nightcracker

81 ms·

751.
by nightcracker 13y ago
Title is very misleading - police were at the door to talk, but there certainly was no "raid". Source: Dutch person who can read the original article - didn't bother with the translation.
752.
by nightcracker 13y ago
I've been looking at similar ideas lately, but I simply do not know how to defeat the Sybil attack =/ A centralized certificate authority is necessary to keep a functioning system, as far as I can see.
753.
by nightcracker 13y ago
I'm not exactly sure on the details of AES-GCM, but in general if you use secret data to influence either the data path (indexing tables), code path (branches) or timing (either branches or non-constant instructions) then your secret d
754.
by nightcracker 13y ago
https://en.wikipedia.org/wiki/Special:Contributions/74.143.2...
755.
by nightcracker 13y ago
I find it pretty strange that shadowbanning is the default ((semi-) automatic) ban on Hacker News - it's one of the most cruel bans out there.
756.
by nightcracker 13y ago
While I certainly do not agree with practices such as the ones sker mentions, I do feel that Hacker News is a news site, not a job board. Posts about hiring do not belong at the top.
757.
by nightcracker 13y ago
I figured the same, but then I realized the use. Even if your input key is unique, it does not mean that every bit is uniformly distributed. For example a counter has zero upper bits with high propability. By ensuring that the mapping is un
758.
by nightcracker 13y ago
So, you basically want to use.. a password?
759.
by nightcracker 13y ago
No it is not. Without taking any secret information from the user not available/stored in the system itself there is no way to store a password on a system that is not trivially retrievable by someone who has access to the computer.
760.
by nightcracker 13y ago
No, no, no, no, NO! What do you think "store password" means, when you click it? If you can fire up your browser and log in without ever typing in a password how could you EVER assume your passwords are stored in anything but pla
761.
by nightcracker 13y ago
This question is actually asked: https://www.youtube.com/watch?v=QGw-cy0ylCc&feature=player_d...
762.
by nightcracker 13y ago
Ironically the screenshot shows Python code.
763.
by nightcracker 13y ago
It's still used directly in Linux: https://mailman.stanford.edu/pipermail/liberationtech/2013-J... Furthermore, if RdRand is insecure but not recognized as such it's a potential risk due to people build
764.
by nightcracker 13y ago
If you have other sources of good entropy then there's absolutely no point in using RdRand at all.
765.
by nightcracker 13y ago
Such side channels can be avoided in a proper implementation by avoid things like table lookups and conditionals based on secret data.
766.
by nightcracker 13y ago
Nothing up my sleeve numbers are very hard to create for asymmetric crypto. Asymmetric crypto is filled with mathematical relationships and it's almost impossible to prove that a certain set of parameters have no "hidden" pro
767.
Extremely fast crypto signatures and Diffie-Hellman key exchange(github.com)
2 points by nightcracker 14y ago|0 comments