Viewing profile — sibrahim

That's what's covered by the "assuming you have formalized the statement correctly" parenthetical. Given a formal statement of what you want, Lean can validate that the steps in a …

It depends on whether you are doing something security critical with the result. Maybe you have a trusted table hash but only a user-supplied version of the table. Before you use t…

XOR is not a great choice here. Consider that 2 copies of a row give the same result as 0 (or 4, 6, etc). And even without multiple copies of rows, you can force any hash you'd lik…

Sometimes these are officially sanctioned and even required! Most notably, including logos/other embellishments are a form of "trap street" where the idea is to have something to p…

The usual next difficulty is that the maximum shebang length is fairly low (truncated at 128 chars, IIRC)

Right. There's not a compelling reason to switch and there's more than a hint of CYA mixed in with Chesterton's Fence: https://www.bloomberg.com/news/articles/2016-06-09/how-intel.…

My understanding is that was the original purpose, but probably unnecessary given that all the relevant process steps are encased in tools that are not exposed to the general clean…

If I wanted to keep the blur aesthetic, I'd probably do a full removal, run an inpainting algorithm to replace the removed region with something less jarring in context and then bl…

As Izkata mentions, the superproject has _all_ the files for a given commit without any need for users to have access other repos, additional submodule init commands, etc. Basicall…

My preferred solution has been git-subrepo: https://github.com/ingydotnet/git-subrepo Basically is what (I think) submodules should have been. Creates a vendored copy with metadata…

Note that the time taken is linear with respect to the original execution. A cycle of n instructions starting at instruction n0 will be detected in between n0 and n0+n iterations (…

There's no need to store all previous states to detect a cycle: it can be done using just twice the original memory. You can model the state transitions as a linked list and use Fl…

I've had success using \import{subdir/}{BasenameInSubdir} from the import package. The basic (and unfortunate in a xkcd/1479 way) issue appears to be that the arXiv compile server …

That's certainly been my experience. I've had arXiv automatically block bare uploads of TeX-derived PDFs (presumably identified through PDF metadata). For these, it required that t…

Nothing, but no one will/should trust them without cryptographic expert consensus saying it's ready. Right now, the cryptographers most familiar with it are working on/with the off…

We did, in a way. One of the sources used was random.org (uses radio receivers tuned to static from atmospheric noise: hardware RNG as a service). I also had less than 3 weeks to t…

Anything that reseeds during operation can qualify. In fact, if the CSPRNG's internal state isn't large enough, you need to periodically reseed or face the same objection. But a CS…

I had a rather specialized case where it was the pragmatic choice (note, not technically required): running a lottery with potentially litigious losers. If you used a CSPRNG with a…

For anyone else that's curious, the lottery problem is called the Transylvanian lottery: https://en.wikipedia.org/wiki/Transylvania_lottery The primary observation is if you want t…

Lottery designer here. Some clarifications on the article: Re: getting a random number from 1 to 5 from a d6, my point got stripped out of the article and it's possible to come awa…

This may be true for now, but if/when scalable quantum computing arrives, the recorded key exchange can be used to recover the session key (much easier than attacking AES itself). …