nbadg

22 ms·

151.
by nbadg 9y ago
Also, if you need simple (though not necessarily immediately obvious) ceil division, you can do this: -(-a // b) As in: >>> 1 // 2 0 >>> -(-1 // 2) 1 This works b
152.
by nbadg 10y ago
De-anonymization is incredibly easy (bordering on trivial) with any rich data set. For example, 87% of the US population is uniquely identifiable by their combination of DoB, zip code, and sex [1]. The richer a dataset is, the easier it is
153.
by nbadg 10y ago
HIPAA compliance has nothing to do with encryption, and little to do a traditional tech sense of privacy/security. If you handle patient information, encrypted or otherwise, you are subject to compliance hurdles (with the exception of
154.
by nbadg 10y ago
From my perspective, that shouldn't be a problem. Ultimately (as a user) the point of the rating is for me to get stuff that I like -- so it's all relative to me, regardless of individual rating differences. Now, I realize that&#x
155.
by nbadg 10y ago
You're just shifting the trust to the "data bank". What if it gets hacked, or ignores its ToS, or some rogue employee with database access copies your PII, or... ? Trust is dead; it doesn't scale. End of story. I don&#x2
156.
by nbadg 10y ago
You're welcome! From my understanding, IV plus hash of the plaintext is sort of what's going on in SIV (note that SIV is subtly different from GCM-SIV which is subtly different from AES-GCM-SIV), plus an added step to also mutat
157.
by nbadg 10y ago
I'm reading that the same, but in this case it's a performance consideration; most systems expected to use AES-GCM-SIV use little-endian order internally, and since AES is often implemented at extremely low level (including in har
158.
by nbadg 10y ago
AES-GCM-SIV is useful for applications that require some combination of: 1. A distinct message-based format (ie not streaming) 2. Protection against modified plaintext/malleable ciphertext without a separate MAC/signature construc
159.
by nbadg 10y ago
The question of hash usage made me think of an alternative approach -- what about some kind of audio perceptual hash? P-hash has support for audio hashes [1] (at least it claims to, but I've never used it). The metadata is useful, sure
160.
by nbadg 10y ago
Wow, that video was tough to get through (excellent link!). As soon as her HR started dropping with low sats she was circling the drain on what should have been a routine, relatively straightforward surgery. It's interesting to me that
161.
by nbadg 10y ago
> The other reason why I wouldn't touch a site like Gigster is that those sites almost always turn into a race to the bottom for low-value jobs for the most difficult clients. I've never actually taken a contract from one of th
162.
by nbadg 10y ago
Agreed. I think it only makes sense to say it offers tamper protection if you have reproducible builds and are distributing the source code via (for example) IPFS. But even that is then questionable, because who's auditing the source c
163.
by nbadg 10y ago
Thanks for the feedback. Can I ask which parts of the documentation you were looking at?
164.
by nbadg 10y ago
The idea isn't to replace Dropbox. Hypergolix doesn't sync files , it syncs objects . That might seem like a small distinction, but when you're writing application code, it makes a big difference. For example, the second ha
165.
by nbadg 10y ago
Are you trying to run Hypergolix or register it? Follow this guide to get Hypergolix installed and running: https://pyhgx.readthedocs.io/en/latest/setup-1-installing.ht... After you have Hypergolix running (you ne
166.
by nbadg 10y ago
Thanks! All mutable objects have an internal monotonic counter. Currently, whichever counter is highest takes precedence, and any decreasing counter is rejected by the server. The "older" (lower counter) copy will receive an error
167.
by nbadg 10y ago
Because the system is asynchronous, you have to have a persistence server somewhere -- think email, not P2P. Since everything needs that server to work anyway, it's doing double-duty as a relay server. Each endpoint pubs/subs, and
168.
by nbadg 10y ago
The API is definitely more cumbersome than I would prefer. I really like this idea: > bob.send(obj) However, I don't think object creation and sending will ever be combined into the same operation, because: + objects don't need
169.
by nbadg 10y ago
With a purpose-built protocol called Golix [1]. The documentation goes into a lot more detail but it has three main aspects: 1. Encrypt things like PGP, except key encapsulation is separate from ciphertext delivery. Specific primitives used
170.
by nbadg 10y ago
Correct. This is yet another "hosted platform for revenue" open source project; if you deploy on your own servers, you don't pay us. Servers have no access to plaintext. They also have extremely limited metadata: only the &qu
171.
by nbadg 10y ago
Additionally, if you're interested in supporting the project financially, but don't have need for an account, click the red "here" link at the bottom of this page [1] to register with a placeholder account. You can then
172.
by nbadg 10y ago
Hi HN, basically a one-man show here. Hypergolix just entered its alpha release, and I thought it would be an excellent opportunity for feedback. The fundamental motivation of the project is for individuals to retain autonomy over informati
173.
Show HN: Hypergolix, “programmable Dropbox” with client-side encryption(pyhgx.readthedocs.io)
130 points by nbadg 10y ago|23 comments
174.
by nbadg 10y ago
This was exactly my thought. Encryption doesn't inherently protect availability, and by far the more common occurrence (at least the stories I've heard, from independent journos covering the US, or abroad in places like North Kore
175.
by nbadg 10y ago
This might be stating the obvious, but I think that probably has more to do with the quantity of ASCII codes, and less to do with the "translation" itself. I have significantly more difficulty reading hex dumps than I ever had rea
176.
by nbadg 10y ago
Atmosphere stripping due to solar wind is a natural process that takes millions of years. Atmospheric production is a deliberate process limited only by available energy and raw materials. And, of course, the economics. But the point re
177.
by nbadg 10y ago
This may be true at first glance, but if you try to incorporate more advanced EV features, and in particular, regenerative braking, you very quickly do need to care about maximum charge/discharge rates. Your brakes dissipate a great de
178.
by nbadg 10y ago
Well, also its susceptibility to both known-plaintext attacks and statistical analysis, though it depends a bit if you're talking about the army version of the enigma or the navy version. Also until very late versions, the machine coul
179.
by nbadg 10y ago
While I'm all for the idea that sometimes you have to make do with what tools you have available, why are we looking for technical solutions to a legal (or perhaps even philosophical) problem? Philosophically and legally I am firmly co
180.
by nbadg 10y ago
This is definitely off-topic to the linked article, but to your point re: selling an LED vs a lighting plan: I think this is largely a failure on the part of companies to transition to a service-based model in light of decreasing emphasis o

More ›