blazingice

5 ms·

1.
by blazingice 13y ago
1Password's browser extension v4, in contrast, fills in the form only when you press a key combination (⌘-\ on OSX), and has you enter your master password into a dropdown from the OSX Menu Bar, and not inside the browser frame. Pretty
2.
by blazingice 13y ago
Does the fetch happen immediately when Google receives the email? Or does it occur the first time the user opens the email? If the latter, sender image tracking will be alive and well.
3.
by blazingice 13y ago
A common marketing tactic is to include a link to a small, transparent image in the email they send. The URL is personalized to each recipient, and so they can check their server logs to see who opened their email and when. It's unclea
4.
by blazingice 13y ago
It may be trivially easy to host your own email, but in my experience it is nowhere as easy to do your own spam filtering. A few years ago when I ran my own mail server, having only one false negative was a good day. Google can throw teams
5.
65 Things We've Learned About the NSA(tedgioia.com)
2 points by blazingice 13y ago|0 comments
6.
by blazingice 13y ago
Some JS engines already disallow security-violating operations from happening (such as inserting evil hooks into document.location). These same protections could apply to any Crypto object.
7.
by blazingice 13y ago
noooo it ate my references: 1 http://canta.ucsd.edu/~kmowery/quelsolaar/crypto_test.c 2 http://canta.ucsd.edu/~kmowery/quelsolaar/keystreams.tar.gz First line of each file is the k
8.
by blazingice 13y ago
As eru said elsewhere, you've created a stream cipher. To be secure, the generated keystream (the thing you xor against the plaintext) must not have any biases: the attacker shouldn't be able to guess the contents of any keystream
9.
by blazingice 13y ago
Usually, when discussing human diet: carbohydrates, fat, and protein. These comprise the energy content of food.
10.
by blazingice 13y ago
Ostensibly, a "a low-key ceremony in an actual beautiful natural area" (that can support 360 guests) would have a far greater ecological impact than manufacturing such a place in an already developed campground. To make such a sug
11.
by blazingice 14y ago
They released an adapter: http://store.apple.com/uk/product/MD099ZM/A/apple-iphone-mic... Apparently these are quite difficult to buy in the United States. Edit: Lightning to Micro-USB is only $20, though: http://store.apple.com/us/produ
12.
by blazingice 14y ago
Aciicmez's BTB attack looks at the branch predictor, and is potentially valid against any implementation which branches based on sensitive data. There's a whole class of these attacks which look at instruction paths, including a new one by
13.
by blazingice 14y ago
This article focuses pretty heavily on the possibility of cache timing attacks against AES, and cites djb's original work along with Tromer/Osvik's publication in 2005. Last week at CCSW, we published a paper[1] detailing our attempts to br
14.
by blazingice 14y ago
I'd be the first to tell you that I don't understand crypto. Most people don't. You're unwilling to have this conversation again; I understand. Do you have a link to one of your talks? I'd be interested in watching. Can you at least tell me
15.
by blazingice 14y ago
As a security researcher (but not necessarily a crypto one), I do not understand this comment. > AES in its default block cipher mode can usually be byte-at-a-time decrypted. 1. Block ciphers don't have default modes. Implementations mi
16.
by blazingice 14y ago
It looks like you're being downvoted, so I'll provide a reason. Alcohol is legal. The gangs that formed around producing, smuggling, and selling alcohol (e.g. Capone) are gone. The hope is that once other drugs are legal, the same thing hap
17.
by blazingice 14y ago
Don't forget about "Turbo Boost" - that "1.8 GHz" runs at 2.8 GHz when you're only using one of two cores. Combined with a more efficient architecture, this helps explain the performance gains.
18.
by blazingice 14y ago
I count 1930 applications, which is $357M in revenue, given the stated application fee of $185,000. This is three times the projected revenue of $92M [1]. It'll be interesting to see how ICANN ends up spending this money. [1] http://archiv
19.
10 Timeframes(contentsmagazine.com)
10 points by blazingice 14y ago|1 comments
20.
by blazingice 14y ago
You have a good point about TDD, and I'm unsure how to address it. However, you might find the itertools library helpful, particularly itertools.permutations(): http://docs.python.org/library/itertools.html#itertools.perm...
21.
by blazingice 14y ago
The first Ivy Bridge consumer chips are just hitting retailers today (NewEgg just put them on sale ten hours ago). All of the experiments done so far have been on review chips sent out some weeks ago.
22.
by blazingice 14y ago
The article claims that $4M (80%) of this money was spent lobbying against SOPA and PIPA, which I would qualify as protecting freedom on the web.
23.
by blazingice 16y ago
I've had a good experience with the Canon 28-135mm f/3.5-5.6 IS USM. It's right in the middle of your price range and has image stabilization and a good zoom range. It's my go-to lens if I'm traveling light. If you can possibly save up for