wolf550e

95 ms·

961.
by wolf550e 11y ago
Many people have tried to find flaws in his math. DJB and friends now work on formal verification of implementations.
962.
by wolf550e 11y ago
Go is for writing api servers which otherwise should be written in python but must be fast. Rust is for the lowest level code which is not assembly, with all the performance tricks, but that should be secure. Rust is expensive to develop -
963.
by wolf550e 11y ago
It also has 5000 employees...
964.
by wolf550e 11y ago
Lots of motion in the frame -> high bandwidth requirements.
965.
by wolf550e 11y ago
The spec for Ed25519 signatures in TLS is not yet ready: https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-02 X25519 for key exchange in TLS is ready and is in openssl master (and in boringSSL). I don't know the s
966.
by wolf550e 11y ago
What do you use instead? SSH? IPSec?
967.
by wolf550e 11y ago
has SSLv2 enabled or has CVE-2015-3197 and accepts SSLv2 cipher suites even with SSLv2 disabled.
968.
by wolf550e 11y ago
small nit: 2 CPU-hours, 3 minutes wallclock time on a high end server (40 cores).
969.
by wolf550e 11y ago
Do you understand what "two raised to the 256th power" means? No, you can't bruteforce AES-256 in years or decades, even if you owned Amazon and were willing to use all the servers for this.
970.
by wolf550e 11y ago
Using SIMD instructions (MMX/SSE/AVX) ○ Most operators limited to floats but recently more general purpose (integer) vector operations have been supported ○ Registers keep increasing in size -- the next generation of CPUs
971.
by wolf550e 11y ago
A bug in DTLS will not get attention because people don't run DTLS.
972.
by wolf550e 11y ago
https://youtu.be/Set_IES7VZE?t=1672
973.
by wolf550e 11y ago
Elon Musk explained why they need drone ship landings at all, once they have proved they can land on land: because some missions require landing downrange. I explained that Hans Koenigsmann said 27 minutes 57 seconds into NASA's Jason-
974.
by wolf550e 11y ago
They said during prelaunch news conference that for this mission, falcon 9 had plenty of oomph to get the first stage back to the pad (payload mass is low), but couldn't because of environmental assessment not being ready.
975.
by wolf550e 11y ago
Article is old; situation in 2016 might be different.
976.
by wolf550e 11y ago
Can that hardware keep up with crypto bitrate and firewall rules, on multiple 10gb links?
977.
by wolf550e 11y ago
Not knowing that what you are doing is illegal is not a defense for you, true. But when a cop arrests you for doing something they believe is illegal but in fact is legal, you are not allowed to resists arrest. You must allow yourself to ge
978.
by wolf550e 11y ago
How can you be multiscalar with a decoder that only does 1 ops/cycle? Intel does 6: > From the original Core 2 through Haswell/Broadwell, Intel has used a four-wide front-end for fetching instructions. Skylake is the first chan
979.
by wolf550e 11y ago
It is very well known that the out of order execution engine of modern cpu cores has a very high power overhead. https://en.wikipedia.org/wiki/Out-of-order_execution https://en.wikipedia.org/wiki/B
980.
by wolf550e 11y ago
MPEG DASH works as well as Apple HLS, and does not require flash on modern browsers (it does require some javascript AFAIK). It works on desktop Safari but not iOS.
981.
by wolf550e 11y ago
What you describe is easy to bruteforce using oclhashcat. Use scrypt or bcrypt or pbkdf2, in that order of preference.
982.
by wolf550e 11y ago
planted at a different time, maybe by a different attacker. https://twitter.com/thegrugq/status/679028059907887104
983.
by wolf550e 11y ago
What if you want to run vendor provided Windows-only binary drives for some weird hardware?
984.
by wolf550e 11y ago
Read about polymorphic inline caches which Java and Javascript JITs do.
985.
by wolf550e 11y ago
No cryptographers believe the NIST curves are backdoored. OpenSSL's and NSS's implementations of P-256 have been reviewed and are considered secure. My conclusion is that if your CSPRNG is good, P-256 ECDHE with openssl should be
986.
by wolf550e 11y ago
"SSL/TLS state machine, version negotiation and record layer rewritten" from the release notes sounds scary. The changelog says: *) State machine rewrite. The state machine code has been significantly refactored in o
987.
by wolf550e 11y ago
You can prove you control the domain by DNS: https://letsencrypt.org/howitworks/technology/
988.
by wolf550e 11y ago
As Elon Musk wrote [1]: It is, however, important to clear up the difference between "space" and "orbit", as described well by https://what-if.xkcd.com/58/ Getting to space needs ~Mach 3, but G
989.
by wolf550e 11y ago
Rogue Google employee can read your mail (a fireable offense, but possible). US Government can compel Google to share your mail.
990.
by wolf550e 11y ago
MythBusters episodes with the repetitive stuff edited out: https://www.reddit.com/r/smyths

More ›