Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
mehrdada
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
71 ms
·
661.
▲
by
mehrdada
13y ago
Why wouldn't it? The author of the file will be the copyright holder by the virtue of authoring it. If she does not get rid of it, she still remains the copyright holder. Copyright does not switch owners purely by the virtue of distrib
662.
▲
by
mehrdada
13y ago
One annoying thing about OpenSSL is its license. I hope The Better Replacement™ fixes that as well (especially if its name gets to contain the string "Libre"), and it is not going to happen by forking OpenSSL.
663.
▲
by
mehrdada
13y ago
There's one, admittedly theoretical difference, at least: there is such a thing as perfectly (information theoretically) secure symmetric encryption scheme (regardless of the computational power of the adversary), but asymmetric crypto
664.
▲
by
mehrdada
13y ago
> I read Schneier's & Ferguson's Practical Cryptography years ago I cannot take anyone who advocated MAC-then-Encrypt, in 2010, seriously (in the book Cryptography Engineering: Design Principles and Practical Applications
665.
▲
by
mehrdada
13y ago
> to gain valuable intellectual property and future revenue streams ...and neutralize the risk of potential competitors by effectively killing them
666.
▲
by
mehrdada
13y ago
> yes electric motors need oil changes too "Oil change" for an electric motor is fundamentally nothing like the oil change you do for an internal combustion engine. A piston engine operates at much higher temperatures, and c
667.
▲
by
mehrdada
13y ago
I may have been unclear: I am claiming that you cannot be a good protocol designer without sufficient expertise in cryptography AND you cannot be a good implementer without sufficient expertise in protocol design (I have updated my OP to ad
668.
▲
by
mehrdada
13y ago
> seL4 is 9000 lines of C and took 11 person-years to verify. How big is OpenSSL? Total market cap of the top three tech companies is more than a trillion dollars. Even a hundred times more resources is affordable for them given the crit
669.
▲
by
mehrdada
13y ago
I disagree with the premise of your question. I think the overlap is larger than it looks like on the surface. I have come to believe that you cannot do solid secure protocol design without a firm grasp of the basics of encryption schemes.
670.
▲
by
mehrdada
13y ago
> too complex to verify There is a verified optimizing C compiler, CompCert. Admittedly, it is not gcc, and it is not easy to do, but still. Writing a verified SSL implementation is probably not more difficult than that.
671.
▲
by
mehrdada
13y ago
"you cannot expect a person working in academia to be held to the same standards as professionals working in the industry for many years" This is absolutely BS, especially in security and cryptography. Most security related code w
672.
▲
by
mehrdada
13y ago
This blog entry is a bad one. Synchronization is a real problem. Dropbox and others are doing it quite well and will benefit from it. Microsoft's solution was subpar, but it is not a problem misidentification issue at all.
673.
▲
by
mehrdada
13y ago
Claiming to be an "expert" in C++ is one of the biggest red flags I can see in one's resume. The majority of people I've seen making that claim think of C++ as "C with classes", hence not even having a clue abo
674.
▲
by
mehrdada
13y ago
The zombie certainly still continues to live on shitton of computers across the globe running unauthorized copies of Windows XP for customers who couldn't care less about official support from Microsoft as they never had it in the firs
675.
▲
by
mehrdada
13y ago
I started using DOS to run games at around 4, when my dad bought a PC, and taught myself batch programming and QBASIC when I was 6, so I think the ages you mentioned are probably correct. (For many months, I had no idea there is such a thin
676.
▲
by
mehrdada
13y ago
Relatively short description of the design goal: The goal of an encryption scheme is to provide confidentiality. It is important to know that most traditional encryption schemes, like block ciphers in CBC, CTR, OFB modes, do not provide any
677.
▲
AEZ: An Easy-to-Use Authenticated Encryption Scheme
(cs.ucdavis.edu)
29 points
by
mehrdada
13y ago
|
3 comments
678.
▲
by
mehrdada
13y ago
The raison d'etre for Apple's LLVM-based compiler was avoiding GPL3 restrictions of having to publish source code, it seems. They are frequently laggards in publishing parts of LLVM they care about and think of as competitive ad
679.
▲
by
mehrdada
13y ago
KHTML was licensed under LGPL. Releasing the code was not a choice, but an obligation.
680.
▲
by
mehrdada
13y ago
I call April fools: none of the models they advertise support the "upgrade" to 1TB magnetic hard drive, which they list in optional upgrades. When was the last time you saw a magnetic hard drive with PCI Express interface? :-)
681.
▲
by
mehrdada
13y ago
Google's Portable Native Client essentially does something similar: https://developers.google.com/native-client/dev/
682.
▲
by
mehrdada
13y ago
I am really curious about this as well. I would be surprised if there is no YC alum with the opposite opinion. Even if they are wrong in their conclusion, I would be very interested to see a reasoned negative perspective on the value of YC
683.
▲
by
mehrdada
13y ago
Indeed. Having had quite a bit of experience with ACM-type competitions, I believe it is super-important for technical coding questions not to leave room for misinterpretation (especially when the key point being tested relies on the accura
684.
▲
by
mehrdada
13y ago
>In order to be a lawyer, you need to complete law school. Not in California.
685.
▲
by
mehrdada
13y ago
That's exactly the experience I had with Resharper when I installed it (and subsequently removed it for good after a few days) years ago when I still wrote C# code. I never understood the "Resharper is essential" attitude. Pl
686.
▲
by
mehrdada
13y ago
In a way, it's good that things like this happen. Makes it much easier to convince gullible laypeople that the Imaginary Property laws they are brainwashed to believe to be universally good for the society are, in fact, directly contra
687.
▲
by
mehrdada
13y ago
If no one is doing it, perhaps it's worth trying?
688.
▲
by
mehrdada
13y ago
If only non-technical people cold emailing programmers suggesting 50-50 cofounder partnerships knew such a list existed. Precious ideas! Not one, but MANY!
689.
▲
by
mehrdada
13y ago
I don't disagree that there is a shortage of great programmers, but another problem is that people are generally not willing to pay 100x (or anything close to that) for a 100x programmer. Often they don't even realize whether a
690.
▲
by
mehrdada
13y ago
> it's that very few good engineers come in the door I have one possible answer for this issue: Well, no one in the Valley (to best of my knowledge) really advertises that they are going to pay a meaningful multiple of what's c
More ›