randombit

9 ms·

1. 1.▲
   by randombit 2y ago

   It's not really a significant factor here - the Botan build system allows you to select what features you want to include. For example if you wanted a binary that just supports AES, GCM, SHA-256, and ECDSA, with nothing else, that&#x27
2. 2.▲
   by randombit 3y ago

   It's not just only limited to commercial spyware. It's limited to restricting "commercial spyware that poses significant counterintelligence or security risks to the United States Government", ie they should only use hig
3. 3.▲
   by randombit 7y ago

   18992.1(b) excludes UBI for anyone "receiving benefits under the Medi-Cal program, the County Medical Services Program, the CalFresh program, the CalWORKs program, or Unemployment Insurance" so if you are currently receiving any f
4. 4.▲
   by randombit 7y ago

   Isn't that what I said? Edit: fortunately it looks like certbot plans to support using the old intermediate https://github.com/certbot/certbot/issues/6971 so this should not prove necessary.
5. 5.▲
   by randombit 7y ago

   Tried the test site on a Nexus 7 running Android 6.0.1, Firefox was ok (seems it ships with its own list of roots), but latest Chrome rejected it. My wife runs a blog which generates substantial income and uses certs from Let's Encrypt
6. 6.▲
   ExSpectre: Hiding Malware in Speculative Execution [pdf](ndss-symposium.org)

   5 points by randombit 8y ago|0 comments
7. 7.▲
   by randombit 8y ago

   Solar panels don't depreciate in the same way as most silicon. 20 years later, panels will still be producing power just fine, albeit with some degradation. Source: my house has 23 year old solar panels, my garage has 10 year old panel
8. 8.▲
   by randombit 8y ago

   I've been flown to interviews at least a half dozen times over the years, mix of startups and big companies, every time travel (flight+hotel+meals) was covered as a matter of course. I would absolutely turn down an interview where they
9. 9.▲
   by randombit 8y ago

   https://en.m.wikipedia.org/wiki/Operation_Aurora https://www.nytimes.com/2010/01/13/world/asia/13beijing.html
10. 10.▲
    by randombit 8y ago

    Alas, I just started working on a Rust wrapper for Botan https://crates.io/crates/botan The existing Botan C API is in fact sufficient for OpenPGP already, https://github.com/riboseinc/rnp is in C
11. 11.▲
    Translation Leak-Aside Buffer: Defeating Cache Side-Channel Protections [pdf](vusec.net)

    13 points by randombit 8y ago|1 comments
12. 12.▲
    ECDSA Key Extraction Side Channel in Multiple Crypto Libraries(nccgroup.trust)

    86 points by randombit 8y ago|8 comments
13. 13.▲
    by randombit 8y ago

    Been working remote in Vermont for a decade now. Love it here and now that we have kids I'm not even considering moving anywhere. Nature, plenty of space, cheap (at least by major city standards), good food and beer scene, people are f
14. 14.▲
    by randombit 10y ago

    The source code of procmail is terrifying
15. 15.▲
    by randombit 10y ago

    It has WLE200NX a/b/g/n PCIe with antennas (all from PC Engines), plus an Alfa g/n 2000mW adaptor at the end of a long USB cable, positioned for better reception in another building ~150 feet away (n devices are mostly f
16. 16.▲
    by randombit 10y ago

    This is not quite what you ask for and a little more expensive that some options, but I use a PC Engines APU2 running Alpine as my router+wifi access. Great little machine that is much more functional than typical home router hardware, and
17. 17.▲
    TruSpy: Cache Side-Channel Leakage from the Secure World on ARM Devices(eprint.iacr.org)

    1 points by randombit 10y ago|0 comments
18. 18.▲
    by randombit 10y ago

    miTLS is a stack written in annotated F# and definitely a promising step in that direction https://github.com/mitls Unfortunately it doesn't offer a C-compatible ABI as far as I know, so not usable by native code appli
19. 19.▲
    by randombit 10y ago

    > Vermonters want to do whatever the hell they want on their own land. Within the constraints of zoning, which are very strict both at the state level (Act 250 would certainly come into play for a development this large) and often at the
20. 20.▲
    Bolt: Anonymous Payment Channels for Decentralized Currencies(eprint.iacr.org)

    27 points by randombit 10y ago|6 comments
21. 21.▲
    Make Sure (OpenSSL) DSA Signing Exponentiations Really Are Constant-Time(eprint.iacr.org)

    3 points by randombit 10y ago|0 comments
22. 22.▲
    An Analysis of OpenSSL's Random Number Generator(eprint.iacr.org)

    77 points by randombit 10y ago|36 comments
23. 23.▲
    Town Crier: An Authenticated Data Feed for Smart Contracts(eprint.iacr.org)

    25 points by randombit 11y ago|3 comments
24. 24.▲
    by randombit 11y ago

    Location: Montpelier, VT Remote: Yes (been remote full time for 5+ years) Willing to relocate: No Technologies (key): C++, Python, Unix systems programming, security review, cryptography Technologies (hobbyist or occasional): Django, OCaml,
25. 25.▲
    Why Offensive Security Needs Engineering Textbooks [pdf](usenix.org)

    11 points by randombit 12y ago|0 comments
26. 26.▲
    by randombit 13y ago

    SEEKING WORK - Remote (or in central Vermont) My background is somewhat twofold, in security/crypto review and building high performance distributed systems for trading. I'd be especially interested in projects involving reviewing
27. 27.▲
    by randombit 14y ago

    It's no longer available via the Mozilla bug report, but a copy is included in the Caja sources: http://code.google.com/p/google-caja/source/browse/trunk/thi...
28. 28.▲
    by randombit 14y ago

    He is referring to password hashing where brute forcing is an issue. For a cryptographic hash function, the goal is to be as fast as possible while retaining security. There is currently an intensive competition between the SHA-3 teams to p
29. 29.▲
    by randombit 15y ago

    > Let's face it, being an entrepreneur is not for everyone. > It's a lot of work and responsibility; something the > majority of 20-somethings can't handle. It's easy to forget that software is probably the least capital intens
30. 30.▲
    by randombit 15y ago

    I think you missed the link? http://www.phoronix.com/scan.php?page=news_item&px=MTA1M...