Viewing profile — croikle

I'm aware of simple brute-force attacks on short key IDs [0], which are just the last 32 bits of the fingerprint (e.g. 438CF0E2). With significant effort, one might be able to exte…

I believe it's Certificate Transparency, a Google project for globally monitoring SSL certificates. http://www.certificate-transparency.org/

Is there any protection from trolls sending mail to this address? Yes, one can roll back the change, but an automated attack would win. Perhaps the address should be an unguessable…

Yeah, the way the rules work magnesium is a dead-end. You have to double-oxygen to get to silicon, and then it's smooth sailing. (Note that all implemented reactions are listed if …

> For instance try finding out what stocks and weights make up the Russell 2000 index This actually sounds like a fun little linear algebra problem.

Seems to work for me. I opened the Flash Player preference pane and discovered that it had already updated to 12.0.0.70.

So, I'm not sure about that one. Apparently s_client ignores the error and completes the connection because it's intended to be used for debugging. > Currently the verify operation…

Yeah, I'm not sure. The linked diagram [1] shows them influencing routing, rather than some timing issue. [1] https://www.documentcloud.org/documents/785152-166819124-mit...

Bufferbloat on the upstream pipe, if somebody is using your shared connection.

AMA: http://www.reddit.com/r/MMA/comments/13govr/hi_rmma_im_one_o... You can find plenty of wikidrama at https://en.wikipedia.org/wiki/User_talk:Agent00f and https://en.wikipedia.o…

One license offered for Phil Rogaway's OCB block-cipher mode explicitly prohibits military use. (although, as I read it, the military could use still open source implementations un…

Even disregarding Apple's control over the software, the system depends on Apple as a trusted key distributor. This is the vulnerability which the article is concerned with, as far…

It's a cute idea, but you have 1/r^4 intensity scaling, which is prohibitive even at lunar distance. The lunar ranging experiments receive "one photon every few seconds" [1]. You c…

> Apple claims that even with access to the device, a nine digit passcode would take 2.5 years to brute force. That's 2.5 iPhone-years of computation, though. A speedy desktop coul…

Chrome's pinning is a definite upgrade, but it's more vulnerable than some people make it seem. In practice, a pin consists of a list of CA certificates which are allowed to sign f…

No. You cannot outsource your random number generation unless you have an ultimately trusted third party. The important thing is that nobody knows your random numbers. After all, r…

In fact, even better: you can add forwarding to your existing connection. ~C opens a command line, which accepts the following commands: ssh> help Commands: -L[bind_address:]port:h…

You can skip the master and spawn a fresh connection for your tunnel using `-o ControlPath=none`.

Judging by [1], the latter. 1: http://identity.mozilla.com/post/56526022621/what-is-an-iden...

s/prevent/mildly discourage

To be fair, at 10 gigabits that buffer is only 12.5 ms, but given their dedication to latency I can see it being worth investigating.

This flight was a month ago, and was briefly discussed here [0]. Video of the winning flight is available [1]. [0] https://news.ycombinator.com/item?id=5884266 [1] https://www.yout…

This sort of thing is used, e.g. [0]. It collects entropy at a limited rate, though, so for demanding applications (SSL servers, say) you want dedicated hardware: [1], [2]. [0]: ht…