Nimi

7 ms·

1.
by Nimi 4y ago
Is there a writeup describing the exact timing side channel? The advisory states that the vulnerability affects all RSA padding modes, which seems to imply non-constant-time BigNum operations. However, OpenSSL implemented RSA blinding even
2.
Curious Padding Oracle in OpenSSL (CVE-2016-2107)(web-in-security.blogspot.com)
2 points by Nimi 10y ago|0 comments
3.
A 2^64 Attack on Telegram, and Why a Super Villain Doesn't Need It(alexrad.me)
21 points by Nimi 10y ago|0 comments
4.
by Nimi 11y ago
Another browser beside Chrome, Firefox and IE? OK, so Symantec announces that they will only use Opera. Even then, they have to deal with their customers, website operators who need a certificate trusted by the big 3 browsers, leaving. In f
5.
by Nimi 11y ago
Fascinating. I still feel I'm missing something basic here: If Microsoft, Google and Mozilla announce they're not going to accept any particular crypto primitive two years from now, and this time there won't be any exceptions
6.
by Nimi 11y ago
That's very interesting, do you happen to have a link for the blog post?
7.
by Nimi 11y ago
Moving away from obsolete crap isn't the solution, it's the definition of the problem. One could argue that the CA/Browser forum has achieved some success with moving away from SHA-1. As a spectator, I don't understand
8.
by Nimi 11y ago
Consider another explanation: If you use the term "rape culture", you essentially claim that in today's society, oftentimes rape will be accepted (FWIW, I agree with this statement). However, there appears to be a consensus i
9.
by Nimi 11y ago
As this is the second time I see companies complaining on HN about the short deadline, and there seems to be a consensus that transitioning to another payment provider realistically always takes more than 5 days, you might consider having a
10.
May 2015 CA Communication from Mozilla(blog.mozilla.org)
1 points by Nimi 11y ago|0 comments
11.
Flywheel: Google's Data Compression Proxy for the Mobile Web(matt-welsh.blogspot.com)
2 points by Nimi 11y ago|0 comments
12.
by Nimi 11y ago
Both the pitch here and the site seem a bit light on endorsements from companies which have previously hired your interns, although I'm guessing you have at list a few good endorsements on file? Maybe consider giving visibility to a fe
13.
by Nimi 11y ago
Found myself in similar situations in the past. My tentative solution was to maintain a corpus of resources for practice (beyond the usual suspects of implementing the standard data structures etc.), and hope that when the chance comes, 1-2
14.
by Nimi 11y ago
Thanks! I prob. missing something about [you're] "handing me your private keys to unlock that 1c output. Now if you ever released Transaction 1, I can spend both the outputs". What happens if you release transaction 1, then
15.
by Nimi 11y ago
Interesting - can you please elaborate on those different cognitive skills? (also, both your plight and the efforts you put towards getting out of it sound very serious - best of luck to you)
16.
by Nimi 12y ago
A few random thoughts/questions: - This sounds similar to the incast problem which occurs in datacenters, but this happens on consumer Internet - cool. - After reading both this post and the TCP/NC paper, it seems to me like TCP&#
17.
by Nimi 12y ago
Their phrasing appears to state they use TCP/NC, a network coding-based variant of TCP introduced in an academic paper by (some of) the same people behind this initiative: http://arxiv.org/pdf/0809.5022.pdf
18.
CeroWrt Triumphs over Bufferbloat(bufferbloat.net)
1 points by Nimi 12y ago|0 comments
19.
by Nimi 12y ago
I'm surprised to see Certificate Transparency presented as a band-aid. My understanding is that assuming it will be deployed successfully, forged certificates will require very significant resources to use successfully for an attack, t
20.
How do you become a conference chair?(matt-welsh.blogspot.com)
2 points by Nimi 12y ago|0 comments
21.
Hello HTTP/2, Goodbye SPDY(blog.chromium.org)
426 points by Nimi 12y ago|179 comments
22.
Legal Tech Startup Casetext (YC S13) Raises $7M Series A(techcrunch.com)
18 points by Nimi 12y ago|1 comments
23.
by Nimi 12y ago
I was surprised by how similar Sivers' advice is to the Budha's teachings.
24.
GrubMarket (YC W15) Connects Consumers with Local Farms and Food Producers(techcrunch.com)
12 points by Nimi 12y ago|0 comments
25.
How SF-Based Shuttle Startup Chariot Crowdsourced Its New Commuter Route(techcrunch.com)
22 points by Nimi 12y ago|11 comments
26.
Where do mobile numbers come from?(ben-evans.com)
1 points by Nimi 12y ago|0 comments
27.
Day in the Life of a Google Manager(matt-welsh.blogspot.com)
179 points by Nimi 12y ago|87 comments
28.
by Nimi 12y ago
Slightly off-topic: Could you please add RSS support to your "blog"? I'm sure others, besides me, would love to me notified of new entries. Thanks!
29.
Why not DANE in browsers(imperialviolet.org)
30 points by Nimi 12y ago|27 comments
30.
by Nimi 12y ago
Could you please give some examples?

More ›