tyho

31 ms·

301.
by tyho 12y ago
All you need is a commitment scheme. This is more secure than having to trust NIST and does not rely on being able to receive their beacon. Alice and bob want to decide between Italian or Thai food using a coin flip, but do not trust each o
302.
by tyho 12y ago
Everything that could go wrong has gone wrong. ECB mode AES? Check. No authentication on encrypted data? Check. RSA without blinding? Check. Bad random number source? Check Check Check.
303.
by tyho 12y ago
To be fair, yes. I personally use Lastpass although I am not totally satisfied with it because it has not been audited and is not open source. What the "expert" was effectively telling people was to search "secure password va
304.
by tyho 12y ago
What's worse IMO is that he says: > use some form of secure password vault on your phone [instead of writing them down] Writing passwords on a piece of paper and keeping that paper in your wallet makes it impossible for a remote hac
305.
by tyho 12y ago
I have appended my comment correcting for my mistake.
306.
by tyho 12y ago
CA structure is not vital to tor at all. All connections to hidden services are encrypted and authenticated end to end. the URL serves as the public key.
307.
by tyho 12y ago
There is a program called scallion [1] which can generate Vanity addresses like these. I am assuming that they searched for facebookwww?.onion and then just made up the acronym for the last character. They are therefore trying to brute forc
308.
by tyho 12y ago
It was not the decision of debian to rebrand Firefox. Mozilla forced them to. Debian wanted to be able to ship security patches whenever they pleased, Mozilla required that they shipped Firefox stock, even if that meant waiting for Mozilla
309.
by tyho 12y ago
This is not what CRC's are used for. CRC's are faster to compute, which really matters on Gbit network links. Also CRC's can allow you to not only detect errors but fix them within a certain threshold without retransmitting.
310.
by tyho 12y ago
>What about the other editions of Minecraft? Will they stop being developed? >There’s no reason for the development, sales, and support of the PC/Mac, Xbox 360, Xbox One, PS3, PS4, Vita, iOS, and Android versions of Minecraft to
311.
by tyho 12y ago
Relevant patent I think: https://www.google.com/patents/US20130088491 If the emscripten lot had decided to patent "Method to reconstruct flow structures from binary machine code" then Zynga would not have the
312.
by tyho 12y ago
If you use anything other than a very strong master password, this scheme leaves you unprotected. When you sign up to a site, you are effectively giving that site, and anybody intercepting that communication SHA256(base_phrase + " - &q
313.
by tyho 12y ago
How long before, because that would make it impossible for people to spend their coins at all during that period, which could be annoying. Also, does this mean that to verify a transaction can be considered instant, the merchant has to chec
314.
by tyho 12y ago
How could you prevent somebody signing a transaction using your service, waiting until the nLockTime has expired, then creating a transaction that is not signed by you but valid due to the nLockTime expiry? They would then be in a position
315.
by tyho 12y ago
Which merchants currently accept your key for instant confirmations? From the bitcoin wiki: [green addresses] are generally considered a bad idea and not advisable to implement.
316.
by tyho 12y ago
I just called who I think is the head of the site, a little ironic that the head of a site that is funded by the government to educate how to secure ones privacy online publishes his mobile number in the WHOIS data for said site, he asked m
317.
by tyho 13y ago
He has some IM profiles listed on his flyertalk profile: http://www.flyertalk.com/forum/members/jkb76.html Hasn't gotten round to adding whatsapp yet!
318.
by tyho 13y ago
Why would the NSA put a backdoor in an open source component of iOS and OSX when presumably, it would have been just as easy to put it in the closed source part, where it would be much less likely to be found and even less likely to ever be
319.
by tyho 13y ago
Their "fix" will do nothing to prevent location information leaking. Making more accounts and getting more distances will increase the precision just as seeing more satellites increases GPS position. No matter how much noise they