maxbond

247 ms·

3181.
by maxbond 8y ago
One might also consider using something like `map(process, filter(cond, items))`
3182.
by maxbond 8y ago
Function + return seems like a good solution, but I'd rather not keep additional state or use `raise` (ie socially acceptable GOTO) when the language has a primitive for this. You shouldn't use a feature just because a language ha
3183.
by maxbond 8y ago
I also don't think it's appropriate for a cryptography paper to cite 4 articles about breaches and 0 articles about signing, and to mention the word "cryptography" 0 times and "signature" once. Seems like the a
3184.
by maxbond 8y ago
Is the substantive contribution here establishing a chain of custody from a single signature, rather than a chain of signatures? I only skimmed the paper, but I don't see how it would help us investigate breaches (wouldn't the att
3185.
by maxbond 9y ago
It's an interesting question. For me, the difference is that obscurity strategies are ad-hoc and unproven and perhaps unprovable. We should be able to make a strong argument that our systems have particular security properties, such as
3186.
by maxbond 9y ago
Don't think of it as a security layer, it won't serve you. Don't link to your admin interface from your homepage, that's asking for trouble, but don't expend additional effort to create obscurity thinking you'r
3187.
by maxbond 9y ago
If your adversary decides the easiest way to get your data is to kidnap & torture you, you're probably doing a really good job. This sort of thing is called "security through obscurity" and the consensus is that it doesn&
3188.
by maxbond 9y ago
They put all their effort into looking legitimate and none of it into being legitimate, which confers a certain advantage.