sweis

31 ms·

271.
by sweis 15y ago
This is the original paper and submission here: http://www.mightbeevil.com/securedocs/ http://news.ycombinator.com/item?id=2529505
272.
by sweis 15y ago
tzs's scheme proposes encrypting files with the hash of their contents (see http://news.ycombinator.com/item?id=2461713 ). That's not semantically secure. Anyone can distinguish whether a particular plaintext produced a given ciphertext.
273.
Incremental encryption for "Private Editing in the Cloud"(mightbeevil.com)
2 points by sweis 15y ago|0 comments
274.
by sweis 15y ago
Fair enough. It's similar to embedding third-party gadgets for things like iGoogle. However, in practice that content is sanitized. Note there are risks to hosting arbitrary Javascript beyond stealing cookies. For example, you can steal bro
275.
by sweis 16y ago
This is vulnerable to XSS: http://hashify.me/PGlmcmFtZSBzcmM9ImphdmFzY3JpcHQ6YWxlcnQoJ1...
276.
by sweis 16y ago
Ben offers a level-headed overview of the recent concerns over Dropbox security and privacy.
277.
Ben Adida on Dropbox security: "grab the pitchforks… again"(benlog.com)
16 points by sweis 16y ago|6 comments
278.
by sweis 16y ago
"Fully encrypted, with the key derived client-side from your username and password" is easier said than done. It means that the key is as weak as your password and that you need to download a special client or plug-in on every device you wa
279.
by sweis 16y ago
Les Valiant made important contributions to the theory of computation and machine learning. "A Theory of the Learnable" is one of his most influential papers: http://www.cs.princeton.edu/courses/archive/spring08/cos511/...
280.
Les Valiant wins 2010 Turing Award(acm.org)
2 points by sweis 16y ago|2 comments
281.
by sweis 16y ago
On a related note, there is National Cryptologic Museum at the NSA: http://www.nsa.gov/about/cryptologic_heritage/museum/
282.
by sweis 16y ago
This is a related paper on eprint: http://news.ycombinator.com/item?id=1784602
283.
by sweis 16y ago
I don't see any use for cryptographic applications, except perhaps as a common reference string.
284.
by sweis 16y ago
There is a paper available here: http://www.bitcoin.org/sites/default/files/bitcoin.pdf It's using digital signatures to transfer coins. The prior owner will sign a coin and the new owner's public key. The new owner will verify the prior
285.
by sweis 16y ago
You can create a TrueCrypt volume or Mac encrypted disk image in your Dropbox folder: http://wiki.dropbox.com/TipsAndTricks/IncreasePrivacyAndSafe... This reduces the usability of syncing and sharing, which are Dropbox's biggest selling p
286.
by sweis 16y ago
It is a bad idea to plug untrusted hardware into your computer. Many Windows users have autorun enabled, so could be infected with malware as soon as they plug it in. This has been exploited by people pretending to run promotions and handin
287.
by sweis 16y ago
This is a working implementation of a variant of Gentry's fully homomorphic encryption scheme. It is still not close to being practical, but the efficiency improvements are encouraging.
288.
Implementing Gentry's Fully-Homomorphic Encryption Scheme(eprint.iacr.org)
2 points by sweis 16y ago|1 comments
289.
by sweis 16y ago
Now an equivalent one-time passcode mobile app is available as a free open source app: http://code.google.com/p/google-authenticator/ (Disclaimer: This was my project at Google.)
290.
by sweis 16y ago
Some background on this: Jacob Appelbaum obtained a copy of Haystack and found serious vulnerabilities that could put users at risk. He convinced Haystack to immediately suspend operations. From what I understand, there was a diagnostics mo
291.
by sweis 16y ago
Can you share any details of how your encrypted indices work? Searching over encrypted data is an active research area. I'm curious to learn what you are doing in practice.
292.
MIT Technology Review 2010 Young Innovators Under 35(technologyreview.com)
3 points by sweis 16y ago|0 comments
293.
by sweis 16y ago
I'll follow up on this XSS. I sent emails to your personal address and HN username @yahoo-inc asking for some details.
294.
by sweis 16y ago
Good catch. I meant to say that tcpcrypt is vulnerable to active attacks, rather than passive. The point is that it is not a useful comparison to say that tcpcrypt is 36x faster than SSL, when it offers a weaker level of security.
295.
by sweis 16y ago
The performance comparison to SSL is not really fair, since tcpcrypt does not offer security against passive attackers.
296.
MIT's "Copenhagen Wheel" transforms ordinary bicycles into hybrid e-bikes(senseable.mit.edu)
11 points by sweis 16y ago|0 comments
297.
by sweis 16y ago
Capsicum is a lightweight capability and sandboxing framework that was recently presented at Usenix. The authors have used it to improve the sandboxing of OpenSSL, dhclient, and a version of Chromium Paper: http://www.cl.cam.ac.uk/researc
298.
Capsicum: Practical capabilities for UNIX(cl.cam.ac.uk)
8 points by sweis 16y ago|1 comments
299.
"Is the Internet for Porn? An Insight Into the Online Adult Industry" [pdf](weis2010.econinfosec.org)
1 points by sweis 16y ago|0 comments
300.
by sweis 16y ago
It's not just two messages colliding on the exact millisecond. They can collide on subsequent blocks. So if Alice sends a 10 block message that starts at T_0 and Bob sends a 5 block message that starts at T_5, then the server learns informa

More ›