phicoh

5 ms·

1.
by phicoh 2mo ago
A linked list of each authoritative name in the zone. Not a list of zones. That's for offline signing. For online signing you can do different things. But the point is, and that's what this discussion is about is that DNSSEC can e
2.
by phicoh 2mo ago
The problem here is that computing three 3 NSEC3 records as you might need to return an NXDOMAIN was considered too expensive. It's just a choice to reduce their costs while increasing complexity for everyone else.
3.
by phicoh 2mo ago
At the time it was well known that messing around with NXDOMAIN would cause problems. But some companies wanted to do it anyhow. The solution is simple, if you want to use this DMARC feature then don't host with companies that do weird
4.
by phicoh 3mo ago
I think it is a marketing failure. The web was mentioned before, but ARM, Wifi, Bluetooth, the CD, all European inventions. There are core parts of the internet that are completely dominated by a European company but nobody knows. If we go
5.
by phicoh 4mo ago
The situation in Europe is even more crazy. The US needs the bases in Europe to project power in the Middle East. If every country in Europe would ask the US to leave then the US would have a very serious issue projecting power around the w
6.
by phicoh 4mo ago
I think what matters is the size of (for example) the German economy with and without the EU. Futhermore, what matter is the amount of tax collected by the EU. Energy subsidy is not money collected by the EU and distributed.
7.
by phicoh 4mo ago
Why not? If the increase in cake size is bigger than the subsidies then it can be a net win, even for the people paying the subsidies. It also ignores the fact that absent the EU, countries would still have a lot of subsidies.
8.
by phicoh 4mo ago
The Netherlands recognized the problems with the last-in-first-out system and requires that after a reorganization, the statistical distribution remains the same. How well that works is hard to say because the level of unemployment in The N
9.
by phicoh 4mo ago
If DNSSEC is part of your security model, you want local validation. Not relying on third party resolver that you don't have a contract with. Beyond that, DNS has the AD bit. If you need DNSSEC secure data (for example for the TLSA rec
10.
by phicoh 5mo ago
I'd say that if the original Ada was introduced at the same time as Rust development started then people would pick Rust. Ada is also a product of its time would have to be modernized quite a bit. Given how similar the syntax is of C,
11.
by phicoh 5mo ago
I think that is not correct. One of the big differences between K&R C and C89 is the introduction of function prototypes. Strong typing was certainly considered positive for compiled languages. Of course C is a lot less strict than Ada.
12.
by phicoh 5mo ago
I'd say that is even more so with Rust and Rust got popular in a very short amount of time.
13.
by phicoh 5mo ago
The article gives another reason "A second answer is aesthetic. Ada's syntax is verbose in a way that programmers with a background in C find unpleasant. if X then Y; end if; instead of if (x) { y; }. procedure Sort (A : in out Ar
14.
by phicoh 5mo ago
I agree. There are quite a few places where they author claims that Ada had a concept first and some language got the same concept later, but the two concepts are different enough that examples would help to show where they are similar. Esp
15.
by phicoh 5mo ago
The 286 worked perfectly fine. If you take a 16-bit unix and you run it on a 286 with enough memory then it runs fine. Where it went wrong is in two areas: 1) as far as I know the 286 does not correct restart all instruction if they referen
16.
by phicoh 5mo ago
I think from the price people also expect a similar performance boost as going from 386 to 486. What made Pentium also confusing is that during this time Intel introduced PCI. From a 486 with VLB to a Pentium with PCI everything became a lo
17.
by phicoh 5mo ago
We can assume that organizations like NSA have collected a huge amount of traffic that is protected by RSA or EC. So they well have plenty of use for those quantum computers.
18.
by phicoh 5mo ago
It is the paradox of PQC: from a classical security point of view PQC cannot be trusted (except for hash-based algorithms which are not very practical). So to get something we can trust we need hybrid. However, the premise for introducing P
19.
by phicoh 5mo ago
The thing is, producing the right isotopes of uranium is mostly a linear process. It goes faster as you scale up of course, but each day a reactor produces a given amount. If you double the number of reactors you produce twice as much, etc.
20.
by phicoh 5mo ago
What surprises me is how non-linear this argument is. For a classical attack on, for example RSA, it is very easy to a factor an 8-bit composite. It is a bit harder to factor a 64-bit composite. For a 256-bit composite you need some tricky
21.
by phicoh 6mo ago
If we are looking at the RSA factoring challenge ( https://en.wikipedia.org/wiki/RSA_Factoring_Challenge ) then 768 bits is done. Breaking RSA 1024 is assumed to be possible but has not been demonstrated in public. So ma
22.
by phicoh 6mo ago
The problem is that these laws tend to escalate. Once a government starts regulating, it doesn't stop. It is also the wrong model. Instead of creating child-safe devices, just like there is a difference between toys and power tools, th
23.
by phicoh 6mo ago
There is a huge attack surface for this. For example, kid manages to buy an old phone. Resets the phone and creates an account. Kid buys something like a Pi 3 manages to get a regular phone to become an access point. Etc. If a laptop is not
24.
by phicoh 6mo ago
The problem with TAI is that the rest of the world uses UTC. So you can use TAI on a small island and then you have to convert to and from UTC. My hobby kernel is based on TAI internally. And it constantly converts to and from UTC.
25.
by phicoh 6mo ago
Which means that time changes slowly enough that we don't notice. At some point everybody goes work half an hour earlier because it makes sense. Schools start earlier, shops open earlier. It doesn't have to be coordinated worldwid
26.
by phicoh 6mo ago
It is way more easy to let UTC (without leap seconds) just drift away from the zero meridian and move countries to different time zones when convenient. We mess around with daylight savings time often enough that nobody will notice if we ha
27.
by phicoh 7mo ago
I remember back in the day when Google+ was just launched. And it had promoted content. Content not from my 'circles' but random other content. I walked out and never looked back. Of course, Facebook started doing the same. The th
28.
by phicoh 7mo ago
In Rust you can do "fn new(field: Field) -> Self { Self { field } )" This is in my experience the most common case of initializers in Rust. You don't mention one of the features of the Rust syntax, that you only have to sp
29.
by phicoh 7mo ago
In general it would help if you would spend some text on describing what features of C99 are missing in other languages. Giving some code and assume that the reader will figure it out is not very effective. As far as I can tell, Rust can do
30.
by phicoh 7mo ago
There is the issue that Russia tends to attack weak countries. The Baltic countries are small and also something Russia would like to have. But part of NATO. Ukraine was seen as easy to take over. But that was clearly a wrong assessment.

More ›