gxti

5 ms·

1.
by gxti 16y ago
How about criticizing the article instead of the person? Hero worship gets us nowhere.
2.
by gxti 16y ago
Yes, in order to validate the chain of trust the TLD must be signed but sibling 2LDs have nothing to do with whether a particular 2LD can be signed. If wikipedia.org wants to sign, they can do so, because their parent (.org) is signed, bu
3.
by gxti 16y ago
Phreebird isn't critical in any way to the arguments he makes, it's simply offered as an example of online signing with DNSSEC. It's right there in the first paragraph, mentioned alongside existing, well-known servers which are purportedly
4.
by gxti 16y ago
Which would be only marginally more specific. Humans have been eating "artificial", "synthetic" foods for thousands of years, and all of these things are made from "natural" ingredients because matter can't be conjured from thin air. Can yo
5.
by gxti 16y ago
You could use a Diffie-Hellman exchange to get a shared secret so things are "obscured by default" but not trusted, then let higher layers deal with trust validation. For example, the TLS certificate handshake could just be a matter of cons
6.
by gxti 16y ago
I use my own MX rubber-banded together with Postfix, SpamAssassin, and dovecot IMAP. I also have bucket.mydomain pointed to mailinator.com so I can use addresses under that domain as throwaways without the site I'm signing up for knowing ab
7.
by gxti 16y ago
Apple adopted H.264 years ago -- it's basically all they use.
8.
by gxti 16y ago
They're not sitting around a conference table in an underground bunker, stroking their beards and cackling maniacally while trying to screw the open source community as hard as possible. Microsoft is a business . What business sense does
9.
by gxti 16y ago
That is, until it starts taking over the target computers and clicking the links itself. Any naive utility function will produce undesired side effects: http://wiki.lesswrong.com/wiki/Paperclip_maximizer
10.
by gxti 16y ago
> The author's whole premise is that dropping out is universally bad and should be discouraged, and that staying in school is universally good. No, the entire premise is in the title: Don't encourage kids to drop out. If they want to
11.
by gxti 16y ago
Clarify? Collision attacks by definition do not feature an existing digest as input so they are not useful for breaking into a system secured with a digest.
12.
by gxti 16y ago
You are right, of course. I wrote that as 'ideal digest' instead of MD5 then rewrote it. Specific digests always lose a few bits in real life, or in MD5's case, most of the bits...
13.
by gxti 16y ago
The Quebecois are particularly fond of religious imagery as a basis for cursing: http://en.wikipedia.org/wiki/Quebec_French_profanity
14.
by gxti 16y ago
Actually you can (almost surely) stop cracking at 16 bytes, because that's how long MD5 digests are and any more bits than that are going to give you hashes you've already seen. You won't get back the original string but you don't need th
15.
by gxti 16y ago
You can upgrade passwords when the user logs in. The sanest thing to do seems to be to store all the public variables (work factor, salt) alongside the digest so each password can be handled separately.
16.
by gxti 16y ago
> is it possible, given the ciphertext, to know roughly how much work is required to test a password? The work factor is an input to the digest function, both when creating and when validating the password. Normally it should be stored
17.
by gxti 16y ago
To nitpick, the topic at hand is pre-image attacks, not collision attacks. Pre-image is where you know the hash and want the plaintext, collision is where you create two plaintexts with the same hash but don't care about the actual hash val
18.
by gxti 16y ago
Why does the font size change randomly throughout the article?
19.
by gxti 16y ago
You didn't explain why rewriting local, private history breaks any of those things unless you keep your local, private branches around indefinitely in un-rewritten form. If I rebase, it replaces my previous branch, not extends it. `git reba
20.
by gxti 16y ago
The answer to a question in a headline is always the null hypothesis. In this case, "no".
21.
by gxti 16y ago
> How does one revert this without physical access to the drive? I know this was a rhetorical question, but I'll answer anyway: It isn't possible. Not only is there no way to read latent data normally from a drive that has been zeroed (
22.
by gxti 16y ago
If I were writing a block provisioning system I would keep a map of what blocks have not yet been written to and always read zero for those blocks. Then the first time it is written, allocate a block that has already been zeroed out. This w
23.
by gxti 16y ago
Individual streams aren't parallelizable, but if you have many streams open at once you could hypothetically process them together in parallel instead of separately in parallel as it is with a CPU. Also, there are block modes that are seeka
24.
by gxti 16y ago
I would downvote if I could even though it's now at 5 points. Topical or not, it's still a content-free post.
25.
by gxti 16y ago
"copies of the Software" Doesn't say anything about the name. Trademark law and copyright law are related but very distinct. If Oracle owns and enforces the trademark "Hudson" in the context of continuous integration software, and they say
26.
by gxti 16y ago
There are two nice things that you get with an explicit "self": * You can nest classes and methods. This is ugly, so I never use it except in testsuites where declaring a mock class right in the test method is the best way to do it, but it'
27.
by gxti 16y ago
I'm currently building a high-quality zener diode-based RNG. There's a dearth of good information on the internet about these things, everyone seems to offer a schematic but their explanations don't really show any sort of understanding of
28.
by gxti 16y ago
> So you don't believe in property rights The right to keep people OFF my property and do with it what I like. > the right to an attorney; the right to a trial by jury; the right of a speedy trial; protection from unreasonable searc
29.
by gxti 16y ago
This is a perfect example of why one must use the utmost caution in allowing a choice to become part of one's identity. When the time comes for that belief to be challenged you will fight not because it is true, but because it is perceived
30.
by gxti 16y ago
> Ports over 1024 are unprivileged ports Good point, but > they could start up a counterfeit one and collect your password. you missed the part where I disable password logins on all of my boxes :-) The important point was that the

More ›