nialo

13 ms·

91.
by nialo 12y ago
So, is there an implementation of this anywhere? I'd like to write a compiler targeting it.
92.
by nialo 12y ago
Location: NYC or Long Island New York, Full Time Not interested in relocating or remote work Technologies: VBA, Common Lisp Resume: On request, or https://github.com/bcoburn3 Contact: bcoburn3@gmail.com I'm working as
93.
by nialo 12y ago
But, is number of lines a particularly good size measurement? Is there evidence one way or the other on whether it's better to measure size with, say, number of lines, number of tokens, or number of nodes in a parse tree? or something
94.
by nialo 12y ago
I am not an assembly programmer, and there is probably a better way, but something neat that thinking about this resulted in: If instead of 16 512bit registers, we simply want to increment the appropriate section of one big register, we can
95.
by nialo 12y ago
Do you know how similar the Connection Machine was to a modern GPU? The descriptions I've seen sound similar, but I don't really know enough to say how similar.
96.
by nialo 12y ago
That's an excellent description of trading reduced expected return for reduced variance actually means. What you seem to be saying is that your utility function isn't actually linear in lives saved, but is instead slightly concav
97.
by nialo 12y ago
I would expect probably not, but my experience with these is that it's generally pretty obvious when one has a correct solution. (except for the one problem in set 5 where they computed the hash of the ascii string representing the sol
98.
by nialo 12y ago
one possible reason this doesn't work: A limit on the number of iterations for a password hash is the amount of latency the user is willing to accept, which is (approximately) constant regardless of whether those iterations are comput
99.
by nialo 12y ago
On at least some Android phones, it's possible to turn wifi on normally after turning on airplane mode. I'm not sure, but I think that turning on airplane mode just sets all the radios to be off, it doesn't force them to sta
100.
by nialo 12y ago
NYC or Long Island, Full Time Stack: VBA, Common Lisp Resume: On request, or https://github.com/bcoburn3 Contact: bcoburn3@gmail.com I'm working as a Mechanical Engineer and finding that I enjoy the bits of my job in
101.
by nialo 12y ago
Did that announcement actually go out? I'm in the challenges already and haven't seen anything.
102.
by nialo 12y ago
why does concatenating bcrypt(salt, pw) with HMAC(salt, pw) make guessing fast? Intuitively it seems like you'd still need to guess the bcrypt portion, making it no worse than just bcrypt.
103.
by nialo 12y ago
There may not be the traditional byte at a time comparison type timing attack, but maybe this is still vulnerable to timing correlation attacks in the same sense that tor is. That is, Google or someone monitoring Google's network can
104.
by nialo 12y ago
A much better rule is something like "act as if you are deciding for everyone who can be expected to make similar decisions for similar reasons". This avoids that particular pitfall, because everyone who might decide to be a prog
105.
by nialo 12y ago
This is deeply pointless. Any attacker that gets the password database is practically guaranteed to get the "pepper" as well. Just Use Bcrypt, pick as high a work factor as you can afford, and worry about something else instead.
106.
by nialo 12y ago
The standard explanation for this is https://www.imperialviolet.org/2012/02/05/crlsets.html The short version is that any attacker against whom certificate revocation might matter is by definition in a positi
107.
by nialo 13y ago
How about "I really enjoyed microcorruption and the crypto challenges, but am mostly working as a mechanical engineer"?
108.
by nialo 13y ago
To the same group: I've finished 18/19 with no previous assembly experience, so it's certainly possible. If this seems interesting you should try it, even if you've never written or really read assembly code.
109.
by nialo 13y ago
I got around this by zooming the page out in Chrome, in case anyone else is having trouble.
110.
by nialo 13y ago
I'd like to try figuring this out myself as an exercise, and therefore haven't read past the introduction of the article. Does anyone know where I can find either the application in question or some other program that will at leas
111.
by nialo 13y ago
Disclaimer: I am not a cryptographer, and have only gotten to #40 in Matasano's challenges. They appear to be trying to use encrypt and mac, and not as far as I can tell relying on IGE mode to provide authentication. See the "Me
112.
by nialo 13y ago
In case anyone is curious, an explanation of this from Cornell ergonomics researchers: http://ergo.human.cornell.edu/CUESitStand.html
113.
by nialo 13y ago
The "value" may well be the sale price by definition, but that's not really the important thing here. The important question is, was buying this particular site for this particular price a good decision, one that will tend to
114.
by nialo 13y ago
The solution to this problem I've seen from actual cryptographers is Siphash: https://131002.net/siphash/ They address all of the problems of this sort by just designing a hash function that is good enough that co
115.
by nialo 13y ago
The equivalent of source code in civil engineering (and engineering of physical things in general) is the drawings/plans, not the actual bridge. In practice it turns out that drawings for physical objects are often even worse at comme
116.
by nialo 13y ago
http://pastebin.com/raw.php?i=eSkzWm8B because gwern's noprocrast has kicked in.
117.
by nialo 13y ago
P < 0.05 means that the probability of seeing the observed results if there is no difference is less than 1 in 20. So, if you run the experiment 20 times, you'd expect to see a link once, even if there is really no link.
118.
by nialo 13y ago
There's a video from the RSA conference in 2011 with Dickie George, who was the director for Information Assurance at NSA when DES was being reviewed. He claims that the agreement between NIST and NSA was that: 1, NSA would only chan
119.
by nialo 13y ago
The simple way to see this is that evolution is essentially just the simplest possible hill climbing algorithm (at each step, change one random gene on some fraction of organisms in a random way, keep the best set of genes for the next step
120.
by nialo 13y ago
This is the obvious intuitive response, but it turns out that it's broken: Compressing data before encryption can give attackers a new side channel to recover the plaintext, by just watching the message length, and seeing when the com

More ›