all ca
585.
by lvh 7y ago
Is there a good reason this doesn't just use urandom/getrandom? This doesn't look like it's in the "we're so early in boot I haven't restored the random seed yet" case, for example.
586.
by lvh 7y ago
That is accurate :)
587.
by lvh 7y ago
You can tell ACM your CT preference! (But seriously, sure you’re right but for my audience (which is essentially Latacora’s and HN’s), CT is fine.)
588.
by lvh 7y ago
What do you think the median size of a Firefox release is, what do you think the resources (let’s call it US dollars FMV) are to audit that, and what do you think the resources Debian has to devote to it? Clearly more eyes are good, but...
589.
by lvh 7y ago
How do you audit Firefox updates? Because if the answer is “I don’t”, Mozilla already controls the most important piece of userspace code on your computer. And if the answer is “I don’t install them”, then everyone with a few grand to spare
590.
by lvh 7y ago
I'm sure there's a way to make your LE experience consistently suck but the way to run caddy for a static website has been the same for about as long as caddy has had support for automatic HTTPS, and that's also true for pyth
591.
by lvh 7y ago
Most people do not know what a manifest.json is or what sort of permissions they're handing to a random WebExtension. If you want your freedom from reviewed extensions: fine, get an unbranded Firefox, or Developer edition, and you get
592.
by lvh 7y ago
There are multiple versions of Firefox that do that: the Developer edition, and most of the unbranded versions.
593.
by lvh 7y ago
If you want to get rid of those and they're public certs: odds are they're in Certificate Transparency logs and you can monitor them from there.
594.
by lvh 7y ago
Certificate Transparency works pretty darn well for most usecases, we (Latacora) have found while trying to solve exactly this problem (or at least the figure out which certs exist that aren't being regularly re-issued part) :-)
595.
by lvh 7y ago
CRLs do not work in practice, and major clients routinely ignore them.
596.
by lvh 7y ago
Many cloud providers will make this process pretty much entirely automated. But let's say you don't want to do that: when is the last time the way you run caddy changed? Or the last time python-certbot-nginx changed?
597.
by lvh 7y ago
Sure: debranded versions ("freedom respecting") will also do that. You say walled garden, I see what random WebExtensions people install on their work laptops and think "yeah maybe someone policing this thing isn't the w
598.
by lvh 7y ago
The Developer edition allows that just fine.
599.
by lvh 7y ago
The developer edition allows that just fine.
600.
by lvh 7y ago
That's silly. Browser security is not one function. It's not even one team.

More ›