thadt

16 ms·

241.
by thadt 4y ago
Eh, it's not just current web serving protocols. Any protocol where: - An application uses compression - An attacker is able to supply chosen data to it - The application compresses the attacker's data and static secret data toget
242.
Cryptographic Agility and Superior Alternatives(soatok.blog)
2 points by thadt 4y ago|0 comments
243.
by thadt 4y ago
Just listened to that episode yesterday - it was great thanks! Listening to Deirdre's description of how it got ported to Sage and accelerated in short order - so she could break it in a few minutes on her laptop - in Python, totally r
244.
by thadt 4y ago
The problem is that 'identity' is context specific. You're right that it is an artifact of consensus - but it is actually consensus in different groups for different reasons and at different points in time. An interesting stu
245.
by thadt 4y ago
Yep - I've had exactly this experience. In the past I had skunkworks'd a program which became a primary diagnostic tools at the company. It was maintained in an ad-hoc manner and a number of people worked on it over time. A few ye
246.
by thadt 4y ago
You're absolutely right - everyone has offloaded the 'identity verification problem' to your email provider. Because doing it well is an intrinsically hard/expensive problem. Replace 'government should provide a dig
247.
by thadt 4y ago
All the anger toward Google misses the larger point – this isn’t only Google's problem. If I get locked out of my Apple account, or my Amazon account, or my <insert online service here> account, how do I prove that I am me? A pas
248.
by thadt 4y ago
Isn't there already userspace access to the kernel's crypto machinery? https://www.kernel.org/doc/html/latest/crypto/userspace-if.h...
249.
WebAuthn: Passkeys(imperialviolet.org)
4 points by thadt 4y ago|0 comments
250.
by thadt 4y ago
That’s how I got my first development gig. Freshly moved to a new city and needing a job, I did the usual ‘apply to everything in the paper and online’ shotgun approach. After a week of that, I suited up and started driving around to variou