Viewing profile — doomrobo

Recording of a talk with the same title. I’m not certain it’s the same content as the linked PDF though https://youtu.be/mS9Lr43cIB4

I’ll ask the dual question: how many of the mobile safari checkmarks are fully fleshed out? Media Session has a check, but I have absolutely fought obvious Media Session implementa…

>Small block ciphers are thus generally a bad idea against active adversaries. >However, they can be very useful against passive adversaries whose capability is limited to observin…

Yes, if every single URL in your web application has a hash in it (including hrefs) then you don’t have to worry about anyone maliciously serving a webpage anymore. But how do you …

Emailed :)

1. I didn't know about this [1] actually! It looks like it's been unsupported for a few years now. The format looks pretty barebones, and we'd still need hashes like you said, as w…

Gotcha, yeah I agree. Fwiw, with the imagined code signing setup, the pubkey will be committed to in the transparency log, without any extra work. The purpose of the plugin is to g…

I'll actually argue the opposite. Transparency is _the_ pivotal thing, and code signing needs to be built on top of it (it definitely should be built into the browser, but I'm just…

You're right that, when your own server is trustworthy, fully self-hosting removes the need for SRI and integrity manifests. But in the case that your server is compromised, you lo…

Ah ok. How is the encryption key, if there is one, established then?

There are middle boxes between the two peers, yes? Routers and such. They observe the encrypted messages. They can brute force the password, even after the session is over. Even if…

If the server stores the transcript of a session, can it brute force the PIN later on? Magic Wormhole ( https://github.com/magic-wormhole/magic-wormhole ) avoids this by using a pa…

In Europe, this is not uncommon for online purchases. You put in your IBAN number and authorize the transaction

Link should be https://status.gitlab.com/

It’s not actually much different. The main reason to use this is because it’s the standardized version of that concept and has been analyzed by people. All the smaller cryptographi…

What’s grim? 9.4 billion chickens are killed every year in the US. That’s 25.7 million a day https://www.nationalchickencouncil.org/statistic/broiler-ind...

IBE allows two users to communicate without the trusted party being online

The idea of "appear to be resistant to attack" is an empirical one. When someone says that, they are saying that we simply have not found a good attack against this problem. That c…

https://www.youtube.com/watch?v=uwJQQux0TF0

There was a great interview with the authors of this game and accompanying book https://srslywrong.com/podcast/290-half-earth-socialism-w-tr...

Also grad student. I use Voice Dream reader on my devices and it's helped a lot with reading dense texts https://www.voicedream.com/