mukyu

32 ms·

271.
by mukyu 16y ago
The EFF[1] mapped out the CA structure of the internet and it is easy to see it is anything but a monopoly or US-centric. [2] DNS is not used for key storage as DNS is not authenticated. There is nothing stopping your registrar from being a
272.
by mukyu 16y ago
The only identity verification done by the vast majority of CAs is that you must be able to reply to email sent to one of a few email addresses at the domain you are trying to get a cert for. There have even been cases where people have got
273.
by mukyu 16y ago
That is key continuity. It works for ssh because you generally know the parties you are trying to connect to ahead of time and have ways to communicate with them (to confirm keys etc). You do not have the same relationship with 99.99% of th
274.
by mukyu 16y ago
There are multiple software packages that make it trivial to set up a rogue ap or attack a physical network (with say, arp spoofing). The same is true for proxies that will attack ssl by replacing any certs that it needs to. These are not
275.
by mukyu 16y ago
The attacks used against RC4 as used in WEP are not applicable to RC4 as used in TLS connections. If you do not use related keys and discard at least the first 256 bytes, RC4 is fine. It is not that they implemented RC4 incorrectly, but tha
276.
by mukyu 16y ago
There are not many cases where you can read traffic, but not intercept/inject your own. All you need to do is generate your own cert for the site and the user will encrypt their traffic to you . This is why the lack authentication means th
277.
by mukyu 16y ago
A self-signed cert provides effectively zero protection. You have no guarantee of the identity of the site and there is no confidentiality in your traffic. Key continuity (the only assurance you have that the cert might be legit) is not e
278.
by mukyu 16y ago
"Males and females attend college at an almost even rate." This isn't true. In 2008 it was 57% female/43% male and steadily growing more lopsided. [1] [1] http://nces.ed.gov/programs/coe/2010/section1/indicator07.as...
279.
by mukyu 16y ago
I find it odd that Sony is allowed to infringe on the privacy rights of thousands of innocent people all to help them prove something that it is their duty to do in the first place. None of these individuals are even being notified that th
280.
by mukyu 16y ago
It sounds more like your continuous deployment resulted in deploying a change without considering the ramifications of it. Can you really consider that a 'win'?
281.
by mukyu 16y ago
SXSW is not a tech conference.
282.
by mukyu 16y ago
Neither is.
283.
by mukyu 16y ago
This reminds me of http://news.ycombinator.com/item?id=2245149 All of this talk strikes me as coming from people that have implemented neither large web applications nor distributed or p2p applications at all dreaming up schemes with no i
284.
by mukyu 16y ago
The FTC has been making noise about actually doing something. [1] There are also proposals to W3C defining a 'Do Not Track' HTTP header rather than cookies. [2] [1] http://www.ftc.gov/opa/2010/12/privacyreport.shtm [2] http://www.w3.org/
285.
by mukyu 16y ago
Technology does not change the world, are you serious? To believe that you must think that everything from irrigation techniques that allowed agriculture and formation of cities to improved forms of transportation and communication that al
286.
Web breaks echo-chambers(blog.coturnix.org)
2 points by mukyu 16y ago|0 comments
287.
by mukyu 16y ago
There were effectively cards that do 'destroy a random card'. [1] There are also several cards that result in searching the deck (and then reshuffling it) which require time/effort and yet were made. [1] http://www.wizards.com/magic/autoc
288.
by mukyu 16y ago
It would be interesting to know the distribution of incorrect answers for the problems. Another interesting thing would be how many incorrect guesses people had for each puzzle (that is, how many people had >5 guesses and did not solv
289.
by mukyu 16y ago
It is funny how all content farms say they aren't content farms and that their content is 'high quality'.
290.
by mukyu 16y ago
I wonder how many people solve it and then do not send in their key. I know I'm not. I cannot be the only one that was more interested in doing the challenge than the rewards.
291.
by mukyu 16y ago
The things that first came to mind when reading this were domain name squatters and scalpers. Do I have the general idea?
292.
by mukyu 16y ago
In the reddit thread ( http://www.reddit.com/r/gaming/comments/fpkav/the_boy_who_st... ) he* has answered some questions. * I'm not actually sure it is him, but he is plausible enough.
293.
by mukyu 16y ago
With desktop applications you can use the same language/code on both the client and the server side. That did not lead to decentralization. Well, that isn't cross platform you might say. However, Java mostly covers that and still it did n
294.
by mukyu 16y ago
The best I have been able to make of it is that he wants to make a protocol where anyone can make an application/service and distribute arbitrary data via the browser. Basically, the internet at large except all of the 'computers' are actu
295.
by mukyu 16y ago
Isn't the point to have this work below the application layer? We have to make a new encrypted and authenticated transport layer and also rewrite all of the application protocols? Then again, with key distribution being done with nym urls
296.
by mukyu 16y ago
Could someone translate what this is actually trying to talk about into something clear? This blog post reminds me of someone on weed trying to relate to you this profound idea to you and rambles on stream of consciousness style. He wants
297.
by mukyu 16y ago
Machine learning isn't perfect, news at 11. Google Translate works by taking a large corpus of documents that have been translated into various languages to train a model. The input phrases are then interpreted using the inferences the mod
298.
by mukyu 16y ago
Most of the content on tpb comes from the scene which does not condone p2p sharing. These people just have access to scene releases early and want to profit from it. http://torrentfreak.com/bittorrent-releasers-slice-the-top-o... http:/
299.
by mukyu 16y ago
I'm sorry that you are incapable of taking 5 minutes to find read the specific Wikipedia policy pages that mentioned by name. Just because you know nothing about subjects and like to bullshit about them on the internet does not mean that e
300.
by mukyu 16y ago
Plan A only bothers whomever tries to maintain [[List of esoteric programming languages]] or wherever you pick as a battleground. I know it sounds to you like you can really "stick it to the man" and they will swoon over your brillant tact

More ›