zx2c4

34 ms·

331.
by zx2c4 10y ago
Citation?
332.
by zx2c4 10y ago
He doesn't care to even try to understand. He's just a troll.
333.
by zx2c4 10y ago
Well put. I'm pretty sure "rurban" is a well known Internet troll with a reputation for spreading non-sense like this.
334.
by zx2c4 10y ago
The seed is kept secret. Observing siphash outputs will not reveal the seed, unless an entirely infeasible quantity of outputs are observed.
335.
by zx2c4 10y ago
Sorry but you still haven't substantiated your argument with any such "proof". It looks like you also made a "prediction" about what's going to be decided by people who certainly aren't you in the future.
336.
by zx2c4 10y ago
Hopefully not "primary" for long. These are just the first uses I saw to immediately convert to siphash with the least amount of controversy to actually get siphash in the kernel. Now that these have landed, other developers can g
337.
by zx2c4 10y ago
"Poking into kernel memory" is not possible without a serious security vulnerability. That's not within this threat model. "Order-exposure and timing attacks" -- which types of attacks against SipHash do you have in
338.
by zx2c4 10y ago
You're confused. Yes, the model depends on the secret key remaining secret. No, this isn't a vulnerability. (If you figure out how to leak keys from kernel space, you've uncovered a grave vulnerability, way worse than anythin
339.
by zx2c4 10y ago
A 128-bit key is more than plenty; don't be ridiculous. The prior partial sha1/md5 implementation usage was pretty dubious. Siphash has significant performance improvements for things like syncookies and secure sequence numbers. Y
340.
by zx2c4 10y ago
This implementation is optimized for kernel usage and follows kernel idioms. If you're curious, here's the source: Header: https://git.kernel.org/cgit/linux/kernel/git/davem/net-next.... S
341.
SipHash and HalfSipHash Added to Linux Kernel(git.kernel.org)
76 points by zx2c4 10y ago|76 comments
342.
by zx2c4 10y ago
Congrats! Probably this crowd already knows about Daemen for AES and Moxie from Signal and NYTimes and his HN comments here. Trevor Perrin might not be as familiar of a name, but it should be. He's responsible for much of the meaty cry
343.
WireGuard Presentation from Codeblue, Japan 2016(wireguard.io)
2 points by zx2c4 10y ago|0 comments
344.
by zx2c4 10y ago
Care to share your service agreement? Sounds like you've come up with a good formula.
345.
Some challenges in post-quantum standardization(blog.cr.yp.to)
2 points by zx2c4 10y ago|0 comments
346.
by zx2c4 10y ago
"We then modified the inline encryption block driver to pass this to the hardware. As with ext4 encryption, keys are managed by the Linux keyring. To see our implementation, take a look at the source code for the Pixel kernel." It
347.
by zx2c4 10y ago
The official source for git-over-https is: https://anongit.gentoo.org/git/repo/gentoo.git
348.
by zx2c4 10y ago
I'm on my phone right now, and just skimmed that thread for about 10 seconds, but it reminded me of a commit I saw a few days ago when skimming another page for 10 seconds. All that skimming appears to be paying off. Maybe Batman is a
349.
by zx2c4 10y ago
I have fixed this issue forever. I got a Thinkpad P50 with 64 gigs of ram. So, I just mount a tmpfs over ~/.cache. I actually use a tmpfs for a few things: $ grep tmpfs /etc/fstab tmpfs /tmp tmpfs nodev,nosui
350.
by zx2c4 10y ago
I wonder why. Any ideas?
351.
by zx2c4 10y ago
Care to fill in the details for me? Do you mean to say the most prolific DDoS attackers work for Cloudflare? Or that their network somehow (?) shelters them? What do you mean exactly? This sounds interesting.
352.
by zx2c4 10y ago
Isn't this the point at which Cloudflare is supposed to gain a handful of PR points for putting him back online, pro bono, and then doing a write up on how effortlessly they handled the bandwidth with eBPF?
353.
by zx2c4 10y ago
Yep, for me too on a 4k HiDPI screen. The reason is that the browser scales the original image, using the naive incorrect algorithm. Amazing full-circle confirmation of the author's point, eh?
354.
by zx2c4 10y ago
Interestingly, technical support for ThinkPad still appears to be provided by IBM, which is pretty nice. When parts come in the mail they have the IBM security tape on it. It's got that old school professional enterprise feeling.
355.
by zx2c4 10y ago
> This isn't linux's fault for not supporting some non-standard raid driver, > this is lenovos fault for not allowing users to change the bios settings to non-raid. Lenovo made a computer that exposes hardware to the OS for
356.
by zx2c4 10y ago
The community's reaction seems absurd to me. For whatever reason, the device only exposes some sort of RAID controller to the OS, and for whatever reason, there's no working option for exposing a more standard AHCI interface inste
357.
by zx2c4 10y ago
Use uBlock Origin, not uBlock.
358.
by zx2c4 10y ago
Their CLI client is called `mc`. This is an unfortunate conflict with the venerable Midnight Commander.
359.
Systemd reinvents mount(8) with systemd-mount(github.com)
3 points by zx2c4 10y ago|1 comments
360.
by zx2c4 10y ago
If you do roll your own, consider trying out WireGuard, the VPN protocol I've been working on. It's a lot faster and simpler than anything else. I'd appreciate all the feedback I can get. https://www.wireguard.io

More ›