ninegunpi

9 ms·

31.
Highlights of french cybersecurity strategy(blog.lukaszolejnik.com)
2 points by ninegunpi 9y ago|0 comments
32.
Two types of engineering resiliency(medium.com)
2 points by ninegunpi 9y ago|0 comments
33.
Meltdown, Spectre, and why hardware can be correct yet insecure(andrumyers.wordpress.com)
2 points by ninegunpi 9y ago|0 comments
34.
by ninegunpi 9y ago
Yes we do, there are problems which beg to be fixed. Most of current complaints are about security, in one way or another require plenty of CPU horsepower (which most routers don't have - CPU peaks while suddenly switching upling and r
35.
by ninegunpi 9y ago
I liked the version where Hawaii government was replaced by marionettes under pressure of nuclear attack, the missile exploded in the air (or was fake from the very beginning) and the new government refuted that it was a real message to kee
36.
SecureRandom is now secure in Ruby(paragonie.com)
5 points by ninegunpi 9y ago|0 comments
37.
by ninegunpi 9y ago
In high risk/high volatility environments, it's either regulation or reputation. That's why the smell of regulation is always telling: the inter-human natural trust scheme can't cope with the risk... or someone is lookin
38.
by ninegunpi 9y ago
for slowing down awkward code?
39.
Hermes distributed access control scheme(cossacklabs.com)
2 points by ninegunpi 9y ago|0 comments
40.
Disco – mixing Strobe and Noise protocol frameworks(cryptologie.net)
3 points by ninegunpi 9y ago|0 comments
41.
Analysis of remote DoS vulnerability in VirtualBox(unimplemented.org)
2 points by ninegunpi 9y ago|0 comments
42.
by ninegunpi 9y ago
I don't think that this leap of efficiency in "exploiting human psychology" is anything different from propaganda/marketing leaps of previous aeons. Reading the books of the past, they felt equally exploitative and novel
43.
Standardizing Bad Cryptographic Practice [pdf](eprint.iacr.org)
2 points by ninegunpi 9y ago|0 comments
44.
by ninegunpi 9y ago
And then the A.I. will learn to manage humans in subtle ways (like filtering Facebook feed to achieve certain benchmark) and voila! No need for SkyNet and terminators. ML to build better ML schemes to better control humans - that's a f
45.
by ninegunpi 9y ago
>because they're making these compromises to cater to lazy middle-box providers. Well, as much as I understand - it's not there because they're willing to find secure compromises instead of path of least resistance.
46.
Why TLS 1.3 isn't ready yet(feistyduck.com)
2 points by ninegunpi 9y ago|3 comments
47.
by ninegunpi 9y ago
It's a good case for training the attention to spot obvious vulnerabilities in the code.
48.
An incident response blog post containing 0day vuln(security.infoteam.ch)
2 points by ninegunpi 9y ago|1 comments
49.
by ninegunpi 9y ago
>Decentralized technology is in fact trying to solve a serious problem, but sadly it is a problem that most people choose to ignore in favor of the incentives offered by Facebook and other monolithic centralized services. So people tryin
50.
by ninegunpi 9y ago
That's what I'm talking about (in rather indirect language - this is just a quick rant) - the incentive structure drives even decentralized systems (like the web as a whole) to centralization. And yes, mainly it has to do with the
51.
Why decentralized social services fail(medium.com)
39 points by ninegunpi 9y ago|29 comments
52.
Post-Quantum Crypto: From NewHope to Kyber [pdf](cryptojedi.org)
1 points by ninegunpi 9y ago|0 comments
53.
by ninegunpi 9y ago
Well, Google levelled up their game on Snapseed at some point, so why milk the cow you don't know how to feed, makes sense.
54.
by ninegunpi 9y ago
>web crypto is better than no crypto. I seriously disagree on this (our company is facing similar challenges, and I've asked these question myself numerous times). It's not better, it's much worse. "Some crypto"
55.
by ninegunpi 9y ago
Wow, this is very cool, I need to read more about that.
56.
Affected products by Infineon RSA vulnerability(gist.github.com)
1 points by ninegunpi 9y ago|0 comments
57.
by ninegunpi 9y ago
While I love ProtonMail as an effort to popularize security for end-users and trying to come up with smart technologies to achieve that, the whole risk model behind the writeup barely stands scrutiny. What's worrying, ProtonMail (who d
58.
by ninegunpi 9y ago
coaching does not equal teaching. teaching is learning information, coaching is ensuring skills transfer and achieving desired personal qualities.
59.
by ninegunpi 9y ago
>I wished I had gotten more support, many companies don't know how to do that well. It's literally the biggest leadership failure when non-managers get elected to management positions - failure to coach them by senior managers,
60.
by ninegunpi 9y ago
It's true, but real leader is responsible for his people and the team as much as for success. Team has to see that leader puts significant effort into making weaker people become stronger before actually letting them go. This way, heal

More ›