thadt

11 ms·

151.
by thadt 2y ago
Not OP, but 'zipping and encrypting' one thing (a file for example) does not leak information by itself. The problem comes when an adversary is able to see the length of your encrypted data, and then can see how that length change
152.
by thadt 2y ago
Playing Sopwith as a kid was great - and taught valuable life lessons. To this day, before I open my mouth to say something hard, I stop and think: "before I drop this bomb, am I flying straight - or upside down?"
153.
AI isn't useless. But is it worth it?(citationneeded.news)
17 points by thadt 2y ago|1 comments
154.
by thadt 3y ago
As a child of the 80's who remembers scouring the local library for Star Wars books, a couple of years before the Zahn trilogy, this hits hard. I read them. Played the games. Not only was the Star Wars universe in the 90's really
155.
by thadt 3y ago
Yes, C's stack usage can be unintuitive when working in a constrained environment, especially when accustomed to the affordances of desktop operating system. I once joined a project where several developers had spent a couple weeks try
156.
by thadt 3y ago
Thanks for hosting (and posting it here). I was reading the "What Modern NVMe Storage Can Do..." paper just yesterday, and this was a great followup.
157.
by thadt 3y ago
On a cursory glance, this looks rather quite a bit like a Noise [1] pattern. One rather nice aspect of Noise is that there is a good reference chart for which security properties one should expect from different combinations - saving time o
158.
by thadt 3y ago
Yep, the underlying mechanics have to do the same thing - just swept under another a different rug. I imagine the (potential) advantage as being similar to when we had to do the same thing with JavaScript before promises came along. You wou
159.
by thadt 3y ago
That sounds kind of amazing. Working low level without an OS sounds like exactly the kind of place that Rust's concurrency primitives and tight checking would really be handy. Doing it in straight up C is complicated, and becomes incre
160.
by thadt 3y ago
Yeah, a small GM tube (which is probably all you would want in a high field) would weigh very little, and could be read with a relatively simple circuit. However, reading the associated reference, apparently they're using a "relay
161.
by thadt 3y ago
Maybe, but this can be done really well. Probably the best class I had in grad school was a bunch of grad students reviewing papers. We would meet once a week, and the professor would go over the paper, we would discuss our reviews, and h
162.
by thadt 3y ago
A counter-point that perhaps everyone is taking PQ a bit too seriously [1]. Personally, it seems reasonable to at least spend some effort preparing for it, given the rather long lead time required to develop, study and stress the constructi
163.
by thadt 3y ago
This specifically (CPU exhaustion attack) is called out as a rationale for why Wireguard implements cookie reply packets[1]. If a verified source is DOSing you with bad handshakes, maybe its time for their IP to be put in timeout in an upst
164.
by thadt 3y ago
Indeed, Zig's crypto library is on point. For example, the aforementioned KyberSlash was already patched two months ago[1], by jedisct1 (author of the inimitable libsodium). [1] https://github.com/ziglang/zig/
165.
by thadt 3y ago
> David Benjamin, Google Checks out. Google's development culture seems to live out the advice implied in Hyrum's law[1]. From Protocol Buffers intentionally changing JSON output field order[2], to Chrome randomly injecting an
166.
by thadt 3y ago
Coincidentally, was listening to the latest episode of 'You are not so Smart'[1], interviewing Charles Duhigg on his new book. One of the anecdotes brought up was how NASA changed their astronaut interviewing approach in the 80&#x
167.
by thadt 3y ago
> It should be emphasized that activity measures the source disintegration rate, which is not synonymous with the emission rate of radiation produced in it's decay. Frequently, a given radiation will be emitted in only a fraction of
168.
Post-Quantum Cryptography for the Go Ecosystem(words.filippo.io)
4 points by thadt 3y ago|0 comments
169.
by thadt 3y ago
C's type checker is the MMU - when you mess up types, it give you a segfault. If you're lucky.
170.
HPE says it was hacked by Russian group behind Microsoft email breach(techcrunch.com)
3 points by thadt 3y ago|0 comments
171.
by thadt 3y ago
While the contribution to Python Cryptography is incredibly awesome, I'd suggest that perhaps the lede is slightly buried. Having a large suite of well documented test vectors, including both positive and negative examples, raises th
172.
Labscam(hachyderm.io)
4 points by thadt 3y ago|0 comments
173.
by thadt 3y ago
Building games that you can only multi-play on official servers is short sighted. I started playing early-access ARK with my 5 year old who was super into dinosaurs. He's now 13 and still loves playing ARK with his friends. He was real
174.
by thadt 3y ago
WebCrypto also supports ECDH/ECDSA, so one could get by without RSA. But point well made about it being too bad that WebCrypto doesn't offer higher level tools. I'm developing one such third-party library right now, and whi
175.
by thadt 3y ago
I think this true, and in agreement with the parent comment. A working complex system evolves out of a smaller working simple system. You have to climb the hill from the one side. Getting to a complex, working system is the 'learning&#
176.
by thadt 3y ago
One might argue that a lot of languages depend heavily on compile time code generation. Just because Rust's macros, or C++'s template metaprograms are sweeping their generated code under a stylish rug doesn't mean it's
177.
by thadt 3y ago
Perhaps part of the issue with the "evolution of the programming language field in recent years" is that 'simplicity' is a high cost optimization. Most every 'simple' system I've been a part of building st
178.
by thadt 3y ago
100% this. Had a class using Microsoft’s MakeCode last year, which pushes Github integration for sharing code - which seemed like a really cool concept for a group project they were working on. So I have the class follow the link from Micro
179.
by thadt 3y ago
> The medical establishment offers a shiny tempting solution. First, a total unwillingness to trust anything, no matter how plausible it sounds, until it’s gone through an endless cycle of studies and meta-analyses. Isn't this just.
180.
by thadt 3y ago
In theory - yes, multiple ciphers are harder to break. In practice, we have zero examples of anyone breaking (good) modern ciphers, and lots of examples of people breaking clever constructions involving those ciphers.

More ›