zimmerfrei

10 ms·

61.
by zimmerfrei 6y ago
They are a Public CA and they must undergo a third party compliance audit to operate. The conditions are such you cannot really pass if your infra is in any of those public clouds.
62.
Red Hat ends support for CentOS 8 eight years earlier(blog.centos.org)
4 points by zimmerfrei 6y ago|0 comments
63.
A Solution to the Dangerous Delegated Responder Certificate Problem(research.kudelskisecurity.com)
1 points by zimmerfrei 6y ago|0 comments
64.
Russia and China use smartphones to spy on Dutch businesses(nltimes.nl)
5 points by zimmerfrei 6y ago|0 comments
65.
by zimmerfrei 6y ago
It's the other way around. NIST P curves don't require any special preparation to their private key. Curve25519 on the other hand requires a bizarre "clamping" ( https://neilmadden.blog/2020/05/2
66.
Intel Key Locker Specifications [pdf](software.intel.com)
2 points by zimmerfrei 6y ago|0 comments
67.
Facebook Is Turning a Blind Eye to Global Political Manipulation(buzzfeednews.com)
6 points by zimmerfrei 6y ago|0 comments
68.
by zimmerfrei 6y ago
Even worse: according to a source of The Register [1], it is based on simple SEV (SEV1), not even SEV-ES. If true, it is even more disappointing. [1] https://www.theregister.com/2020/07/14/google_amd_secure_vm
69.
by zimmerfrei 6y ago
This is using SEV-ES (SEV2) which is vulnerable to the severe attack described last year in [1], and unfixable due to the lack of antirollback functionality. Only SEV-SNP [2] is supposed to address it, but only on new silicon which doesn&#x
70.
by zimmerfrei 6y ago
Is it clear exactly what SafetyNet does and reports back to Google? Is its source code available (including for any TrustZone component), maybe as part of AOSP? I am OK with the concept and I can value it also as a protection against advanc
71.
by zimmerfrei 6y ago
Both iOS and recent Androids have by now a form of app attestation: the server can tell if the caller is the legitimate app or not (with good enough confidence - as everything, it's not unbreakable). Doesn't that make obfuscation
72.
by zimmerfrei 6y ago
It roughly does. Note that it is not present in the comparison chart you posted...
73.
by zimmerfrei 6y ago
They did consider and ruled out KangarooTwelve, which has basically the same properties of BLAKE3 while being derived from Keccak (therefore, with more chances of ending up as a US federal standard).
74.
by zimmerfrei 6y ago
I disagree. ARM TrustZone is predicated on the Secure World being potentially able to monitor and modify the entire Non-Secure World, because it has control over the MMU (see TZASC, TZMA, TZPC). The reverse is clearly impossible. SGX instea
75.
by zimmerfrei 6y ago
What is a bad “UUID”? A wouldn’t the hacked client do things anyway like uploading UID or local credentials to its servers?
76.
by zimmerfrei 6y ago
Can SafetyNet calls be proxied to another unrooted phone?
77.
by zimmerfrei 7y ago
> Trying to hide your code is a stupid thing to do That's not what I hear from reputable reverse engineers, at least for IoT devices. Even though security by obscurity should be frowned upon, and being understood that hiding code mi
78.
Intel SGX has been removed from Rocket Lake-S CPUs(cdn.mos.cms.futurecdn.net)
17 points by zimmerfrei 7y ago|4 comments
79.
Intel kills off a server program(semiaccurate.com)
2 points by zimmerfrei 7y ago|0 comments
80.
by zimmerfrei 7y ago
Yes, not only in Italy, but in most other places. This article explains well how deaths (or hospitalizations) are correlated to actual infections (most of which go unnoticed), and also why reduction of social interaction is effective but it
81.
by zimmerfrei 7y ago
Let's ignore for the moment the paternalistic and I-know-it-all tone permeating the whole post... > Most email encryption on the Internet is performative, done as a status signal or show of solidarity. Where is the data supporting t
82.
by zimmerfrei 7y ago
You are conflating RSA (the algorithm) with "ssh-rsa" (the option of the SSH suite indicating authentication with RSA in combination with SHA-1). They deprecate the latter. Other options also based on RSA such as "rsa-sha2-25
83.
by zimmerfrei 7y ago
Yes, and it didn't go unnoticed that KangarooTwelve (which - mind - does not belong to the SHA-3 family right now) is not included on that prominent comparison diagram, while it is considered in the BLAKE3 paper.
84.
by zimmerfrei 7y ago
This is a bit pointless, since it does not say on which platform the comparison is made. In any case, KangarooTwelve [1][2] (on AVX-512) is also 10x faster than SHA-256. KangarooTwelve is a fast hash function of the Keccak family (from whic
85.
SHA-1 chosen prefix collisions and DNSSEC(dns.cam.ac.uk)
2 points by zimmerfrei 7y ago|0 comments
86.
BetterTLS: Name Constraints. A Name Constraints Test Suite for HTTPS Clients(nameconstraints.bettertls.com)
2 points by zimmerfrei 7y ago|0 comments
87.
Rewriting m4vgalib in Rust(cliffle.com)
372 points by zimmerfrei 7y ago|44 comments
88.
Beijing Pushes for Removal of Foreign Tech in More State Offices(yahoo.com)
2 points by zimmerfrei 7y ago|0 comments
89.
Wave Computing Closes Its MIPS Open Initiative with Immediate Effect, No Warning(hackster.io)
3 points by zimmerfrei 7y ago|2 comments
90.
by zimmerfrei 7y ago
Will the GDPR kick in?

More ›