midas007

21 ms·

211.
by midas007 13y ago
I trust you. (You wouldn't have written it.) In a small shop, a single person can easily be a huge liability. There's usually nowhere to hide because everyone has to be delivering on overall execution. If cofounders are from en
212.
by midas007 13y ago
Sed awesome. Also, disappointed no one has blatantly embedded https://github.com/progranism/Bitcoin-JavaScript-Miner to put all this time wasting to good u$e.
213.
by midas007 13y ago
Totally sucks. Code reviews and factual evidence of production maintenance concerns might help. (Mgmt is likely to dismiss concerns as whining unless there is clear evidence of a problem.) Can you change the variable names and throw some
214.
by midas007 13y ago
Having dev evangelists presenting cool shit gets people aware of your platform and it's free marketing, the best kind. Further, Java, Python, Ruby, Obj-C, Android and C# isn't complete. [0] JS for browser front-end and node back-
215.
by midas007 13y ago
Yes. Raw entropy values need to be first mixed in an entropy pool first in some way that's not easily predictable. Fortuna's entropy pool is a high-quality algorithm / system that happens to be part of a cryptographically s
216.
by midas007 13y ago
Ad hominem attacks and claims of moral superiority also have nothing to do with NIST allowing Dual EC DRBG to be backdoored and this entropy source being suspicious.
217.
by midas007 13y ago
Or that because it comes from NIST I should trust it because some unrelated persons have won awards. Let's not forget a likely backdoor that was either consented to, or worse, permitted with extreme incompetence. [0] Do you work for N
218.
by midas007 13y ago
You presented my argument in argumentative manner as something different. None of this has nothing to do with NIST's reputation for evaluating crypto systems and guiding standards. So please give up trying to say how great their weig
219.
by midas007 13y ago
Spurious red herring... the OP topic is crypto / CSPRNGs.
220.
by midas007 13y ago
Maybe you're not reading the same words... Nobel snobels, still has nothing to do with crypto. Thank you for arguing my original position for me.
221.
by midas007 13y ago
It doesn't take any energy to leave a cell phone at home before leaving for an airport. On day four, I can assure you, you'll still be alive, worrying about your HN karma, taxes or whatever. What people most often search the enti
222.
by midas007 13y ago
Try out concepts as quickly and cheaply as possible. It's hard to know what works without real experiments, because idea guys think they've found the Fountain of Youth when they've just inspired people with charismatic snake
223.
by midas007 13y ago
The question then: is lying to people kinder than freaking them out with the truth?
224.
by midas007 13y ago
So if one happens to own or operate an early Patriot battery, wait until the last possible moment to fire it up so accuracy doesn't go to shit. Wow. Engineering maths fail.
225.
by midas007 13y ago
Please, allow me to paraphrase 'pg: pedigree is for suckers. These data points have absolutely nothing to do with practical, trustworthy crypto standard processes or confidence in their ability to due-diligence systems.
226.
by midas007 13y ago
Yeah, they've burned almost all of their trust by acquiescing tech leadership to NSA agenda. Further, weights and crypto are night and day. I'm sure they have the best clocks and reference weights, but everything that comes out o
227.
by midas007 13y ago
That's a choice. Leave the cell at home. Pickup a burner in country only when you need it. Problem solved. It's up to the individual to actually unwind or stay burned out.
228.
by midas007 13y ago
Box needs to monetize on enterprise add-ons. There's a huge pile of cash there if they hustle ahead and steal Dropbox's lollipop. Further, nurturing and gobbling up feature plays. Gotta pull off a "Siri." Finally, tons
229.
by midas007 13y ago
Another SV thing.. being able to fire your board: priceless.
230.
by midas007 13y ago
Yup. 100% of nothing is still nothing.
231.
by midas007 13y ago
Sabbaticals rule. Surfing in Bali, traipsing through Patagonia, jump on a freight train or choose your own adventure.
232.
by midas007 13y ago
Who in their right mind would trust anything NIST offers considering Dual DRBG EC? Best bet is to use many entropy sources including local hardware (ie sound card audio input) mixed in a fortuna entropy pool.
233.
by midas007 13y ago
So probably not Diodes then. It's interesting how this is boils down to existing malware strategies but with a how to. They're probably not going to type this stuff up in a wiki anymore going forward, shift to in-person training
234.
HN PSA : Check your ruby gem signatures
1 points by midas007 13y ago|0 comments
235.
by midas007 13y ago
Then RubyGems (thoughtbot) would be worth more after gem signing security is set to MediumSecurity by default (warn on unsigned gems) and certificates are managed. Can do it today yourself instead... ~/.gemrc: gem: ... --trust-po
236.
by midas007 13y ago
Definitely. John Gilmore also mentioned this book on a stanford forum.
237.
by midas007 13y ago
One encourages the other. But yes, it's "throw 'em away forever."
238.
by midas007 13y ago
This is a great teach aid, hits the mark. Further, if this style of material were applied to crypto (gpg), more people might be comfortable using it.
239.
by midas007 13y ago
Ahh, the GUS (Gravis Ultrasound), Mode X, Borland compiler and Slackware days. When just getting Linux installed was a chore.
240.
Unicorn Time – Popcorn Time lives on(github.com)
4 points by midas007 13y ago|1 comments

More ›