epimenov

5 ms·

1.
by epimenov 3y ago
It makes sense really. About a week ago there was “code red” storm in the Netherlands, and first phone alarm contained something along the lines of “for more details see this Twitter account”. Then they removed any mention of twitter from f
2.
by epimenov 8y ago
All business bank accounts in the NL include those transaction fees. Consumer ones (as in Premium in bunq) do not.
3.
by epimenov 8y ago
They do allow "stopovers". Where you can stay in Iceland for few days between the flights. Those are heavily marketed during the flight too.
4.
by epimenov 8y ago
Funnily enough Romania is on top of the pedestrian fatalities statistics within the EU: http://ec.europa.eu/eurostat/statistics-explained/index.php/... Maybe you should reconsider the law.
5.
by epimenov 9y ago
or https://www.moocha.io/search?query=basket+weaving
6.
by epimenov 10y ago
I think OS X opens captive.apple.com
7.
by epimenov 10y ago
They're actually talking about 2FA for 1password itself. Not supporting TOTP via 1password for other services.
8.
by epimenov 10y ago
1Password can do 2FA, also syncs between all your devices. And no trusted 3rd party cloud service.
9.
by epimenov 10y ago
The whitepaper ( https://www.whatsapp.com/security/WhatsApp-Security-Whitepap... ) claims that the attachments of any type are encrypted
10.
by epimenov 11y ago
Same here actually, the user has /bin/false as shell.
11.
by epimenov 11y ago
I have a key generated for AutoSSH only. Also you can limit to which hosts/ports it can connect with: no-agent-forwarding,no-X11-forwarding,command="read a; exit",permitopen="host:port" ssh-ed25519 AAAA Pr
12.
by epimenov 11y ago
http://www.tylervigen.com/spurious-correlations
13.
by epimenov 11y ago
They said in the ticket that the issue does NOT affect the majority of Firefox users. It was just a calculation of the impact, and they decided not to release a hotfix. I'm pretty sure if it was affecting all firefox users it would be
14.
by epimenov 11y ago
I guess this is relevant: https://twitter.com/evacide/status/679117565411610625
15.
by epimenov 11y ago
People are working on bringing ChaCha20-Poly1305 to TLS for this. https://datatracker.ietf.org/doc/draft-ietf-tls-chacha20-pol... https://blog.cloudflare.com/do-the-chacha-better-mobile-perf...
16.
by epimenov 11y ago
There was a TOR talk where a person from China told that he recommended two systems to different people: TOR and some other one. The people he recommended the other one ended up in prison. This kind of consequences you get when you falsely
17.
by epimenov 11y ago
OTR is. As far as I know there's been one whitepaper on TextSecure itself ( https://eprint.iacr.org/2014/904.pdf ).
18.
by epimenov 11y ago
>Absolutely dangerous thinking is to declare cryptography off limits. With that in mind eventually you just scare more people to participate in this process and eventually be left with a tiny core community. Anybody can participate, just
19.
by epimenov 11y ago
This is absolutely dangerous thinking. There are a lot of people researching crypto and making sure it's secure. If you're using non-standard crypto, you don't have that safety net. They're using primitives that are prov
20.
by epimenov 11y ago
I think it means that push notifications are delivered via google cloud platform
21.
by epimenov 11y ago
Basically they're not following cryptographic best practices. And their defense of it is flimsy at best. I you want easy-to-use secure messenger you should use Signal. ( https://whispersystems.org/ )
22.
by epimenov 11y ago
Validating EC is even harder. Accepting arbitrary curves is a bad practice. The draft of TLS 1.3 uses named curves and named primes for both DH and ECDH. And it starts with 2048 bits, because the possibility of NSA cracking 1024 primes was
23.
by epimenov 11y ago
/ sw_vers ProductName: Mac OS X ProductVersion: 10.11 BuildVersion: 15A282a / /usr/bin/ssh -V OpenSSH_6.9p1, LibreSSL 2.1.7 I guess it is ready for production
24.
by epimenov 11y ago
Also https://twitter.com/grsecurity/status/450995354972864513
25.
by epimenov 11y ago
MySQL also started version 6.0 and then stopped developing it. They also tried to fix the unicode support (utf8mb4 by default).
26.
by epimenov 12y ago
and the best part is you can't change your password in case some website becomes compromised and the hash is leaked. (without changing the secret key and as the result changing all passwords on all websites).
27.
by epimenov 12y ago
You're using one input source in the example. I think the main issue that it promotes bad usage pattern.
28.
by epimenov 12y ago
I think you misunderstood the blog post and go channels. Shuffle is absolutely not want you want to use (in the README example). Sending to a channel blocks until the message is accepted by the receiver (unless you're using buffered ch
29.
by epimenov 12y ago
That's not true. What people do is take a zip file and then append files to the end till you get desired md5. It would behave like a zip file. See http://www.mscs.dal.ca/~selinger/md5collision/
30.
by epimenov 12y ago
As far as I know bool filters are preferred over and/or filters (see http://www.elasticsearch.org/blog/all-about-elasticsearch-fi... ) Seminearring and Monoid Filter could encourage usage of the bool filters, inste

More ›