reaperhulk

11 ms·

31.
Ecdsa: Handle with Care(blog.trailofbits.com)
10 points by reaperhulk 6y ago|0 comments
32.
by reaperhulk 6y ago
Thanks for the context. Unfortunate that this silent failure is present in 20.04 with no fix so far.
33.
by reaperhulk 6y ago
Ubuntu 20.04's mdadm package doesn't appear to have a crontab entry for scrubbing actually (while 18.04 does). It does have e2scrub_all, but does that serve the same purpose?
34.
by reaperhulk 7y ago
The goal is to promote automation and continue lowering certificate lifetimes as operations get better. This ultimately will allow for lifetimes short enough to be useful. As for the other browsers, Google originally proposed SC22 ( https:&
35.
by reaperhulk 7y ago
Firefox is not vulnerable, but (non-updated) Chrome actually is (until they replace the platform TLS verifier, which is happening soon).
36.
How safe browsing fails to protect user privacy(blog.trailofbits.com)
5 points by reaperhulk 7y ago|0 comments
37.
by reaperhulk 7y ago
Name collisions are unfortunate but inevitable. This name makes me think of ristretto255 ( https://ristretto.group/ ), but that’s the world I live in. I suspect this project is likely to see more name recognition over time th
38.
Memory Unsafety in Apple's Operating Systems(langui.sh)
14 points by reaperhulk 7y ago|5 comments
39.
by reaperhulk 7y ago
The specific tone of this post is purposefully bombastic to call attention to the fact that RSA is uniquely difficult to implement and utilize correctly. Newer cryptographic constructs use various methods to reduce the probability of incorr
40.
State of the Art Proof-of-Work: RandomX(blog.trailofbits.com)
1 points by reaperhulk 7y ago|0 comments
41.
by reaperhulk 7y ago
That's a shame (for them). Your URL structure suggests you may be planning to do this for other Apollo missions, is that in the cards? Edit: I see you've done this for Apollo 17 already on a different URL: https://apoll
42.
by reaperhulk 7y ago
This site is almost unbelievably great. Have you considered trying to contact the Smithsonian to see if they'd be interested in using it? I've never seen a more impressive interactive exhibit.
43.
by reaperhulk 7y ago
FWIW, the built-in VPN isn't actually what matters for why the internet is unblocked in China when on a foreign SIM. Instead, the way cellular data networks works is such that your traffic is tunneled back to the provider first.
44.
Apple Censoring the News App(langui.sh)
211 points by reaperhulk 8y ago|117 comments
45.
by reaperhulk 8y ago
As others have already noted, JIT codegen bugs leading to exploits do indeed happen and your intuition is mistaken. Here's one from Firefox's JS JIT from just a few months ago: https://bugzilla.mozilla.org/show_bug
46.
by reaperhulk 8y ago
The requirement in question is "Effective September 30, 2016, CAs SHALL generate non-sequential Certificate serial numbers greater than zero (0) containing at least 64 bits of output from a CSPRNG". This has been generally accepte
47.
by reaperhulk 8y ago
The project accepts donations: https://www.wireguard.com/donations/
48.
by reaperhulk 8y ago
You need to enable it in Develop->Experimental Features, but also you need to be sure you have a CTAP2 key. "U2F" keys are all CTAP1, which is not supported yet. Yubi's 5 series are CTAP2, as are the blue keys with a 2 pri
49.
by reaperhulk 8y ago
VPN fingerprinting is simple in most cases. The preamble to stateful VPN session initiation is generally trivial to detect. WireGuard does not (at this time) attempt to obfuscate itself, but it’s more resistant to that particular type of de
50.
by reaperhulk 8y ago
I use WireGuard (including WireGuard iOS) every day in Shanghai. It’s mostly fast and performant but nothing escapes the occasional “drop all UDP to your endpoint”. Typically this manifests as windows of time (typically a few minutes) where
51.
by reaperhulk 8y ago
Gameplay trailer states 4k resolution (55 seconds in) https://youtu.be/Q2zfx5hQ3CE
52.
by reaperhulk 8y ago
It's a remaster in the same spirit as Starcraft Remastered. Higher resolution textures, higher polygon counts, better animation, higher resolution options. Same game.
53.
by reaperhulk 8y ago
Yes, this restriction applies only to public CAs. The purpose is to prevent someone from getting, for example, a 192.168.1.1 cert and then using it on another network in a mitm attack.
54.
by reaperhulk 8y ago
That’s not the way the fraud is alleged to have worked. The article claims that fraudsters swapped fake parts into legitimate iPhones and then took them to Apple for repair. Apple would then put legitimate parts into the “broken” iPhone.
55.
by reaperhulk 8y ago
Very few people were demanding Python 3 support 10 years ago. Prior to 3.4 uptake was limited so we’re really talking about 4 years. Also, old appengine was built with nacl (remember that?) sandboxing. Anything that couldn’t be built under
56.
by reaperhulk 8y ago
That’s an accurate summary, but CDNs are important because they terminate huge numbers of sites. In your example censorship is relatively easy since network operators who want to block a site won’t have very much collateral damage by blocki
57.
by reaperhulk 9y ago
Yep, I’ll add the URL in my comment, sorry about that.
58.
by reaperhulk 9y ago
As noted in the PEP data classes is a less fully-featured stdlib implementation of what attrs already provides. Unless you’re constrained to the stdlib (as those who write CPython itself of course are) you should consider taking a look at a
59.
Master of All Science – Rick and Morty Frinkiac(masterofallscience.com)
3 points by reaperhulk 9y ago|0 comments
60.
by reaperhulk 9y ago
They used Skylake in late 2016 MBPs and Kaby in the 2017 models.

More ›