bascule

5 ms·

1.
by bascule 6y ago
It's almost quaint how this December 2019 article talks about "the concern surrounding the creation of large swaths of Tether in 2017", when about $2.5 billion of Tether was issued. In the time since it was published, when Te
2.
by bascule 6y ago
If you use an unkeyed hash (as opposed to a PRF) on low-entropy inputs, they can be preimaged by an attacker. This is especially problematic in the case of PII like email address/phone number
3.
by bascule 6y ago
Author here. You're right (if you add a constant-time check upon decryption that the bits are zero). I suggested as much here yesterday, and may revise the scheme to do so: https://www.reddit.com/r/crypto/comm
4.
Audit of the RustCrypto `aes-gcm` and `chacha20poly1305` crates by NCC group(reddit.com)
1 points by bascule 7y ago|0 comments
5.
by bascule 7y ago
`for` used in a bound (in conjunction with a lifetime) is the syntax for Higher-Rank Trait Bounds (HRTB): https://doc.rust-lang.org/beta/nomicon/hrtb.html
6.
by bascule 7y ago
Call me crazy but I think CRDTs are interesting enough to deserve a repost
7.
by bascule 7y ago
Someone else already did. You can find it here: https://news.ycombinator.com/newest
8.
by bascule 7y ago
This post is filled with a large number of factual inaccuracies, so numerous I wrote a blog post in response: https://tonyarcieri.com/factual-inaccuracies-of-facebook-lib...
9.
by bascule 7y ago
The article also incorrectly claims that curve25519-dalek has never had security audits. It's had at least two by reputable cryptography auditing firms (Quarkslab and NCC), the former of which is public (the NCC audit was done at the r
10.
by bascule 7y ago
Here's a real world application of Karatsuba: carryless multiplication of finite field elements for cryptography (universal hashing): https://github.com/RustCrypto/universal-hashes/blob/master/p...
11.
by bascule 8y ago
Might want to check the names on this IETF draft... https://tools.ietf.org/id/draft-ietf-mls-protocol-02.html
12.
by bascule 8y ago
There's an entire section in my 2019 blog post about this: https://tonyarcieri.com/rust-in-2019-security-maturity-stabi... rust-crypto has the most upstream dependencies, but is an unmaintained, abandoned project. Ther
13.
by bascule 8y ago
I think what you're after is: https://docs.rs/miscreant/0.4.2/miscreant/aead/trait.Aead.ht... These take a byte slice, and return an (allocated) byte vector. The APIs you're talking about are s
14.
by bascule 8y ago
One possible solution: get Bluetooth headphones instead, such as the equivalent Bluetooth Audio-Technica headphones to what's pictured in the post, the ATH-DSR9BT: https://www.audio-technica.com/cms/headphones&#x2F
15.
by bascule 8y ago
> you need a remedy for the inherent insecurity of credit cards Fraud and theft are fairly general problems. I would direct your attention to /r/sorryforyourloss > In other words, are merchants eating all the costs of fraudu
16.
by bascule 8y ago
The TB-03 provides a fairly faithful and accurate reproduction of the TB-303's sound. The TT-303, on the other hand, despite being "circuit identical", can sound downright weird at times (as can Roland's other "anal
17.
by bascule 8y ago
Hardfloor are masters of the 303. In addition to Acperience, check out their semi-recent track the Art of Acid: https://www.youtube.com/watch?v=5OvWMAzhdOQ
18.
by bascule 8y ago
Most early house songs were ~120BPM. This includes: Frankie Knuckles - Your Love, Jesse Saunders - On and On, Mr. Fingers - Can You Feel It, Marshal Jefferson - Move Your Body (The House Music Anthem)
19.
by bascule 8y ago
That's more or less how it was used in one of the first popular tracks to use the 303, Orange Juice - Rip it Up: https://www.youtube.com/watch?v=ESy-Z8vqMrE
20.
by bascule 8y ago
If you've ever had your credit card number stolen and used by a criminal for fraudulent purchases which you later disputed, you've used chargebacks.
21.
by bascule 8y ago
If that was your point, perhaps you should've mentioned it. That would've made your post informative, rather than merely nitpicking.
22.
by bascule 8y ago
> Fisher says, if the phosphorus atoms are incorporated into larger objects called "Posner molecules". These are clusters of six phosphate ions, combined with nine calcium ions.
23.
by bascule 8y ago
This article covered more than I was expecting, but still manages to squeeze a small amount of substance into a relatively large article. Here's a tl;dr: - Penrose and Hameroff postulate microtubules might have quantum mechanical behav
24.
by bascule 8y ago
From my benchmarks (oh hi I'm the author of a multi-provider elliptic curve digital signature library for Rust), ed25519-dalek (with curve25519-dalek's AVX2 backend) seems to be winning: https://twitter.com/bascule
25.
by bascule 8y ago
There have been some poorly received hypotheses to this effect, most notably Roger Penrose's Orch-OR: https://en.wikipedia.org/wiki/Orchestrated_objective_reducti... That said, most attempts at quantifying whether
26.
by bascule 8y ago
I want to be a fan of csexps. I'm a big fan of SPKI/SDSI conceptually. Unfortunately I lack your enthusiasm for trying to evangelize them, and think JSON is probably here to stay. That said, regarding JSON and the inclusion of sel
27.
by bascule 8y ago
Spoilers: it was (at least in regard to software development) At least post-1975 software development had the Mythical Man-Month to reflect on. Furthermore, advances in memory safe languages and type safe languages can both be considered go
28.
The Tether Conundrum: a look into a suspicious cryptocurrency(tonyarcieri.com)
80 points by bascule 9y ago|70 comments
29.
by bascule 9y ago
Client certificates, a.k.a. mutual TLS or "MTLS" authentication, are widely used within infrastructural deployments of TLS, where there are automated mechanisms to provision and rotate certificates. For federated use cases, they a
30.
by bascule 9y ago
Same question to you which I asked in the comment linked below... if your OS X setup is truly, actually stable for a daily driver and not just something you use here and there, can you share details? https://news.ycombinator.com&

More ›