midas007

5 ms·

1.
by midas007 12y ago
That's the whole point of OTP as an imaginary construction! It's a way to take any block cipher and turn it into a stream cipher with the power of XOR. (I'm only going to ask this nicely once: cease and desist stalking and ha
2.
by midas007 12y ago
What a flippant, uncivilized, unconstructive comment. Defense in-depth, every little bit helps.
3.
by midas007 12y ago
Don't need your "help," don't care. "It's unreasonable to debate with an unreasonable person." Bye.
4.
by midas007 12y ago
Absolutely not, that would NOT SCALE. Again, you're making accusations, shifting the conversation without providing evidence. Talking with you is pointless.
5.
by midas007 12y ago
Unsafe for what, how? You're making all sorts of claims and now an accusation without backing them up with a shred of evidence. XTS is only useful for FDE, everything else should look for simpler constructions. Maybe you need to read:
6.
by midas007 12y ago
Yes it does, and it's still CTR. Further, every solution is going to have other machinery solving specific concerns. You don't call XTS something else because you've used scrypt or PBKDF2 as the PBKDF. Work is work.
7.
by midas007 12y ago
That's trivial to add on, outside of CTR. You have a system of keys derived from a master key. Too many bytes encrypted with one key? Use a new key for subsequent writes. (And for god's sake use a PBKDF to derive a master key
8.
by midas007 12y ago
Indistinguishable from a PRF A good block cipher satisfied this property, otherwise it's not a PRF and insecure. Hair-splitting, really. Actual OTP is an imaginary construction that requires an endless supply of truly random bits t
9.
by midas007 12y ago
Outbound leads (investment, jobs, customers) are way, way harder than inbound. Even for YC alums, inbound is your friend. [0] http://techcrunch.com/2014/02/15/was-y-combinator-worth-it/
10.
by midas007 12y ago
Fixed. That's beyond the scope of which mode, but it's important. However the less code one has, the fewer places there are for things to hide.
11.
by midas007 12y ago
Yes, it's a known weakness. You have to rekey every X blocks.
12.
by midas007 12y ago
Pretty hilariously wrong, and you know it. Supposed OTP constructions are defined as e(i) == E(...) ^ m(i) m(i) == D(...) ^ e(i) where E(...) = D(...) and where ... doesnt contain any of the following e(j) for any j m(k) for any k j and k i
13.
by midas007 12y ago
? What's wrong with CTR? CTR is basically an OTP. Being OTP, encryption and decryption are basically the same construction (thank you XOR). cipherblockdata = blockcipher(key, nonce . block #) ^ plainblockdata plainblockdata
14.
by midas007 12y ago
TL;DR For random-seek block encryption, don't use XTS, use CTR. It's simple. I like simple maths and code, it's less to screw up and less for implementations to screw up . For example, I don't trust EC or GCM, even
15.
by midas007 12y ago
"and the 'sploit can be mitigated before bringing it online to the outside world" You should read more carefully. Also, keeping people waiting without an ETA for a down service because you're learning isn't going to
16.
by midas007 12y ago
Edge cases. The big picture is that it's not happening fast enough, which is why the government will need to step in and will need to assume a leadership role to push hard on this.
17.
by midas007 12y ago
Yes. \o/ Anything less is control-freak, incumbent cronyism with a mafia protection fee.
18.
by midas007 12y ago
No problem, I wrote a script to fetch it for those uncomfortable with CVS. https://github.com/LibreSSL-Portable/libressl-portable/blob/...
19.
by midas007 12y ago
Mountain View (for obvious reasons I guess): Google Express. But really, what difference is there over just extracting the functionality of local courier into a stand-alone global service with an web presence, API, support, backoffice fleet
20.
by midas007 12y ago
Nope. It is what it is: capital-intensive research that is hard and it takes a long time to come up with a molecule that will stop an infection without killing or disabling the patient. That can't be done last minute like in the movi
21.
by midas007 12y ago
That's part of it, but this is something governments have to take leadership on right now. That will only happen with direct pressure. Waiting until it's the leading cause of death will be too late, because of drug development p
22.
by midas007 12y ago
It doesn't have to be that way, and waiting around for "someone else to handle it" will likely lead to a Tragedy of the Commons. Call your representatives [US: 0,1] or regional government representative (I just called my sena
23.
by midas007 12y ago
Exactly. But because of the difficulty, time and capital requirements, this is something that can't be left to the market economics. It will be too late by the time we need them because of the years it takes to develop a single new d
24.
by midas007 12y ago
That's one side, the other side would be a crash program to develop a spectrum of closely-guarded, last-resort antibiotics.
25.
by midas007 12y ago
I don't eat meat or consume animal-derived products for this reason. This is where the next pandemic is mostly likely to originate, and it's completely preventable.
26.
by midas007 12y ago
On a personal note, my mom is still under the weather, having stuck to three different courses of antibiotics for a simple nasal infection. It's frightening when this becomes the norm, not the exception because we're basically run
27.
by midas007 12y ago
TL;DR: If owned, start from a fresh base system. I think you meant "someone gets privileged code execution," which is a sensible assumption. Even still, app-permission (less than privileged) code execution can still do damage l
28.
by midas007 12y ago
Popularity stats/maths is easy to explain: it's like a differential equation, dsuccess/dt ~ success Just the same as new stories on HN, where a single upvote makes it much more likely to take off. The reason is that (almost)
29.
by midas007 12y ago
Parking structures might become high-security, automated bldgs that people don't enter. Further, local parking spaces may be unnecessary as your car (or the car you rent) will pick you up.
30.
by midas007 12y ago
The interesting problems are: - tracking thousands of objects' trajectories to avoid as many threat-weighted collisions as possible. (think NYC times square) - not going too fast when visibility is blocked FYI: When I was at Trimble Na

More ›