zahllos

13 ms·

121.
by zahllos 3y ago
There is also https://project-everest.github.io/vale/ , which is a programming language used in formal verification. I was slightly confused when I first read the title as well :)
122.
by zahllos 3y ago
Note that I'm not saying use SIV. I'm just saying that SIV already does the extended nonce part: > The AEADs defined in this document calculate fresh AES keys for each nonce. I guess write an RFC for extended nonce only?
123.
by zahllos 3y ago
Number of rounds. AES128 uses 10 rounds, 192 uses 12 and 256 14. The proposal being to drop AES256 from 14 to 11 rounds.
124.
by zahllos 3y ago
I missed that, good catch. That said, I find the wording of dedicated counter space a bit bizarre. There are only 128 bits per block in AES - in fact I'm not aware of a widely deployed cipher which a larger block size. Whatever goes th
125.
by zahllos 3y ago
From the NIST doc for GCM: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpubli... The IV can be any length up to 2^64-1. The reason for picking 96-bit IVs is that other values require an extra invoca
126.
by zahllos 3y ago
I'm reading your comment as saying that if I don't think Snowden/Assange should be pardoned and set free, I'm implicitly supporting mass surveillance. I wanted to provide a counterbalance to that view. Snowden is a compl
127.
by zahllos 3y ago
> I think that there has been a degree of constructive ambiguity in the past. Not really. Since what you're calling for specifically is the Monarch to start blocking bills: it was established in the Bill of Rights Act 1689 (which wo
128.
by zahllos 3y ago
I'm unsure how the monarchy could be a check and a balance when the "constitutional settlement" is generally considered to include the monarch staying out of politics publicly - the monarch acts on the advice of ministers, wh
129.
by zahllos 4y ago
Yes, the token itself most likely won't allow the key to be extracted. There isn't really a reason to allow it: safer to generate the key at manufacturing time. In general cmvp compatible modules do sometimes allow keys to be expo
130.
by zahllos 4y ago
> Scalars, when applied to a specific curve, do have a “order” though, Nitpick: the important point here is that points on the elliptic curve have order (by definition the smallest k such that kP = identity), and the group of such poin
131.
by zahllos 4y ago
I attended a talk by a PhD student who specializes in CPU/architectural research, on the M1 as an architecture. There are some key differences in design, such as unified memory etc, but what accounts for a large part of the performance
132.
by zahllos 4y ago
> Using a web browser as your native app's rendering engine is what all the cool kids are doing these days, so in a way they were just 15 years ahead of the curve. As others have said parts of explorer were using mshtml for the user
133.
by zahllos 4y ago
There is actually a solution to this in the UK. Directors are permitted to have a service address on the public record instead of their home address, and you can find a bunch of companies willing to allow you to rent one and forward mail. Y
134.
by zahllos 4y ago
Even historically there isn't a particularly well defined set of requirements for a subsystem. The closest to win32 was the subsystem for Unix applications, that loaded psdll.dll and used PE format executables even in the "Unix&qu
135.
by zahllos 4y ago
Charles de Gaulle. Apparently there was a proposal to share nuclear weapons between France, Germany and Italy, but according to the Charles de Gaulle government "atomic weapons should never be shared with others" ( https:/&#x
136.
by zahllos 4y ago
> Rust is a great tool for writing safer programs, but it won't defend you from many if not most DoS attacks if you're not careful Just want to stop by and point out "behavior not considered unsafe": https:/&#x2
137.
by zahllos 4y ago
I'm not, but I do crypto (as in PKI, smartcards) stuff, so let me try to explain some of the thinking behind hardware keys. The idea of a second factor is that "something you have" is hard for an attacker to also have, howeve
138.
by zahllos 4y ago
Gstaad is 'exclusive'. It probably isn't so well known, but it has very expensive resorts and hotels, like https://www.thealpinagstaad.ch/ and its own private bank https://www.saanenbank.ch/
139.
The UK’s PSTN network will switch off in 2025 (2021)(business.bt.com)
22 points by zahllos 4y ago|20 comments
140.
by zahllos 4y ago
Academic research for security purposes is almost exclusively done with llvm. Why? It is a compiler framework that is (relatively) easy to work with compared to GCC. So there is already a monoculture in some circles. However there's pl
141.
by zahllos 4y ago
I know someone in Switzerland who bought a car in cash, 12x 1k chf notes. If you're paying for a big-ish shop, e.g. over 100chf, the major supermarkets won't blink if you proffer a 1k note because that's how the older generat
142.
by zahllos 4y ago
Perhaps they could ask for support from the international monetary fund, an organization established in the wake of the great depression in order to try to preserve financial stability worldwide?
143.
by zahllos 4y ago
Interesting article. Since the article focuses on Switzerland and I live there I have another angle to present that I find very interesting. In our local region one problem is that the 'city' is heavily concreted. There's a d
144.
by zahllos 4y ago
Plus if you're using enough IPv4 addresses it is going to be the same problem anyway. I can barely keep track of what I've assigned everything to in just a /24 so I have local DNS and I don't need to.
145.
by zahllos 4y ago
...and it must also be said that the selection of client software that supports it is somewhat limited. For this discussion, Thunderbird does not. I'd also add that some fairly major providers, e.g. anything based on MS Exchange, and G
146.
by zahllos 4y ago
Never worked for Google, but. This shouldn't be surprising. Perhaps comparing it to Oracle might not be quite right, I leave that to people who know, but Google is pretty obviously not the startup/disrupter of 2000-2004 any more.
147.
by zahllos 4y ago
Be nice of them to fix outstanding bugs, like the nondeterministic turing machine that is doing anything with certificates in Thunderbird e.g. https://bugzilla.mozilla.org/show_bug.cgi?id=1481969 The javascript disaster tha
148.
by zahllos 4y ago
I'm using alacritty all the time, and I'm thinking of switching to starship from powerline because powerline has noticeable startup time (I think it is python-based). Unfortunately neovim+plugins does too, probably as a result of
149.
by zahllos 4y ago
It's even worse when you consider the DoD at least have multiple functioning internal PKIs and issue smartcards in the form of the CAC and others to all its users. I'm sorry, we don't want your fancy crypto, please accept thi
150.
by zahllos 4y ago
Depends a bit what you do. I work with firmware that uses all kinds of architectures. Paying an extra $2k per architecture I want the decompiler for is simply too much. Yes, the license cost is likely marginal if you only disassemble Window

More ›