Viewing profile — myrion

I don't use old Reddit, and haven't noticed this behaviour either.

Well, yes, if they use something completely different to what's published and designed. But no, we're not talking about the case where there's no trust at all in the government, be…

That's not how that works - they can prove they check by showing logs, rather than VPs. There's even legal limits on what identifiers they can store and for how long. But even igno…

In the Swiss system, it depends on what they verified. If they required your full ID, that has a document number like a passport and they could track that. If they did the right th…

There's no dynamic analysis done, necessarily. In the Swiss design, fex, SD-JWTs are used for selective disclosure. For those, any information that you can disclose is pre-hashed a…

The revocation checking is implemented in a way where the government doesn't know who you checked and you can even cache the information (if that's good enough for you) so they won…

That assumes the companies store the individual tokens, as does the government. Neither of which are part of the design, but could be done if both sides desired it. The Swiss desig…

Schweissen und löten. Has nothing to do with Switzerland (Schweiz) ;)

Because politicians make laws, and those affect the "legal hurdles" that companies need to deal with.

Considering that companies will do everything to avoid doing sensible things that cost money - yes, of course the government has to step in and mandate things like this. It's no di…

There's no much difference between the two positions, and the former is very much a lead-in to the latter.

FIDO authenticators. If the "autofill" doesn't work, you can't be tricked into overriding it.

Great and simple UI, synced across all your devices (which is what ended up killing RSS in f.ex. Thunderbird for me).

Unfortunately the self-host documentation isn't great and the deployment options are quite limited. Sure, it's at least dockerised, but it requires root privileges (so no running i…

Show me that law, because as far as I can tell, that's complete nonsense. I know of a bunch of people who legally purchased and installed aircon in their homes.

No, Switzerland is at most a semi-direct democracy. We don't vote on every last decision the government takes, after all - we have a bicameral parliament and an executive branch fo…

It does for me, because his criticism (since shown to be wrong) never included the claim that KYBER was broken, just that it wasn't perfect and that he was unfairly treated. Cranks…

First off, thanks for the reply. It has since been pointed out to me elsewhere that there are now responses showing his central claim of a maths error to be false, which means all …

Hm. Yeah, I really need to adjust my view on this - I found NIST's responses dodgy precisely because they seemed so unwilling to engage, and I still thought of him as respected eno…

The last part I agree with - clearly KYBER isn't trivially broken if this is the best he can come up with. What doesn't seem clear to me, and I'd appreciate if you could tell me wh…

At least for myself, I disagree that NIST could only win by not running the competition. The impression I have right now is that they made some mistakes and in response to having t…

Here's my honest shot at it: In between a bunch of conspiratorial hinting, djb argues that KYBER-512 is weaker than NIST claims. To make that argument, he points out a fairly egreg…

That's if hashed by md5, which really shouldn't be the case anymore. SHA-1 isn't much better, aiui, but would still be a more reasonable reference today - at least as far as I can …

Incidentally, Lego and Duplo are compatible! So eventually you can use the Duplo blocks as large building blocks under more intricate Lego designs.