y7

29 ms·

241.
by y7 10y ago
I wonder if storing the hashing parameters next to the hash is the right approach to take for systems. Your system isn't going to support all hashes (adds a lot of library bloat, you don't want to support weak hashes), so you&#x27
242.
by y7 10y ago
Paper: http://www.aaai.org/ocs/index.php/SOCS/SOCS12/paper/download... Previous HN thread: https://news.ycombinator.com/item?id=9714774
243.
by y7 10y ago
Did you have a look at their party programme? Because their politics extend beyond just technology matters. I think their name does them a disservice; but they probably wanted to maintain ties to the more global Pirate Party movements.
244.
by y7 10y ago
If you're security-minded you're already extra suspicious, because then you must have something to hide.
245.
by y7 10y ago
Yes, using SHA-256 you can create a cryptographically secure PRNG. See https://en.wikipedia.org/wiki/Cryptographically_secure_pseud...
246.
by y7 10y ago
Easier fix: using a cryptographically secure PRNG. Like the article mentions, newer machines employ this technique, but of course it costs money to replace them.
247.
by y7 10y ago
Yes. Usually, I manage to get out of it (simply by asking and explaining).
248.
by y7 10y ago
I agree that this is annoying and happens all too often. In this case, the filename contains 2016, and the PDF metadata suggests the documented was created on 6 May 2016.
249.
by y7 10y ago
> And why[while?] one might argue about the "better" This is my point. Python's philosophy isn't "bad" in a universal sense (let alone broken). It's just that the author has a different philosophy for p
250.
by y7 10y ago
The only way I see a philosophy as being a broken one if it is founded on false premises, or internally inconsistent (or do you see a different way?). Which is the case with Python and why?
251.
by y7 10y ago
The name of the function when you read the code is still wrapper. The point of naming it is that it allows you to refer back to it, as well as provide the reader with a clue to what it does. This way, Python attempts to reduce nesting, wh
252.
by y7 10y ago
Very short-sightedly written. It sounds like the author just wants a language with a different philosophy, and instead of realizing this goes on to call the differences "obvious flaws in design" that aren't improved because
253.
by y7 10y ago
User IDs and usernames, are generally public information, so I do not see the problem with storing that in a cookie, as long as you authenticate it (e.g. using a MAC, and you might want to include a timestamp and a version number). It does
254.
by y7 10y ago
Yes. It only works when the original recipient is offline (when they come back online it can be detected).
255.
by y7 10y ago
Basically, disagreement over the term "backdoor", which sounds like it was put there intentionally. WhatsApp/Moxie: we made a security/usability trade-off. The video's author/The Guardian: this trade-off allows
256.
by y7 10y ago
For those not wanting to watch 14 minutes of video, here is the author's blog post explaining the vulnerability: https://tobi.rocks/2016/04/whats-app-retransmission-vulnerab...
257.
by y7 10y ago
Doesn't being opinionated necessarily preclude listening to a community and following consensus?
258.
by y7 10y ago
You missed the important bit. From the abstract: > The data suggest that the blue component of the white-LED may cause retinal toxicity at occupational domestic illuminance and not only in extreme experimental conditions, as previously r
259.
by y7 10y ago
I could see the example of LaTeX in the browser being actually useful, when for example you're on a computer where you don't have permissions to install software.
260.
by y7 10y ago
State for password managers is almost always stored encrypted, i.e. in a form useless to the attacker.
261.
by y7 10y ago
Can you elaborate? Why are the Ideapads terrible? Why get a Developer Edition?
262.
by y7 10y ago
> (discussing mod actions was against the rules) To be fair, I think that's a bad rule. Any type of government – even when it's something small like the moderator team of an internet forum – should have some accountability towa
263.
by y7 10y ago
I'd really like to learn the proper numbers on this. What are the precise risks of a timing hiccup or second ovulation during a menstrual cycle? Also, how does regularity of one person's period affect these risks? How accurate are
264.
by y7 10y ago
Then again, the typical use failure rate of the standard male condom is 18% [1]. Personally, I'm more interested in perfect use failure rates than typical use failure rates. [1] http://www.contraceptivetechnology.org/wp
265.
by y7 10y ago
It does, but it's beta and Android only: https://whispersystems.org/blog/signal-desktop/
266.
Mozilla Is Fighting for EU Copyright Law Reform(blog.mozilla.org)
43 points by y7 10y ago|2 comments
267.
by y7 10y ago
To me, this mostly reads like an ad for OP's product Inky.
268.
by y7 10y ago
TLS is a form of transport encryption, which encrypts data between the client and the server. End-to-end encryption encrypts data between two clients, so that the server cannot read any messages. The paper claims that while iMessage is mark
269.
by y7 10y ago
The paper is called "Dancing on the Lip of the Volcano: Chosen Ciphertext Attacks on Apple iMessage" by Christina Garman, Matthew Green, Gabriel Kaptchuk, Ian Miers, and Michael Rushanan, Johns Hopkins University. Abstract: > A
270.
iMessage's 'End-To-End' Encryption Hardly Better Than TLS(tomshardware.com)
91 points by y7 10y ago|32 comments

More ›