maqp

38 ms·

421.
by maqp 6y ago
PGP lacks forward secrecy. E.g. the Iranian government can collect every PGP-message you ever send, and if and when they compromise your private key, they can retrospectively a) decrypt your entire message history, even if you've delet
422.
by maqp 6y ago
>So if it did become popular it would eventually be a serious problem and would need to be fought against. It already is.
423.
by maqp 6y ago
Usernames are coming.
424.
by maqp 6y ago
Except Snowden said he uses the app everyday and is still alive. OTF money doesn't come with strings attached, if you can _prove_ otherwise, you might actually have something valuable to contribute to this conversation, but now it&#x27
425.
by maqp 6y ago
It's useful when e.g. Roger Dingledine who represents the entire Tor Project wants to make a public statement. It's pseudo-intellectual BS when some random GitHub account with edgy repos like https://github.com/stu
426.
by maqp 6y ago
It is proof that someone with a copy of the private key posted that comment. Also this https://xkcd.com/1181/
427.
by maqp 6y ago
See my comment from 2019 https://news.ycombinator.com/item?id=21425897 It's still relevant.
428.
by maqp 6y ago
Pidgin. A flock of zero-days flying in formation. If you're going to use it, PROTECT CONTENT by using the OTR end-to-end encryption plugin https://otr.cypherpunks.ca/ WARNING: OTR is opt-in E2EE for every session, and
429.
by maqp 6y ago
Hmm fair point. I still feel with Pac-Man etc. the points roll on an odometer you look at the end, it's not a popup prize every time you do something right. But there's plenty of early examples, such as SMB's "1UP".
430.
by maqp 6y ago
Thanks! Just watched the film (on Wikipedia). Oh the vileness, the violence. I'm now completely convinced marijuana is the devil's lettuce! Don't just tell your children, TELL EVERY CHILD! EDIT: to add, people, watch the 1938
431.
by maqp 6y ago
Few more ideas: 1. When I quit Facebook, I first started disabling my account but that didn't work, at all. It just brought me back. Every time. I realized it wasn't a feature for deleting account, it was a pressure relieve valve
432.
by maqp 6y ago
If there only was a list of chipsets with open source drivers https://en.wikipedia.org/wiki/Comparison_of_open-source_wire...
433.
by maqp 6y ago
Qubes is fantastic but as a PSA the hypervisor's kernel doesn't support newer GPUs such as AMD rx5000 (AFAIK rx580 is the newest supported one). Learned this the hard way. Qubes 4.1 will bring the support, once it's complete
434.
by maqp 6y ago
Agreed. I hope the guide goes as far as to start explaining how AES-NI can be utilized, and how constant time implementations can be written. I think the only improvements we can expect for AES (considering it's standardized) is wider
435.
by maqp 6y ago
It's always this: AES-CBC with 1) no authentication whatsoever, or 2) fixed IV, "but it's random, I threw the dices myself!!", or 3) fixed key, no forward secrecy of any kind
436.
by maqp 6y ago
That tutorial looks really cool. I'm slightly concerned with the tutorial leaving the implementation details to the user, and the tutorial basically saying: "Remember: to test your function, you can use the test vectors from the a
437.
by maqp 6y ago
There are situations where the Pyhton random module can provide easy API for cryptographically unpredictable events. E.g. you can pick random words for passphrase from wordlist with random.SystemRandom().choice(word_list). SystemRandom is a
438.
by maqp 6y ago
Signal is one of the few good ones that show promise. They manage to deliver usable features. One fantastic thing is extremely picky userbase that's nagging about small details in the community forum. The developers seem to really get
439.
by maqp 6y ago
Their business model will increasingly be data. They will most likely start monitoring content to look for your preference of Doritos they can advertise you. People won't abandon Discord until all your private chat/call logs are h
440.
by maqp 6y ago
The need to setup bridges negates the privacy benefits, it breaks the opportunistic E2EE when copies of all messages are sent to e.g. Telegram servers that stores them effectively in plaintext. When the main goal is to invite people to some
441.
by maqp 6y ago
Serverless architecture in many cases leaks the IP-address to the opposing party (without by-default anonymization via Tor). Cryptography is just math, nothing magical happens when p2p is applied, there's still a MITM risk, but there&#
442.
by maqp 6y ago
Clients always need a way to re-negotiate keys in case one user decides to switch to new device and not import keys. The problem is, say a MITM attack really happens. What is the user going to do? Will they assume it's a bug, will they
443.
by maqp 6y ago
You're welcome. It looks like it's actually a common use case for the cheese https://en.wikipedia.org/wiki/Parmigiano-Reggiano#Uses I just discovered it when I threw in some greens on top of my pasta+ragu and
444.
by maqp 6y ago
It has more to do with the glycemic index of the food, that is now satient it is. 300kcal of rye bread (low GI) keeps your blood sugar much more even much longer than 300kcal candy bar (high GI). Both are "processed foods" but one
445.
by maqp 6y ago
AFAIK it's just fructose in the absence of fiber that mostly goes into fat by default. Glucose is mostly stored as glycogen in muscle and liver, but excess glucose is also stored as fat. I fully agree with you wrt sweet foods, they don
446.
by maqp 6y ago
Decreasing portion size tends to make your stomach smaller which will reduce the amount of false sensation of hunger felt when the stomach empties itself. Smaller portions more evenly distributed might be beneficial. The change should be gr
447.
by maqp 6y ago
Nobody wants to calculate everything from scratch again and again. Thus I wrote a program that does 99% of heavy lifting. It contains a database of ingredients I commonly use and their nutritional values. I have a set of recipes that I tend
448.
by maqp 6y ago
Been doing similar research on same topic over the past few months, and I can say strict calorie counting is definitely the easiest way: It's incredibly easy to accidentally exceed maintenance calories which will kill the progress. Som
449.
by maqp 6y ago
CVErsion.com would've also been a good domain name ;)
450.
by maqp 6y ago
In retrospect I should have read it first, I just ran a quick search on standard lingo i.e. "air gap", to see if that was the case, and I assumed it wasn't when the search yielded no results.

More ›