zahllos

12 ms·

91.
by zahllos 3y ago
Outlook are a pain. If you don't regularly send email to outlook.com they forget your IP and start responding with 550s. I have a daily message sent out from my server to a test account at outlook.com for two reasons: to try to work ar
92.
by zahllos 3y ago
Slight nitpick but you can get edge on both Mac and Linux. They package both a deb and an rpm here: https://www.microsoft.com/en-us/edge/business/download?form=... and it is also available on Mac. The main re
93.
by zahllos 3y ago
I'm not a 6 figure HN/SV engineer, don't live in the US. But that's not the problem. YouTube premium simply isn't worth €168/year to me (I don't use it enough) and they'll still track me anyway wherev
94.
by zahllos 3y ago
Yes this is exactly the case here. Many applications get this for free because the gui toolkit provides the abstraction - both Qt and Gtk exist to do this for cross platform purposes. However if you want things toolkits don't provide t
95.
by zahllos 3y ago
If you want to be pedantic we can say there is definitely a collision in SHA-2. Assume we have 2^256 unique inputs. Hash them all and assume no collisions. Now, if we have one more unique input (so 2^256 + 1 inputs) we have a collision. The
96.
by zahllos 3y ago
Quoting directly from https://nostarch.com/crypto-dictionary under the entry SHA-2: > Unlike SHA-1, SHA-2 algorithms aren’t broken and are unlikely to ever be. There's also the fact NIST themselves deprecated SHA-1
97.
by zahllos 3y ago
I agree that if you can, BLAKE3 (or even BLAKE2) are nicer choices than SHA2. However I would like to add the following comments: * SHA-2 fixes the problems with SHA-1. SHA-1 was a step up over SHA-0 that did not completely resolve flaws in
98.
by zahllos 3y ago
The actual enforcement mechanism is the root store programs, i.e. the browsers ultimately decide. The CA/Browser forum is supposed to be a cooperative way for CAs and Browsers to agree technical standards but on the CA side this self r
99.
by zahllos 3y ago
And for those that aren't aware: https://en.m.wikipedia.org/wiki/Open_Firmware was a forth based bootloader for PowerPC. This is a very cool project, author, love it!
100.
by zahllos 3y ago
Since it is such a pervasive idea I will also drop a message to agree. I'm a mid 30s contractor and one of the youngest members of my team.
101.
by zahllos 3y ago
Also leaving aside this post, solidrun's honeycomb boards are a mini itx form factor that is ARM SystemReady. You can run windows on arm on it, and it has UEFI if you want that, meaning no need for a BSP. Have booted several Linux dist
102.
by zahllos 3y ago
Competence was never the point I was making by adding nationality. Foreign nationals don't meet the "Unquestioning loyalty to the US" criterion for security clearance, meaning it is much less likely they might collaborate wil
103.
by zahllos 3y ago
> I didn't see actual benchmarks, but Serpent sounds at least three times slower than Rijndael You can read the original report on the candidates: https://nvlpubs.nist.gov/nistpubs/jres/106/3/j63n
104.
by zahllos 3y ago
It is NIST's competition. They've been open that if there are good reasons not to standardize Kyber then they won't, but, absent good reasons then they'll pick what they want. The evaluation criteria are, naturally, in a
105.
by zahllos 3y ago
No, true, the post did not explicitly state this. However the post did suggest that NIST is specifically out to get him and take a swipe at the other candidates: > Is NIST trying to derail his work by standardizing crappy algorithms with
106.
by zahllos 3y ago
I fully admit to having a weak spot for Serpent - it is self-bitslicing (see the submission package or the linux kernel tree), which in hindsight makes constant time software easier to write, and it was faster in hardware even when measured
107.
by zahllos 3y ago
DualEC: agree. Wanted to point out that it was a poor PRNG _anyway_ and point out that the NSA's attempt at backdooring the RNG wasn't that great - as you say, RSA BSAFE used it and it made no sense. We could also point out they w
108.
by zahllos 3y ago
This comment is factually incorrect on a number of levels. 1) single-handedly killed US government crypto export restrictions - Bernstein certainly litigated, but was not the sole actor in this fight. For example, Phil Zimmerman, the author
109.
by zahllos 3y ago
> That's strong evidence that the email is authentic! So I run my own email server for family (mostly) but a couple of friends. As the GP points out, the DKIM keys do not identify the user and in particular I can produce a validly s
110.
by zahllos 3y ago
Probably related: "Gnat Pro for Rust": https://www.adacore.com/press/adacore-announces-gnat-pro-for...
111.
by zahllos 3y ago
Meanwhile if we applied the lessons of command and conquer, no enemy can defeat the power of sandbags!
112.
by zahllos 3y ago
Because it won't sell in anywhere near the volumes comparable x86 motherboards will. It's the same for the Talos II using IBM's POWER. It costs a lot because a) it is designed as a workstation and b) the volume just isn'
113.
by zahllos 3y ago
It depends what you mean or want by way of introduction. Are you interested at all in how your CPU does what it does and why, or were you interested in the "learn x86, ARM and RISC-V" tag-line that was originally on the book title
114.
by zahllos 3y ago
Better option: Computer Organization and Design by Patterson and Hennessy, ISBN 978-0124077263. Comes in MIPS (original version now in its 5th edition), ARM and RISC-V focused flavors, covers "instructions unique to architecture X&quot
115.
by zahllos 3y ago
An AEAD mode on a physical disk doesn't make a lot of sense. You are mapping disk blocks to disk blocks (in the case of cryptsetup, literally via devicemapper) and so you have two choices: a) alter the sector size to something weird so
116.
by zahllos 3y ago
Sadly first-party builds aren't available for my platform. I suspect the complexity might be in the number of languages they're trying to simultaneously use, plus the complexity of qtwebengine, which requires a working chromium po
117.
by zahllos 3y ago
I am a big fan of Anki, and for reasons I wanted to build it on a machine I have on an uncommon architecture (it has a graphical desktop). I have all of the components... rust, typescript, qtwebengine, etc) installed and working. I invested
118.
by zahllos 3y ago
I've only skim-read your articles so far, but it looks excellent. Congratulations and please keep doing work like this. I previously worked as a research engineer (a fancy name for a software engineer working in a university lab, in my
119.
by zahllos 3y ago
Agree entirely. Meta and Apple will make a lot of noise but ultimately neither will want to lose the UK market.
120.
by zahllos 3y ago
I see a few comments suggesting a change of government will help. The previous Labour government (1997-2010) introduced the Regulation of Investigatory Powers Act 2000 ( https://en.m.wikipedia.org/wiki/Regulation_of_Inve

More ›