xnull

18 ms·

31.
by xnull 12y ago
Hey I love (and defend) crypto but ultimately it relies on (sometimes standard) assumptions like the one-way hardness of discrete logarithms. Symmetric systems hardly have underlying information theoretic garuntees - usually symmetric cons
32.
by xnull 12y ago
The security improvements due to Elephant certainly are not proveable (what in crypto truly is?). I argue that there is meaningful security added by Elephant, clunky though it certainly is - because it does make block modification attacks (
33.
by xnull 12y ago
Couldn't it both be true that Microsoft weakened Bitlocker by removing Elephant AND that AES-CBC + Elephant isn't good enough (e.g. lack of integrity)? We might discuss how to best design FDE, or whether FDE is what we want. But t
34.
by xnull 12y ago
AES CBC + Elephant != XTS Elephant 'mixes' the blocks on a sector level to limit CBC block modification attacks. It does not limit the maximum size to align to sectors. It is not XTS. Nor is my claim that Elephant is what you want
35.
by xnull 12y ago
And an unlimited amount in PRISM. "Beginning March 7 2013, PRISM now collects Microsoft (One)Drive data..." http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPl... (27)
36.
by xnull 12y ago
Well no. It went more like this: Does HN really believe in UFOs? Let's assume for the time being no. Is the sudden influx of UFO articles then based on HN popularity or is there a campaign to introduce this content (these campaigns are
37.
by xnull 12y ago
Yeah I do. Although it is pretty tame on the spectrum. Certainly it is a more reasonable speculation than alien contact (low hurtle to jump). For the record I don't believe this is the case. I do reserve the right to adknowledge it as
38.
by xnull 12y ago
"Planned Research There are three components of our proposed research focusing on persuasive messaging, norms-based influence, and social media effects respectively. 1. Persuasive messaging-based influence 2. Norms-based influence 3. N
39.
by xnull 12y ago
Maybe. Hadn't thought of that. My first though was spooks trying to discredit the reputation of the community as 'paranoid' and 'fanciful' given all the good and informative conversation regarding Snowden and other
40.
by xnull 12y ago
What's with the recent uptick in UFO article postings in HN?
41.
by xnull 12y ago
It's worse than 'can technically look at it'. https://en.wikipedia.org/wiki/Third-party_doctrine https://en.wikipedia.org/wiki/Stored_Communications_Act https://en.wikipe
42.
by xnull 12y ago
You mean that by design Tor acts as MITM, and that end-to-end crypto should be used to provide integrity? The major users of Tor need to consider even their ISPs as an adversarial agent - that they are being actively monitored and MITMed. I
43.
by xnull 12y ago
Facebook has a lot more information about you than what you post and 'privacy controls' presumably limit who gets access to the information you do. Both of these things are being abused.
44.
by xnull 12y ago
What we are talking about here is something very different than your neighbors and acquaintances learning more about you. Trade-offs for sure.
45.
by xnull 12y ago
On serious topics I like to avoid clouding the message with satire. The Onion's article is great - just remember that the situation is no joke.
46.
by xnull 12y ago
It's called "key escrow" and there are tons of ways to do it. Look up US patents under 380/286 classification.
47.
by xnull 12y ago
Uh, yeah how about NSA's access to TEMPORA. Your post is a classic example of shifting the burden of proof. You are the one with the belief that contradicts documents, leakers, whistleblowers, journalistic reporting, senatorial reports
48.
by xnull 12y ago
Why not PAKE? "The SRP protocol has a number of desirable properties: it allows a user to authenticate themselves to a server, it is resistant to dictionary attacks mounted by an eavesdropper, and it does not require a trusted third pa
49.
by xnull 12y ago
This should not have been downvoted. "The company, which in 2010 blamed China for an attack on its computer networks, said it recently discovered the Gmail campaign, which "appears to originate from Jinan, China," and targete
50.
by xnull 12y ago
I think we've exhausted this branch of this topic, but I'm sure we'll have an opportunity to discuss this further on other Snowden articles and I look forward to doing exactly that.
51.
by xnull 12y ago
If you remember in 2010 China hacked into Google's infrastructure and gained access to the interface and databases set up for US intelligence surveillance. China can and does filter content at a packet level and TLS 'strong encryp
52.
by xnull 12y ago
To some degree. The US government nudges public opinion (Fallujah PsyOp, Judith Miller, Ken Dilanian, operation MOCKINGBIRD, purposeful placement of objective aligned messages on international media lines, "Heroes in Error", partn
53.
by xnull 12y ago
This is a fallacy of the excluded middle. If the blogger was in fact a domestic blogger (was it?), it can in fact be both about domestic efforts to organize and international influence. The United States and allies have other ways of handli
54.
by xnull 12y ago
It kind of is though, isn't it? Isn't assassinating Mostafa Ahmadi Roshan different than assassinating John Doe? Of course it's censorship. Turns out there is a spectrum to censorship too - like most things, it's complic
55.
by xnull 12y ago
The blocking of Facebook and Google is directly related to PRISM, social contagion theory, international surveillance, and weaponized media. These issues are extremely complex and no single article or HN comment is going to cover it in it&#
56.
by xnull 12y ago
Nope, just providing some information to contextualize policy decisions by various countries. Who said I'm justifying China's policy, or what I "dislike America"?
57.
by xnull 12y ago
I'm not passing moral judgement or making normative claims about goodness or the badness, etc. What I am doing is explaining the incentives that these countries are responding to - showing you not just where the actors are but how the
58.
by xnull 12y ago
This is interesting. Allow me to provide some counterpoints to the bullet points listed for a few (major) countries. China: * The Great Firewall of China blocks people's access to many websites, e.g., Facebook, Google. * Government eng
59.
by xnull 12y ago
Dropbox was revealed as a participant of the PRISM program: anything you store there is searchable. The same is true of Facebook and Google and Yahoo, Apple, all cell phone carriers, all internet carriers and other cloud storage companies i
60.
by xnull 12y ago
"This is a major leap forward in the NSA's ability to exploit Facebook using FISA and FAA authorities" - NSA "...by exploiting inherent weaknesses in Facebook's security model." - GCHQ http://hbpub.v

More ›