phicoh

34 ms·

391.
by phicoh 7y ago
Compare the NIST curves to RSA. For RSA we know there cannot be any backdoors. If you generate good quality primes you are in business (assuming you don't make mistakes elsewhere). For NIST we cannot say anything about backdoors. We do
392.
by phicoh 7y ago
I don't understand the argument of dictating a key over the phone. If you care about that use case, you can just a well dictate the hash of an RSA public key. Nobody knowns of the NIST curves have backdoors. Nobody know s if Dan Bernst
393.
by phicoh 7y ago
I think that one of the really bad problems with gpg and openssl is that for a long time there was effectively only one implementation. So the key thing for matrix is to create a healthy ecosystem that has multiple implementations of the pr
394.
by phicoh 7y ago
One of the nice things about the IRC bridges between Matrix and big IRC networks is that you can experience IRC from the comfort of Matrix.
395.
by phicoh 7y ago
And then lots of people have bouncers to be there 24x7.
396.
by phicoh 7y ago
SHA-2 was on related shaky ground. Remember that in relatively short significant advances were made in breaking MD-5 and SHA-1. SHA-2 is based on similar constructs as MD-5/SHA-1. For this reason the SHA-3 competition was started to fi
397.
by phicoh 7y ago
One thing to remember here is that RSA can be used in 2 ways: to encrypt and to sign. If RSA is used to encrypt (for example if you send an encrypted message using PGP) then factoring directly breaks the encryption. In practice, a lot of en
398.
by phicoh 7y ago
That's why it is random. Solid engineering implies that you estimate how much effect this measure will have. Note that the report says 'Incidence rates provided in this report should be interpreted with caution due to the small sa
399.
by phicoh 7y ago
In my opinion these kinds laws are of the kind that "we need to do something because we need to do something". The effects are marginal. If these laws were the result of solid scientific studies and engineering it would be differe
400.
by phicoh 7y ago
Indeed, so my assumption is that this law is trying to keep things from changing. People will have to adapt to silent cars. But that's scary. Everybody knows that you have to look before making a turn or changing lanes. We also know th
401.
by phicoh 7y ago
The lie is that users like targeted ads. Most people buying ads believe that targeted ads give better results. But that doesn't mean that people like to be followed by ads for something they just bought. Let alone all the privacy viola
402.
by phicoh 7y ago
I'm curious, when was it right to left? In computer speak, the way we write numbers in English is 'big endian'. We write the most significant digit first. The most common 'little endian' system is postal addresses,
403.
by phicoh 7y ago
Reality is that this lasts for a few years. And then the contracted party finds ways to raise prices or make a mess or both. Look at the history of decisions taken by ICANN. Contracts get awarded with hardly influence from the larger intern
404.
by phicoh 7y ago
Think about the current state of ICANN. And now ICANN has to award contracts to monopolies for gTLDs like .com and .net. What could possibly go wrong? The registry part is easy to specify. For the registrar, look at how google normally oper
405.
by phicoh 7y ago
For big zones it is relatively cheap (i.e, the cost per domain is low). Since the invention of anycast routing, it is technically no longer complex. If a continent fails, then either all BGP announcements are already gone, or you need a way
406.
by phicoh 7y ago
See https://thesaurus.yourdictionary.com/free number 3.
407.
by phicoh 7y ago
The thing is, by definition, the registry is a monopoly for a certain TLD. So the idea was that those registries need to be regulated. What if they would just ask insane prices? A registry has an 'easy' part, and that is actually
408.
by phicoh 7y ago
A few years ago I wanted a domain for a project. I had no trouble coming up with a nice 6 letter word and registering the .com and .org. Everybody wants the same popular words, but if you get a little bit creative, the domains are usually f
409.
by phicoh 7y ago
By and large, a domain is less than 20 euro a year. You can come up with alternatives, but is it really worth it? The hard part of domains is dealing with trademarks. In recently years it has been remarkably quiet in that area. Which means
410.
by phicoh 7y ago
OSM has a community in most places. Nobody really cares about google.
411.
by phicoh 7y ago
G+ sometimes resembles the way Mozilla develops Firefox: Lots of aspects make just a small group unhappy. However, taken together all of those unhappy groups mean that you have no early adopters left and the project fails to get traction.
412.
by phicoh 7y ago
The is an open standard for messaging (XMPP). That didn't prevent Google and Facebook from starting on XMPP and then closing it off. There is ActivityPub ( https://en.wikipedia.org/wiki/ActivityPub ) but it's u
413.
by phicoh 7y ago
I'm curious, what are the parts you want to use that are not supported by FreeBSD?
414.
by phicoh 7y ago
In general, publicly visible DNS cookies are set by a DNS recursive resolver. Typically, multiple IP addresses share one recursive resolver. So it seems to me that a DNS cookie has strictly less information than an IP address.
415.
by phicoh 7y ago
Just curious, which XEP is offline messages? In Matrix, clients are supposed to implement the full Client-Server API. If a client leaves out e2e then it cannot claim to implement the matrix protocol. Given that 1.0 of the full matrix protoc
416.
by phicoh 7y ago
The problem with omemo, jingle, etc. is that you have makes sure that the XMPP components you use support them. It would be fine if all popular implementations support those features, but that's not the case. So you can't just say
417.
by phicoh 7y ago
I'm curious what you are going to use instead. I know Matrix is not perfect (and I would wait for some of the planned features to land), but the most commonly selected options have a lot more problems.
418.
by phicoh 7y ago
My experience is that synapse is not harder than ejabberd (I don't have experience with other XMPP servers) Matrix tries to do a lot more than XMPP. In my experience, people find XMPP too limiting, so they don't use it.
419.
by phicoh 7y ago
I'd say that for time, the second is the only thing people can really relate to. With a bit of practice everybody can count seconds. We cannot related to minutes, hours, day, etc. without an external time keeping source. The other thin
420.
by phicoh 7y ago
It is mainly what we are used to. For power we have kilowatt, megawatt, gigawatt, no problem. For gram, meter and second, we have milli, micro, nano, etc. no problem. But we don't have megagram, megameter because we not used to it. Jus

More ›