Viewing profile — bascule

It's almost quaint how this December 2019 article talks about "the concern surrounding the creation of large swaths of Tether in 2017", when about $2.5 billion of Tether was issued…

If you use an unkeyed hash (as opposed to a PRF) on low-entropy inputs, they can be preimaged by an attacker. This is especially problematic in the case of PII like email address/p…

Author here. You're right (if you add a constant-time check upon decryption that the bits are zero). I suggested as much here yesterday, and may revise the scheme to do so: https:/…

`for` used in a bound (in conjunction with a lifetime) is the syntax for Higher-Rank Trait Bounds (HRTB): https://doc.rust-lang.org/beta/nomicon/hrtb.html

Call me crazy but I think CRDTs are interesting enough to deserve a repost

Someone else already did. You can find it here: https://news.ycombinator.com/newest

This post is filled with a large number of factual inaccuracies, so numerous I wrote a blog post in response: https://tonyarcieri.com/factual-inaccuracies-of-facebook-lib...

The article also incorrectly claims that curve25519-dalek has never had security audits. It's had at least two by reputable cryptography auditing firms (Quarkslab and NCC), the for…

Here's a real world application of Karatsuba: carryless multiplication of finite field elements for cryptography (universal hashing): https://github.com/RustCrypto/universal-hashes…

Might want to check the names on this IETF draft... https://tools.ietf.org/id/draft-ietf-mls-protocol-02.html

There's an entire section in my 2019 blog post about this: https://tonyarcieri.com/rust-in-2019-security-maturity-stabi... rust-crypto has the most upstream dependencies, but is an…

I think what you're after is: https://docs.rs/miscreant/0.4.2/miscreant/aead/trait.Aead.ht... These take a byte slice, and return an (allocated) byte vector. The APIs you're talkin…

One possible solution: get Bluetooth headphones instead, such as the equivalent Bluetooth Audio-Technica headphones to what's pictured in the post, the ATH-DSR9BT: https://www.audi…

> you need a remedy for the inherent insecurity of credit cards Fraud and theft are fairly general problems. I would direct your attention to /r/sorryforyourloss > In other words, …

The TB-03 provides a fairly faithful and accurate reproduction of the TB-303's sound. The TT-303, on the other hand, despite being "circuit identical", can sound downright weird at…

Hardfloor are masters of the 303. In addition to Acperience, check out their semi-recent track the Art of Acid: https://www.youtube.com/watch?v=5OvWMAzhdOQ

Most early house songs were ~120BPM. This includes: Frankie Knuckles - Your Love, Jesse Saunders - On and On, Mr. Fingers - Can You Feel It, Marshal Jefferson - Move Your Body (The…

That's more or less how it was used in one of the first popular tracks to use the 303, Orange Juice - Rip it Up: https://www.youtube.com/watch?v=ESy-Z8vqMrE

If you've ever had your credit card number stolen and used by a criminal for fraudulent purchases which you later disputed, you've used chargebacks.

If that was your point, perhaps you should've mentioned it. That would've made your post informative, rather than merely nitpicking.

> Fisher says, if the phosphorus atoms are incorporated into larger objects called "Posner molecules". These are clusters of six phosphate ions, combined with nine calcium ions.

This article covered more than I was expecting, but still manages to squeeze a small amount of substance into a relatively large article. Here's a tl;dr: - Penrose and Hameroff pos…

From my benchmarks (oh hi I'm the author of a multi-provider elliptic curve digital signature library for Rust), ed25519-dalek (with curve25519-dalek's AVX2 backend) seems to be wi…

There have been some poorly received hypotheses to this effect, most notably Roger Penrose's Orch-OR: https://en.wikipedia.org/wiki/Orchestrated_objective_reducti... That said, mos…