shinigami

9 ms·

31.
by shinigami 7y ago
They likely published to GitHub after it was finished
32.
by shinigami 7y ago
There already was a international fund for paying for inspections and so on, but it was canceled after Bolsonaro said they were using that money to compensate farmers.
33.
by shinigami 7y ago
So what? It's still bad. There was a lot of effort on reducing deforestation and fires in the previous governments and now it's climbing back up.
34.
by shinigami 7y ago
It's a terrible idea. Paper-only elections are easily corrupted. The right answer is combining paper & electronic.
35.
by shinigami 7y ago
For that you need to divide the message in chunks and encrypt&authenticate each chunk. It's what GPG is going to do soon. There are some ad-hoc approaches for that procedure, but two interesting and well-constructed are STREAM and
36.
by shinigami 8y ago
Yes, that's exactly what everyone is suggesting.
37.
by shinigami 8y ago
https prevents an attacker which can compromise the network. It does not prevent an attacker who can compromise the mirror. The author can't compromise an existing mirror, so they wouldn't able to exploit it (through the network)
38.
by shinigami 8y ago
I don't see it. From https://www.rfc-editor.org/rfc/rfc7253.txt : Function name: OCB-ENCRYPT Input: K, string of KEYLEN bits // Key N, string of no more than 120 bi
39.
by shinigami 8y ago
I'm not sure I understand. In OCB (or any other AEAD) there is a single MAC for the entire ciphertext. You can't decrypt&verify large data in a single pass.
40.
by shinigami 8y ago
AEAD is not enough. How do you decrypt/verify a 100 GB file with AEAD, without disclosing unauthenticated plaintext in a single pass? You need streaming AEAD like STREAM or CHAIN.
41.
by shinigami 8y ago
Yes, but that's an online protocol. The problem here is data at rest...
42.
by shinigami 8y ago
AEAD was also a hipster scheme that literally nobody used. That's the whole point. In Twitter you even linked to Adam Langley's post where he suggests something exactly like STREAM/CHAIN! Which modern cryptosystems handle thi
43.
by shinigami 8y ago
I agree they should have done that as a stopgap measure, but we should push for security in all cases (e.g. streaming AEAD with STREAM or CHAIN https://github.com/miscreant/miscreant/wiki/STREAM )
44.
by shinigami 8y ago
It should split it in chunks and authenticate each one of them. Then the worst attack would be the ability to truncate the file, and it could be at least detected. Unfortunately this is not supported by the PGP spec, or any other well estab
45.
by shinigami 9y ago
...what? Yes, if you compute by hand and compare with a known implementation, than it's likely you computation is correct. But this has nothing to do with test vectors. You could match all test vectors while still giving incorrect resu
46.
by shinigami 10y ago
> PBKDF2 with 8192 iterations Not nearly good enough.
47.
by shinigami 10y ago
Rarely true for low level crypto code.
48.
by shinigami 11y ago
Yes, life must be so hard without being able to date people from work.
49.
by shinigami 11y ago
Did you read the article? These are not "known" to cause these illnesses.
50.
by shinigami 11y ago
I am from Brazil and I can say that we are nowhere near becoming the new Argentina.
51.
by shinigami 11y ago
Sure, you can avoid the hate-specific subreddits. The problem is that this kind of behaviour is mostly everywhere in reddit.
52.
by shinigami 11y ago
I had the same idea! I've used Emacs org-mode to keep the "stack trace" in a tree. Still, it's hard to keep the discipline to actually use it.
53.
by shinigami 12y ago
Exactly. For most optical illusions you can switch between interpretations, but in this case I only see black and blue (yes the black is gold-ish). But the frustrating thing is that I saw it as white and gold for a moment yesterday, but I c
54.
by shinigami 12y ago
If you kill Yudkowsky, then the evil AI will take over since he won't be there to save the world. Therefore harvesting his organs won't be worthwhile. (He actually believes this).
55.
by shinigami 12y ago
Also, image formats like JPEG have a thumbnail stored in them, which may not be updated when you edit the image.
56.
by shinigami 12y ago
It seems it may be a risk, but we are nowhere near building it.
57.
by shinigami 12y ago
Paved with good intentions and so on...
58.
by shinigami 12y ago
> I've never heard of Paul Graham saying or doing a single thing that smacks of cultishness I love how he implicitly acknowledges that he does a lot of things that smacks of cultishness :) But yes, believe it or not, I was the firs
59.
by shinigami 12y ago
Warning: the (real world) point of the fanfic is to recruit people into a cult whose goal is to prevent evil artificial intelligence from taking over the world. Seriously.
60.
by shinigami 12y ago
NSA approves.

More ›