161–170 of 240 posts
Earlier quoted context omitted.
Yes One day we will be telling these stories about Palestinians
That is a hopelessly optimistic statement. Wait until the Israelis write the history, they will have your grandchildren worshipping at their feet for surviving the Hamas onslaught.
Earlier quoted context omitted.
> it's coordinating the external trade links to keep everyone paid and in their jobs while the top of the regime changes to new hands that's difficult. That's actually a really good insight. It explains why quite a few successful revolutions – e.g. Russia and China – happened in countries _without_ an established administrative bureaucracy, and patted themselves on the based on their apparent competence in building o…
> That's actually a really good insight. It explains why quite a few successful revolutions – e.g. Russia and China – happened in countries _without_ an established administrative bureaucracy Erm.... Whut? China was (and is) _the_ example of a country held together by a civil bureaucracy. Ditto for Russia.
Earlier quoted context omitted.
At the time PRNG was probably good enough. I wouldn't want to go up against the NSA today using the same entropy source but against South Africa decades ago it was probably good enough. Even knowing what PRNG source the original noise came from it'd take a hell of a lot of guess and check with cribs to come close to guessing the seed for the PRNG. That would be my first crack at breaking a OTP I knew was generated wi…
If the PRNG is good enough then shipping floppies full of PRNG output is very much unnecessary. Simply send the seeds used to initialize the PRNG thereby fitting many (~180k of them on a 720kb floppy) seeds on one floppy and save your couriers a lot of risk.
The difference is in the nature of the security guarantees. Almost every cryptographic primitive is "computationally secure", which means the best-known attack is to try every key, and that would take beyond the heat death of the universe. One-time pads have "information-theoretical security", which is that even if you try every possible key, you don't learn the contents of the message, because every possible message has a corresponding decryption key that will produce it from the ciphertext you are trying to break.
The reason why this is the case is because the size of the message space is equal to the size of the key space. In every other cryptosystem, you have a key space that is much smaller than the message space - say, 256 bit AES keys, or 512 bit SHA-2 hashes, for messages that can have many billions of bits in them. It's unlikely for something that wasn't the key to happen to decrypt to a valid-looking message under this scenario. But with a one-time pad, you are actually brute-forcing the message space by brute-forcing the key space. Even if you knew the hash of the plaintext, it wouldn't help. You'd just be brute-forcing whatever hash you used to find collisions.
This property goes away if you start repeating key stream bits by any deterministic process. Hence why just sending a PRNG seed is a bad one-time pad. This is also the difference between /dev/random and /dev/urandom. Linux generates randomness from a PRNG, but it's seeded by unpredictable hardware events and other sources of entropy, and there's a bunch of logic to estimate how much entropy is available. /dev/random specifically blocks until that estimate is positive, so that one-time pads and the like don't repeat bits. (In fact, this is basically the only time you should be using /dev/random! /dev/urandom is perfectly acceptable for all other cryptographic use cases!)
Earlier quoted context omitted.
If the PRNG is good enough then shipping floppies full of PRNG output is very much unnecessary. Simply send the seeds used to initialize the PRNG thereby fitting many (~180k of them on a 720kb floppy) seeds on one floppy and save your couriers a lot of risk.
The problem is that, if you do this, you're not using a one time pad anymore. You're using a stream cipher. The difference is in the nature of the security guarantees. Almost every cryptographic primitive is "computationally secure", which means the best-known attack is to try every key, and that would take beyond the heat death of the universe. One-time pads have "information-theoretical security", which is that eve…
Earlier quoted context omitted.
Nelson Mandela was on the US terrorist watch list until 2008. Also the fact that so many in the US claim they remember he died in prison should say something about the media landscape. From the European perspective I recall the concerts that were held to free him and then also the concert that was held after he was free. Simple Minds even made a famous song for it [1]. I don't know if those concets were a big show in…
As far as the European vs. US on the current situation - Euro countries are denying entry to journalists and doctors who are EU citizens just because they are speaking about the atrocities they have seen on the ground. While Euro countries tend to be a tiny bit better than the US on the issues, they are generally much more restrictive in terms of protected speech.
You say "Euro countries" but let's be clear - it's only Germany.
Earlier quoted context omitted.
Yes One day we will be telling these stories about Palestinians
That is a hopelessly optimistic statement. Wait until the Israelis write the history, they will have your grandchildren worshipping at their feet for surviving the Hamas onslaught.
[flagged]
So when he DM’d me to say that he had “a hell of a story”—promising “one-time pads! 8-bit computers! Flight attendants smuggling floppies full of random numbers into South Africa!”—I responded. Ha ha ha. Yes, that was literally my very short pitch to Steven about Tim Jenkin's story! The actual DM: "I think this has the makings of a hell of a story: https://blog.jgc.org/2024/09/cracking-old-zip-file-to-help-o... If yo…
[flagged]
So when he DM’d me to say that he had “a hell of a story”—promising “one-time pads! 8-bit computers! Flight attendants smuggling floppies full of random numbers into South Africa!”—I responded. Ha ha ha. Yes, that was literally my very short pitch to Steven about Tim Jenkin's story! The actual DM: "I think this has the makings of a hell of a story: https://blog.jgc.org/2024/09/cracking-old-zip-file-to-help-o... If yo…
[flagged]