rkeene2

70 ms·

751.
by rkeene2 10y ago
The events in the article happened before the more famous and serious event.
752.
by rkeene2 10y ago
You could always use "gotty" to accomplish this :-)
753.
by rkeene2 10y ago
You cannot rollback the purchase, there is opportunity cost and other factors that make this impossible, but a new arrangement can be made if both parties agree to it. A refund is one way to attempt to satisfy your obligation of the purchas
754.
by rkeene2 10y ago
This seems a bit like altering the terms of the sale after the sale has completed. He bought the product, he's entitled to the product -- a refund is not sufficient since the purchase cannot be rolled back.
755.
by rkeene2 10y ago
I never indicated that anyone should be "blamed" here. People purchased something, then reviewed that purchase after it was completed. They are not just reviewing the book, the book's contents, or your work in publishing it
756.
by rkeene2 10y ago
They are reviews of the purchase, which includes both the product, the mechanism of purchase, and everything else involved in the purchase.
757.
by rkeene2 10y ago
Wait... So Amazon removed legitimate reviews from people who bought the product being sold on the page being reviewed because the product being sold is sometimes counterfeit ? How are other people attempting to purchase that item from that
758.
by rkeene2 10y ago
My password manager, hunter2 ( https://chiselapp.com/user/rkeene/repository/hunter2/ ), supports multiple users. Each user is identified by their public key and the DB is a plain text file that can be e
759.
by rkeene2 10y ago
It's really very similar. This is a case where the Chromium developers want to do something so they are going to do it, standards be dammed...
760.
by rkeene2 10y ago
Don't forget RFC 2818 (HTTPS) which Chromium (and thus Chrome) recently broke mandatory features of: https://bugs.chromium.org/p/chromium/issues/detail?id=308330...
761.
by rkeene2 10y ago
TLS MITM devices also break required components of TLS, such as TLS client certificates. If you want to have TLS sessions with mutual authentication it can't go through the MITM. A way forward might be to start requiring TLS client ce
762.
by rkeene2 10y ago
If you think that's snarky, see my (unanswered) question to the developers here: https://bugs.chromium.org/p/chromium/issues/detail?id=308330... I'm pretty sure the answer is "Yes".
763.
by rkeene2 10y ago
I'm not. I do a lot of interesting work, much of which does not rely upon any standards because it changes so much. Standards CAN change. This standard DIDN'T change. The Chromium developers referenced this particular RFC (RFC
764.
by rkeene2 10y ago
The feature of CAs generating certificates that way is deprecated says RFC 2818 in a non-normative way (since it's outside the scope of RFC 2818). The feature of supporting it is mandatory says RFC 2818 in a normative way. It is mandat
765.
Chrome disables support for mandatory features of HTTPS(rkeene.org)
27 points by rkeene2 10y ago|9 comments
766.
by rkeene2 10y ago
Maybe the title should be changed, since it implies that 100% of the SSL S3 traffic is using s2n ?
767.
by rkeene2 10y ago
Keep in mind that FIPS-compliant and FIPS-validated are entirely different things and that NIST SP 800-53 specifies FIPS 140-2 validated operations for digital signatures.
768.
by rkeene2 10y ago
Darn. I should have read the fine article, but I was really hopefully that there would be a migration path off OpenSSL... RedHat has FIPS validated most of their software, but it is expensive and slow work that someone building from sourc
769.
by rkeene2 10y ago
NIST SP 800-53 SC-13 is pretty clear that it must not just be an approved function, but also FIPS validated cryptography, which is done under FIPS 140-2 and the validated products are listed here: http://csrc.nist.gov/grou
770.
by rkeene2 10y ago
Is there a FIPS 140-2 validated version of "s2n" somewhere ? I couldn't find anything close to it on the FIPS 140-2 validated products list. If not, how does Amazon get away with using S3 as part of GovCloud, which purports
771.
by rkeene2 10y ago
There's also forge.mil, which has existed for a while but requires a TLS client certificate to access.
772.
by rkeene2 10y ago
There's a lisp interpreter written in Brainfuck, does this count ?
773.
by rkeene2 10y ago
There's a C to brainfuck compiler as part of ELVM, and the LLVM C backend was resurrected recently, so it may be possible to do Crystal to brainfuck.
774.
by rkeene2 10y ago
++++++++[->++++<]>[->+>++>+++>++++<<<<]>>>---------.+++++++++++++ ++++.>-------.<<<++++++++++++.------------.>>------.>-------.<-.+ +++++++.>----.<---.>+++++++.<-
775.
by rkeene2 10y ago
The main issue I have with not using swap in modern Linux is that it will cause the kernel to be busy for hours at a time. What happens is, as the kernel runs low on RAM, it has to spend more time searching for smaller and smaller chunks o
776.
by rkeene2 10y ago
My main complaint with attempts to MITM TLS is that it is a failure -- you cannot actually MITM TLS without breaking TLS. Specifically, TLS client certificates are almost always broken when by attempts to MITM TLS and we use TLS client cer
777.
by rkeene2 10y ago
There is no valid TLS MITM. All attempts at TLS MITM break TLS in some way -- very commonly with TLS client certificates. Edit: You're only proxying the encrypted data and not trying to do a MITM, so this doesn't break TLS, but
778.
by rkeene2 10y ago
I use a smartcard with an RSA key with a LUKS-like format to encrypt my disks -- uses AES256-XTS for the actual dm-crypt, the smartcard's key is used to encrypt the symmetric cipher key.
779.
by rkeene2 10y ago
See also vTcl ( http://vtcl.sourceforge.net ). As an added bonus, Tcl :-)
780.
by rkeene2 10y ago
Fossil's default mode, autosync, is more closely modeled by: git pull && if stillCommitingToBranchTip; then git commit -a; else echo "Not committing to the tip of the current branch" >&2; false; fi && g

More ›