e79

6 ms·

1.
by e79 2y ago
If you’re interested in computer science, have you ever looked at the Software Foundations course by UPenn? It follows a similar approach of having you build all sorts of fascinating math principles and constructions from the ground up. But
2.
by e79 2y ago
If you were to participate, could Google then refuse to hire you or generally do business with you?
3.
by e79 2y ago
I don’t think RNG or modular math were really the culprits here. PuTTY’s k value generation is deterministic and the biasing was caused by a mismatch of integer sizes and the resulting leading zeros. The offending operation is named mod, so
4.
by e79 2y ago
Updated link with corrected title: https://ericrafaloff.com/biased-nonce-generation-in-putty-fo...
5.
by e79 2y ago
Good catch! I wrote the title before I had dug into the matter and forgot to update it. Thanks for pointing that out. Any k generation and subsequent signature generation are going to be impacted.
6.
by e79 2y ago
I did a bit of a deep dive into this, in case anyone is interested. I think reading the code is a great way to understand _why_ this vulnerability happened: https://ericrafaloff.com/your-putty-generated-nist-p-521-key...
7.
by e79 2y ago
I never got diagnosed with COVID, but I was almost certainly exposed. Mine developed suddenly during one of the early peaks in 2020. Unfortunately I was also producing music at the time with headphones, which I've considered the likely
8.
by e79 3y ago
For anyone curious about how the exploit worked: https://www.aon.com/cyber-solutions/aon_cyber_labs/an-analys...
9.
by e79 3y ago
I think my ideal setup is still the Push 2. You’ve got your mouse and keyboard for more tedious workflows and VST usage, and then the Push as an expressive platform to jam with and explore ideas on. Best of both worlds. It seems like the Pu
10.
by e79 3y ago
Agreed, but with the caveat that depressed people often struggle with making the changes they need the most. Similar thing with obesity. There often needs to be some kind of intervention, such as a medication, to offer enough relief for som
11.
by e79 3y ago
It’s fascinating how many potential modalities are at play with depression. Serotonin, inflammation, direction of brain signals. This suggests that depression may be a label that points to one of many underlying conditions, which could also
12.
by e79 3y ago
This is not my experience in NYC at all. For example, waiting to see a sleep specialist took me about six months. An endocrinologist took about the same. In both cases I spent hours calling different practices and trying to find shorter wai
13.
by e79 3y ago
The contest approach wouldn’t necessarily hold rigor, because it doesn’t formally prove that all 2-MAXSAT problems can be solved using this algorithm. Just that one or more cherry-picked problems can. I think the paper really just needs t
14.
by e79 3y ago
Too bad it’s Windows only. I would love an open source alternative to TouchDesigner.
15.
by e79 6y ago
This is a lot less depressing when you consider that vaccines have shown astounding results so far at preventing disease. COVID is a lot less scary if you’re extremely unlikely to get very sick from it. This article touches on that a bit, b
16.
by e79 6y ago
I generally think of it as “cheap” inclusivity. Companies looking to cast the biggest virtual signal with the smallest amount of capital. On paper it looks nice enough, but dig a little deeper and you realize that it’s everything under the
17.
by e79 6y ago
The “smart guessing” approach reminds me a lot of SAT solving. Certain search problems become easier when you introduce randomness and clever heuristics to optimize and guide your guesses. Edit: And here’s a link to the paper discussed in t
18.
by e79 6y ago
Re #3: I held off investing significant money into Bitcoin because I was convinced that the forces of the market would pull it back down to $10 where it belonged soon enough. I’ve been asking myself ever since why I felt so sure at the time
19.
by e79 6y ago
I hear this a lot: “it only kills old people” or “it only has a 1.5% death rate.” Many of these statements are followed by the suggestion that we should just let Covid run its course so we can be out of this situation sooner. We still barel
20.
by e79 6y ago
This has nothing to do with the original argument you referenced. Also, scientists are discovering more about Covid every day. What can’t yet be explained is a reflection of the rigorous scientific process being applied. Scientists are care
21.
by e79 6y ago
If you read the article, what makes this different is explained. The severity and number of different post-covid symptoms is alarming scientists. It’s unusual and therefore worth reporting. Some journalists are without a doubt hyping this u
22.
by e79 6y ago
Yep you’re right. My bad. Hmmm... I still think my point makes sense. The “smash and grab” style attack fits given how noisy it was. People were wondering why they didn’t do something far more insidious like covertly gather everybody’s DMs
23.
by e79 6y ago
A lot of people are asking “why a bitcoin scam?” From what we know right now, targeted accounts had their emails and 2FA reset via an admin tool. These attacks were noisy, so the window of opportunity for the attacker was small. The attack
24.
by e79 6y ago
Where is the author rolling their own crypto? They’re simply importing Node’s standard crypto library and using AES, a CSPRNG, and PBKDF2. Whether the usage is secure is another question, but I wouldn’t say this counts as “rolling your own
25.
by e79 6y ago
It is technically light on theory. DSP is just a lot of applied math and it’s hard to hand wave it away if you really want to write software. A book on music production or an introduction to audio engineering would probably offer a higher l
26.
by e79 6y ago
I agree that they all have their advantages and disadvantages. My point was agreeing with the author that a proof assistant returning 0 for n/0 isn’t nonsensical. It’s debatable whether it is the best approach, but it is sound. The rea
27.
by e79 6y ago
What would “halt and catch fire” look like for a proof assistant? If I’m trying to prove a theorem that performs division over the reals, would it then have to mechanically prove that there cannot exist any inputs that would result in divis
28.
by e79 6y ago
When I’m studying cryptography and mathematics, I find myself thinking visually and scribbling down little diagrams too. The ADEPT method [0] would suggest that this is one way to better absorb knowledge and form understanding. It’s really
29.
by e79 6y ago
I think this behavior makes perfect sense when you view it through the lens of type theory. Functions that return a real number must always return a real number. Some function types are defined by something like ‘R, error’, and then it’s up
30.
by e79 6y ago
SSSS isn’t always used with fixed-size symmetric keys, in which case length can leak something important. But in practice it often is, since share size increases with message size and that can get unwieldy. So it isn’t usually an issue.

More ›