zimmerfrei

17 ms·

91.
by zimmerfrei 7y ago
The keyword is "center" (though something may have been lost in translation): the same treaty conditions against double taxation exist between other EU countries and what matters is always what is the country you have the tightest
92.
by zimmerfrei 7y ago
Are SIM-based IoT devices at risk too? Say a connected car?
93.
Galileo sat-nav system experiences service outage(bbc.com)
4 points by zimmerfrei 7y ago|0 comments
94.
Symantec is in talks to be acquired by Broadcom(cnbc.com)
4 points by zimmerfrei 7y ago|0 comments
95.
by zimmerfrei 7y ago
>> And pyca/cryptography instead of something terrible like pycryptodome! pycrypto is terrible. The pycryptodome fork fixes most problems in it. Also, maybe worth sharing you are listed as fourth contributor [1] to the cryptograp
96.
by zimmerfrei 7y ago
Is there any?
97.
Microsoft Acquires Express Logic (ThreadX RTOS)(blogs.microsoft.com)
2 points by zimmerfrei 8y ago|0 comments
98.
by zimmerfrei 8y ago
>> Firstly, GHASH is replaced with POLYVAL, a hash that is almost exactly the same but reverses the order of some bytes because it turns out that's more efficient on most platforms. The GHASH/GCM bit twiddling is so awful an
99.
by zimmerfrei 8y ago
>> All Android devices certified by Google will have a hardware security module which should keep the keys secure. Source? I understood that having a HW-backed key store is still entirely optional for the purpose of Android certificat
100.
by zimmerfrei 8y ago
That sounds like bad software engineering to most, but if each OpenSSL copy was actually in a separate Docker image, reactions would suddenly be much milder I suspect.
101.
by zimmerfrei 8y ago
One reason this cannot be translated into a portable C version while retaining its compactness (and readability) is the lack of support for carry/borrow chains. In Go, bits.Add64 takes as input and returns the carry. In C, there are so
102.
The preferred way for writing Intel SGX applications from scratch(edp.fortanix.com)
1 points by zimmerfrei 8y ago|0 comments
103.
As a European company using AWS, how to restore trust regarding CLOUD Act(reddit.com)
1 points by zimmerfrei 8y ago|0 comments
104.
by zimmerfrei 8y ago
You have just described IRMA (I Reveal My Attributes) which is an experimental non-profit implementation of a subset of Idemix, a type of ABC (attribute-based credentials) system: https://privacybydesign.foundation/irma-en&#
105.
Upcoming Launch of Amazon RDS on VMware(zdnet.com)
1 points by zimmerfrei 8y ago|0 comments
106.
by zimmerfrei 8y ago
>> also, no mention of masking techniques! > Out of scope. Those are hidden behind magical constant time routines. How is that? Side-channel resistance is largely a matter of reducing the Signal-to-Noise ratio for traces an attacke
107.
by zimmerfrei 8y ago
There should some warning note right at the top, given the topic is presented mainly for cryptographic purposes. There is a huge body of quite diverse side channel attacks against all of these "fast" techniques for scalar multipli
108.
by zimmerfrei 8y ago
>> - It lets you extract the sealing key and remote attestation. That's about as bad as it gets. It could have definitely been worse, with the leak of the fused secrets or a breach to integrity of the microcode (the two things th
109.
by zimmerfrei 8y ago
Interestingly, the upcoming CPUs with built-in resistance to Meltdown (new MSR bit RDCL_NO set to 1) will also be immune to L1TF already.
110.
by zimmerfrei 8y ago
I think that is mostly the case for BIOS and platform firmware. CPU microcode can be loaded by the OS (if the OS allows you to, as Linux does - https://www.cyberciti.biz/faq/install-update-intel-microcode... ).
111.
Improper operations at Tencent Cloud led to data loss worth millions of yuan(scmp.com)
9 points by zimmerfrei 8y ago|1 comments
112.
by zimmerfrei 8y ago
That enables mutually-authenticated TLS connections between servers.
113.
Qualcomm Scraps $44B NXP Deal After China Inaction(nytimes.com)
4 points by zimmerfrei 8y ago|1 comments
114.
by zimmerfrei 8y ago
>> Disney can probably copy what Netflix has today, but by the time they’ve done that, Netflix will have updated their platform hundreds of time Last year Disney acquired BAMTech (a spun of MLB Media) - though less known, their techni
115.
by zimmerfrei 8y ago
On the same topic, PyPI has recently moved to a new backend, and in the process all end-to-end PGP signatures (created by the package owner upstream, proving that no tampering happened on the online servers) have disappeared from the UI, an
116.
Commoditisation of AI, digital forgery and the end of trust: how we can fix it(giorgiop.github.io)
2 points by zimmerfrei 9y ago|0 comments
117.
European Processor Initiative: consortium to develop microprocessors for HPC(ec.europa.eu)
1 points by zimmerfrei 9y ago|0 comments
118.
by zimmerfrei 9y ago
The European Commission is actually trying to address that problem right now, at least for high-performance computing (which includes autonomous cars): https://ec.europa.eu/digital-single-market/en/news/europe
119.
Arm_now: Multi arch vm working out of the box for everyone(github.com)
1 points by zimmerfrei 9y ago|0 comments
120.
by zimmerfrei 9y ago
My comment is no more speculative than those blaming the new microcode for causing reboots. The real bad quality, bad update process and unjustified binary nature of OEM firmware is too often overlooked.

More ›