Viewing profile — blazingice

1Password's browser extension v4, in contrast, fills in the form only when you press a key combination (⌘-\ on OSX), and has you enter your master password into a dropdown from the…

Does the fetch happen immediately when Google receives the email? Or does it occur the first time the user opens the email? If the latter, sender image tracking will be alive and w…

A common marketing tactic is to include a link to a small, transparent image in the email they send. The URL is personalized to each recipient, and so they can check their server l…

It may be trivially easy to host your own email, but in my experience it is nowhere as easy to do your own spam filtering. A few years ago when I ran my own mail server, having onl…

Some JS engines already disallow security-violating operations from happening (such as inserting evil hooks into document.location). These same protections could apply to any Crypt…

noooo it ate my references: 1 http://canta.ucsd.edu/~kmowery/quelsolaar/crypto_test.c 2 http://canta.ucsd.edu/~kmowery/quelsolaar/keystreams.tar.gz First line of each file is the k…

As eru said elsewhere, you've created a stream cipher. To be secure, the generated keystream (the thing you xor against the plaintext) must not have any biases: the attacker should…

Usually, when discussing human diet: carbohydrates, fat, and protein. These comprise the energy content of food.

Ostensibly, a "a low-key ceremony in an actual beautiful natural area" (that can support 360 guests) would have a far greater ecological impact than manufacturing such a place in a…

They released an adapter: http://store.apple.com/uk/product/MD099ZM/A/apple-iphone-mic... Apparently these are quite difficult to buy in the United States. Edit: Lightning to Micro…

Aciicmez's BTB attack looks at the branch predictor, and is potentially valid against any implementation which branches based on sensitive data. There's a whole class of these atta…

This article focuses pretty heavily on the possibility of cache timing attacks against AES, and cites djb's original work along with Tromer/Osvik's publication in 2005. Last week a…

I'd be the first to tell you that I don't understand crypto. Most people don't. You're unwilling to have this conversation again; I understand. Do you have a link to one of your ta…

As a security researcher (but not necessarily a crypto one), I do not understand this comment. > AES in its default block cipher mode can usually be byte-at-a-time decrypted. 1. Bl…

It looks like you're being downvoted, so I'll provide a reason. Alcohol is legal. The gangs that formed around producing, smuggling, and selling alcohol (e.g. Capone) are gone. The…

Don't forget about "Turbo Boost" - that "1.8 GHz" runs at 2.8 GHz when you're only using one of two cores. Combined with a more efficient architecture, this helps explain the perfo…

I count 1930 applications, which is $357M in revenue, given the stated application fee of $185,000. This is three times the projected revenue of $92M [1]. It'll be interesting to s…

You have a good point about TDD, and I'm unsure how to address it. However, you might find the itertools library helpful, particularly itertools.permutations(): http://docs.python.…

The first Ivy Bridge consumer chips are just hitting retailers today (NewEgg just put them on sale ten hours ago). All of the experiments done so far have been on review chips sent…

The article claims that $4M (80%) of this money was spent lobbying against SOPA and PIPA, which I would qualify as protecting freedom on the web.

I've had a good experience with the Canon 28-135mm f/3.5-5.6 IS USM. It's right in the middle of your price range and has image stabilization and a good zoom range. It's my go-to l…