tveita

48 ms·

511.
by tveita 10y ago
People were finding buffer overflows in zlib when it was more than twice as old as Brotli, and they're still finding bugs in libpng. I don't see any reason to think that Brotli is "de-facto secure" or even mature. If his
512.
by tveita 10y ago
If your gym has metal lockers I don't think it will happen any time soon.
513.
by tveita 10y ago
The output image uses Rec. 709 R’G’B’ components, where the darkest value is 16 and the brightest is 235, which is why the colors look washed out. It would be fair to convert back to the original color space for the comparison. https:&#x2F
514.
by tveita 10y ago
I would imagine that an immortal society would value individual lives less, since endless population growth eventually becomes a nuisance, and people would implement some kind of population culling. Whether old or young lives would be value
515.
by tveita 10y ago
> The engineers contend that Apple devices basically don’t return bogus data. It's much easier to pretend that this is the case when the file system isn't verifying it. Checksumming would probably expose problems that would oth
516.
by tveita 10y ago
My impression is that the DAO people are early adopters mostly from the Ethereum Foundation itself, so the "150 million dollars" number that is bandied about would be mostly paper profits from a much smaller investment. It doesn&#
517.
by tveita 10y ago
Guile may be the closest, but it failed to gain much traction despite support in some popular GNU tools like GDB. It's certainly not installed on most systems, but it at least has a tiny chance of being present.
518.
by tveita 10y ago
KMAC is a proposed new MAC standard based on the Shake function used in SHA-3. It explicitly is defined for all key sizes: "K is the key, a byte string of any length. An empty string is a legal input." It has some guidance about c
519.
by tveita 10y ago
You said key size does not matter. This post doesn't seem to relate to that at all.
520.
by tveita 10y ago
Probably still because of the license? Btrfs is GPL. It will be interesting to see which license, if any, APFS is released under.
521.
by tveita 10y ago
HMAC-SHA256 is a secure and conservative choice for almost any application, but allows a variable key size. I'm sure I've seen deployments with a 0 bit key. Most algorithms in use happen to be defined only for a 128 bit symmetric
522.
by tveita 10y ago
When a bank is hacked, millions of dollars go missing. Police is called in, investigations are launched. When an election is hacked, a plausible candidate gets some extra votes in their favor, tipping the election. Billions of dollars get s
523.
by tveita 10y ago
Uber and Lyft spent millions of dollars in campaigning to make people vote in their favor according to the reports I've read. If "media and lobbies" can get people to vote in their favor, why didn't the side with the mon
524.
by tveita 10y ago
This is already accounted for in many voting systems. You can either get a new ballot after you take the picture as "proof", or as a last resort you can spoil your ballot.
525.
by tveita 10y ago
Hacker News has been the most Bitcoin friendly of the communities I visit on a regular basis. It probably has the highest ratio of Bitcoin enthusiasts you'll find in a mainstream community outside of drug fora and the Bitcoin community
526.
by tveita 10y ago
The IPFS protocol thankfully works independently of any *coin. It's not clear to me that Filecoin is any more or less of a scam than Bitcoin, nor that involving "blockchains" adds any value at all in this case.
527.
by tveita 10y ago
I've been trying to find performance evaluations of distributed file systems, and in most tests I've seen Ceph is a lot slower than alternatives like GlusterFS. When you say Ceph is "state of the art in software defined stora
528.
by tveita 10y ago
I look forward to one day seeing what these diagrams are actually supposed to look like... I kind of suspect that once you're used to the wider gamut, other screens will look washed out. Like how low-res CRT screens look awful and smud
529.
by tveita 10y ago
We are talking about online video, where DRM is astoundingly ineffective. Any release is almost immediately available to download. Whether or not piracy is a problem is immaterial to the importance of DRM if DRM has no effect on piracy.
530.
by tveita 10y ago
I guess the high potential reward outweighs the low chance of success for each individual product. Same reason anyone else makes a messaging app, except that Google has other ways to capitalize on a success than hoping to be bought up. Peop
531.
by tveita 10y ago
What queue systems guarantee non-duplicated message delivery? At-least-once and at-most-once delivery can done with relatively easy hand-off strategies, but I don't see how you would guarantee exactly-once delivery between the message
532.
by tveita 10y ago
There are other religions that will make the same promises for less money.
533.
by tveita 10y ago
There is definitely room for better and less gameable quality evaluation functions than PSNR and SSIM, but I would have liked to see at a minimum a description of how the algorithm was designed and a practical evaluation against other simil
534.
by tveita 10y ago
So an exchange who lost a significant amount of money in a hack recently is vocally opposed to a license that requires exchanges to perform security audits and to stay solvent? https://news.ycombinator.com/item?id=11550765
535.
by tveita 10y ago
It's more or less unavoidable if voters are voting strategically. The sad and undemocratic reality of FPTP is that voting for a third-party candidate with little chance to win is "throwing away your vote". I understand it tha
536.
by tveita 10y ago
The first-past-the-post voting model is broken and virtually guarantees a two-party system where voters must vote strategically for candidates they don't support to avoid their least-preferred candidate winning. For instance, you may p
537.
by tveita 10y ago
Most the horrible security bugs in Java show up in the sandbox, where attackers can supply arbitrary code for you to run. In contrast, Java as a server language has an excellent security record IME. The last public patch panic I can remembe
538.
by tveita 10y ago
That doesn't look like a C specific error to me. In the release notes CVE-2016-2107 is listed as a padding oracle attack. Padding oracles are a logic/design error that is not easily caught by any language feature. CVE-2016-2108 on
539.
by tveita 10y ago
Stores in an area could work together to supply a food bank? Or even petition the government to set one up paid by their taxes.
540.
by tveita 10y ago
There really should be a way to disable it. People are trusting their phones to keep their business and private data safe. It is unacceptable to expose 2 billion devices to extra-privileged vulnerabilities to appease some MPAA executives in

More ›