tveita

69 ms·

721.
by tveita 12y ago
Like (<+>) :: Monoid m => m -> m -> m (^?) :: s -> Getting (First a) s a -> Maybe a As a Haskell beginner I didn't find it to be a particularly self-documenting language. Between the use of custom operator
722.
by tveita 12y ago
I think the proposed changes were a bad idea for political reasons, and arguably for technical reasons as well, but the controversity for the internet at large seems to stem from an insinuation that the changes were done to make it possib
723.
by tveita 12y ago
What kind of discussion of SHA-3's security are we looking for here? Do you want HN commenters to determine if SHA-3 would have been cryptographically secure with the proposed changes? I don't think most people here are qualified
724.
by tveita 12y ago
Exercise: This padding scheme will not hide the length of the file name as intended. Why?
725.
by tveita 12y ago
Tarsnap generates a key file - your password is not used directly to derive the key. A password is used for your account, and for encrypting the key file.
726.
by tveita 12y ago
Kafka did lose a lot of data in the Jepsen test, as it will by design to preserve availability under some specific circumstances. The behavior in question will be configurable from Kafka 0.8.2, by setting "unclean.leader.election.enabl
727.
by tveita 12y ago
Digital signatures were not invented with Bitcoin. TLS supports client certificates perfectly well, and your browser probably supports them. This scheme also has a lot of beginner-level oversights, IMO. It doesn't delimit the URI from
728.
by tveita 12y ago
It's not obvious, but you can click and drag the chart to see older results. The drop in max latency is really notable. I assume that was caused by garbage collection improvements, but I can't find any details about what GC techni
729.
by tveita 12y ago
There are also proposals for lower-layer opportunistic encryption, like Tcpcrypt. Being an OS feature it would take considerably longer time to reach wide-spread deployment, but it would add opportunistic encryption to all TCP connections,
730.
by tveita 12y ago
His definition is much closer to "popularity" than to anything I would recognize as "morality". It's strange to exclude intent from your model when it's an important factor in almost all systems of morality.
731.
by tveita 12y ago
I'm curious how this is executed. Is it like a query engine, where you work with the entire query up-front, apply transforms and build a query plan? Or is it more like an event loop, where you run as far as you can until the code block
732.
by tveita 12y ago
I think that's what Heka is supposed to be. It looks pretty promising, but I have yet to meet anyone who uses it. https://blog.mozilla.org/services/2013/04/30/introducing-hek...
733.
by tveita 12y ago
That's a bad idea if "optional" is a number, a boolean or a string.
734.
by tveita 12y ago
If they did fix their algorithm, no one would pay for link spam any more.
735.
by tveita 12y ago
> But beyond that, regardless of what the "MVC" is, we've still got some sort of separation going on. But the separation is often pointless. Django divides things into models, views and templates, which correspond to most
736.
by tveita 12y ago
> Bad parents are the ultimate equalizer, and are inherently unfixable. That's a large assumption. I am sure many things can be done to improve peoples' ability, means and motivation to be good parents.
737.
by tveita 12y ago
The best solution I've seen so far is bind mounting /dev/log to a syslogd on the host and making sure everything in the container logs to syslog. I would be pretty happy if Docker just had a simple implementation of /dev
738.
by tveita 12y ago
If ag knows it can't search the whole file, it should at least give a warning. Or why not use search_stream? Silently skipping parts of it seems like the worst thing to do.
739.
by tveita 12y ago
I switched to this after Ack 2 removed all options to search through binary files. ag is less picky, and the increased speed is a nice bonus.
740.
by tveita 12y ago
If the general public considers a movie boring, giving it a mediocre rating seems fair. Other members of the general public will then know to avoid it. They'll want to watch movies they like, not movies you like. What you may want is a
741.
by tveita 13y ago
I think this is even covered in the spec. The authorization server MUST require the following clients to register their redirection endpoint: o Public clients. o Confidential clients utilizing the implicit grant type. T
742.
by tveita 13y ago
If every application provided their own encryption, most of them would get it wrong, and it still wouldn't protect important metadata. I don't think that's much of an ideal. I don't have an issue with adding application
743.
by tveita 13y ago
From an end user's perspective Tarsnap certainly deals with files and folders. It outsources most of that work to libarchive, which is kind of my point. The article says to "Encrypt things at the highest layer you can.", but
744.
by tveita 13y ago
Keep in mind that the simpler implementation of block layer encryption also makes it easier to implement and audit. I'm not as confident in the design and implementation of encryption in e.g. ZFS as I am in full disk encryption. I&#x27
745.
by tveita 13y ago
Halfway through the tag space of a 160-bit tag is 2^159. You're looking for an exact match, not just a collision.
746.
by tveita 13y ago
The collision attack on SHA-1 should not threaten HMAC-SHA1. Even HMAC-MD5 hasn't been successfully attacked yet, AFAIK. Poly1305 is arguably less misuse-resistant, since it requires a nonce.
747.
by tveita 13y ago
A difference between encryption keys and MACs is that MACs do not become weaker as the attacker gains more computing power, except by making bruteforcing the authentication key easier, which does not depend on the length of the tag. The att
748.
by tveita 13y ago
There's a password hashing competition going right now that will hopefully result in some more state-of-the art primitives available through a suitable interface. https://password-hashing.net
749.
by tveita 13y ago
If miners want to provide this service, can't they just resolve double-spends based on mining fee? It doesn't seem like it there needs to be a middle-man here.
750.
by tveita 13y ago
Threefish is actually a tweakable block cipher - it takes a 128-bit tweak in addition to the key and the input, so it should be well suited for disk encryption. It's a bit disappointing that it hasn't seen more uptake since the SH

More ›