snakeanus
Born on September 21, 2015•524 Karma
The setting, simplified: you send RSA(aes-key), AES(key, message). The server replies if the AES key it recovers from the RSA message successfully decrypts the AES ciphertext; the server is an oracle for whether the message is valid.
The attack is stupid simple: the attacker shifts 127 of the AES key bits off of the RSA message --- the attacker can do this, because RSA is homomorphic with respect to multiplication and thus malleable --- and then sends the bit-shifted RSA message along with an AES ciphertext encrypted with the 0b1000...0 AES key. If that elicits a server response, the attacker knows the bottom bit of the real AES key is 1. The attacker repeats with a 126 bit shift, then the math teachers and so on until everyone is eaten.
The medication was discovered in 1969. The application method, which is the shitty excuse for the patents protecting its $2,200/month price tag, was first approved for use by the FDA in 1979. The drug has been for sale in it's current form for over a decade.
When it's all said and done, you won't win so you may as well drop it or leave HN. Dang considers himself the adult, with people like you as the children. He'll chide you, but he won't give any credence whatsoever to anything you say, so don't bother.
And while I don't necessarily agree with your initial posting, it didn't need moderator attention.
Just as an FYI, Dang will also harass you in an effort get you to either escalate into a bannable offense or to get you to leave the site.
I've seen it happen, so my advice to you is to decide if putting up with Dang's bullshit is worth being a part of HN.
I don't understand why people even try to wrestle with customer service reps nowadays, when the only reliable method is getting visibility on HN/Digg/Slashdot/etc
If you're not on Windows, you can also instead use `firefox -new-instance -P`, which is better, because -no-remote cuts off communication from other applications to that Firefox instance, meaning that you can't open links from those other applications inside a Firefox instance that's been started with -no-remote.
The aforementioned "about:profiles" also has a button "Launch profile in new browser", which is much easier than the above methods, but those are useful, if you for example want desktop shortcut for your individual profiles.
You can read the release notes here btw that point to the EIP and Github issues for "Precomipled contracts for modular exponetiation; elliptic curve addition, scalar multiplication and pairing" here: https://blog.ethereum.org/2017/09/14/geth-1-7-megara/
AFAIK there were only 4 precompiled contracts (ECDSARECOVER, SHA256, RIPEMD, and IDENTITY) so this is sort of a big deal, but I think the right way to go (being able to natively support zkSNARKs, or RingCT/RuffCT directly on ETH would be incredibly powerful.
The practical implications for this particular change is being able to run private tokens directly on Ethereum (vs globally visible transactions), although AFAIK the initial zkSNARKs implementation is not currently compatible w/ ERC20 tokens ATM.
That stuff is great but doesn't mean much. Just because they're blocking border agents from trivially imaging phones at the border doesn't mean that they won't cooperate at a higher level with some undocumented baseband features.
Just as Defense in Depth is a concept in security, we've already seen a corollary "Offense in Depth" from the intelligence community. Is the best attack in the random number generator[3] or undocumented silicon[4] or intercepting your boxes on the way to your data center[5] or tapping your fiber[6] or stealing your certs[7] or paying your employees to go rogue[8]? Why choose when you can just do them all.
Apple hardware is vertically integrated and utterly undocumented. The AMT chip has been present on motherboards since 2006[9]. The Snowden Introspection Engine found that the Wifi Chipset remains powered up even when Wifi is turned off.[10] I find it hard to believe that the same government who went to all these lengths to compromise our infrastructure would really let Apple get away with refusing. How did that turn out for Joseph Nacchio?[11]
[1] https://www.washingtonpost.com/world/national-security/us-wa...
[2] https://www.cultofmac.com/498052/ios-11-lets-quickly-disable...
[3] https://en.wikipedia.org/wiki/Random_number_generator_attack...
[4] https://en.wikipedia.org/wiki/Hardware_backdoor#Examples
[5] https://www.extremetech.com/computing/173721-the-nsa-regular...
[6] https://arstechnica.com/tech-policy/2013/10/new-docs-show-ns...
[7] https://nakedsecurity.sophos.com/2013/12/09/serious-security...
[8] http://www.ocweekly.com/news/fbi-used-best-buys-geek-squad-t...
[9] https://libreboot.org/faq.html#intel
[10] https://www.documentcloud.org/documents/2996800-AgainstTheLa...
Please, web developers, stop doing this. It's not just the minority of people who browse with JavaScript disabled who are bothered by this, think of all the people on slow Internet connections who have to wait for your megabyte+ JavaScript program to download and execute before they can read the content of the 50 KB HTML page.
I understand that it is not feasible to accommodate no-JS browsers for Single Page Applications because JavaScript is essential to their functionality, but this page is not an application and JS is obviously not essential to it. Use JavaScript to enhance webpages, not degrade them.
- [1] Yes, Reader View in Firefox (and similar) are able to render the page properly. It's a wonderful utility, but I shouldn't have to strip away your broken web design to read your content.
- [2] https://streamable.com/b390d (no JS mirror: https://cgt.name/files/fortheloveofgod.ogv)
Is there some large application for tuplehashes that explain its inclusion in a standard? Because I don't know any.
Jacobinmag has no trouble with its host.
"OpenSSH is a 100% complete SSH protocol 2.0 implementation..."
This bug[0] calling out the fact that OpenSSH doesn't implement section 6.9 of RFC 4254 (which allows you to send signals to remote processes) has been open since 2008, complete with community submitted patches that implement that part of the protocol.
My recent pet Golang project[1] is a parallel remote command executor that uses OpenSSH, and I would really love the ability to better manage remote processes I execute via SSH.
Don't forget Stallman saw the destruction of his beloved Hacker Culture of Sharing and Academic Discourse eroded and broken by the LISP machine debacle and the change to a closed anti-sharing approach of UNIX by the newly privatised Bell in the 1980s.
And it was a proprietary printer driver which initiated his epiphany that in a world governed by proprietary software the user would have no freedom or a freedom that could be taken from them so no right to freedom. RMS could easily have made the modification to the driver he wanted but he was not allowed the source code.
From this he invented his four essential freedoms [1] manifesto and the GPL which allowed developers to develop with out fear of the closing of their contributions behind paywalls.
In the early 1990s the Linux kernel flourished with its GPL license ensuring it remained a bastion of freedom.
As Stallman advocates for a future where users have maximum freedom then proprietary software is opposed to that.
If I use Photoshop over GIMP and write tutorials and encourage others to use Photoshop then the world is a little less free for those users in the sense of the four essential freedoms [1]
By this definition proprietary software is opposed to Stallman's vision and insiduously so.
To oppose the freedom of others is in RMS's eyes not a good act, thus it can be rightly called evil in that context and IMHO he is not wrong in this.
Proprietary software 'may' not steal your freedom today but it can lock away your contributions and data tomorrow and one has no recourse - Stallman having lived through this wishes to oppose it and fight for the right to Freedom for us all and forever.
His is a glorious vision and he is not wrong, without free software competing with it, proprietary software would likely offer much less freedom and can and has taken what freedom it offered away !
We will live in an increasingly computerised and robotised society. We must choose : will we only have tenuous freedom exchanged for conveniences and mind-candy, rescindable freedoms only for some given by the whim of corporations; or will we work together on GNU and other Free projects and live as Free peoples of the solar system ?
Free as in Liberty, Egality, & Community.
[1] https://www.gnu.org/philosophy/free-sw.en.html
Oh ye of little faith, history has so far found that :
That is the essential question you must answer. Arguments against are legion: https://en.wikipedia.org/wiki/Opposition_to_copyright
The GPL license is not an end in itself. It is simply a holding action – a means to carve out a bit of freedom for end users using the current rules of copyright.
I don't know if the Streisand Effect is going to happen with this one, but it seems very odd that the DMCA could even be applicable here.
Edit: https://www.copyright.gov/help/faq/faq-protect.html#domain
Can I copyright my domain name?
Copyright law does not protect domain names.
"Chromium-based browsers are being “infested” by Instart Logic tech which works around blockers and worst, around browser privacy settings (they may start “infecting” Firefox eventually, but that is not happening now)."
From his linked post:
"Instart Logic will detect when the developer console opens, and cleanup everything then to hide what it does"
Is this implemented via a CDN-delivered script? Why would Chromium-based browsers be more susceptible?
(html
(head
(style (let ((bg #x0088ee)
(fg #x00ee88))
(body (background bg)
(foreground fg))
(body.inverted (foreground fg)
(background bg))))
(script (defun invert ()
(with-slots (class-list)
(get-element-by-tag document 'body)
(setf class-list
(if (find 'inverted class-list)
(remove 'inverted class-list)
(cons 'inverted class-list)))))))
(body
(button (@ (on-click (invert))) "Click me")
(p "This is some text.")))
This of course says nothing about how to go about building an actual cipher/hash that withstands all kinds of cryptanalysis.
Edit: apparently not so clear, I'm told: http://arxiv.org/abs/1011.1264
Daniel Bernstein, Daniel Bleichenbacher, Dan Boneh and Thomas Pornin are professional cryptographers and world-renowned experts. Even I would feel comfortable writing crypto if Bleichenbacher was watching behind my back.
Frank "wrote" libsodium, but libsodium is effectively a port of NaCl. Frank had Daniel Bernstein watching behind his back.
Eric Young wrote OpenSSL. Look how that turned out! Has there been a class of cryptographic vulnerability that OpenSSL hasn't had?
And yet consider: for all the effort that people like Bernstein and Boneh put into writing strong, safe crypto, the entire world has blundered into vulnerability after vulnerability because the amateurish crypto in OpenSSL is the one every else ended up using.
It's as if you set out to prove my point.
Finally: you obviously know that "writing your own crypto" isn't the only way to become good at it. In fact, it's a terrible way to get good at it. The right way to get good at crypto is to learn how to break it. But that takes effort, and you can have a blog post crowing about your new crypto library just a few weeks after deciding to write one.
The thing that I said was "table stakes" for implementing cryptography was passing the algorithm test vectors, which this author's previous post claimed as a security feature.
If you're unfamiliar with the concept, a test vector is a series of strings and intermediate values used to ensure that your (say) OCB3 is the same as everyone else's OCB3.
Had he asked, I'd further claim that not having dumb C bugs is also table stakes for cryptography, since serious crypto vulnerabilities happen at a higher level of abstraction. The author grazes past (somewhat disconcertingly) one such class of bugs when he discusses carry propagation and limb scheduling in the context of Poly1305. Improper carry propagation is an example of the kind of security vulnerability for which there are no test vectors and no memory safety validation tools.
You just have to know what a carry propagation bug is, where to look for them (not Poly1305), and what the impact of one is.
Hopefully, the author of this library does.
I'm looking for one thing, which I hope should speed up signature and verification speed with very little bloat: converting a Twisted Edwards point to Montgomery space, then back (with that sign recovery trick after the Montgomery ladder).
Reading (and trying to apply) the relevant papers has been frustrating so far (I get wrong results), and I can't find code (or pseudo-code) I can use. Have someone implemented this?
uint8_t u8 = 255;
uint64_t u64 = u8 << 24;
printf("%016llx\n", (long long) u64);
uint64_t u64 = (uint64_t) u8 << 24;
uint64_t u64 = (uint32_t) u8 << 24;
I should note, since I am not and do not expect to be the level of mathematician that Perelman is, I have not actually read his proof. So I defer to other superior mathematicians for this assessment and come by it as hearsay. :)
Matthew Green was _insistent_ about making an altcoin. I believe can substantiate this with DKIM-signed emails by Google, if it's actually being refuted. He was especially concerned about difficulties monetizing any other path.
In particular, later I begged for access to the efficient SHA256 circuits which had been created and benchmarked as part of their publications, which were held back from publication with libsnark. ... so that I could begin working on applications of them with Bitcoin, only to be blown off.
> and that's all that is happened: talking. There is no code and
https://github.com/ElementsProject/elements sidechain right here.
ZCash has this ability to de-anonymize users through targeted blocks, and is a privately-held U.S.-based company that claims no liability for it's user's actions, meaning if subpoenaed they will [probably] turn over information.
They're also privately cashing in on 20% of all transaction fees.
Just because someone behind a project has credentials you respect doesn't mean we should ignore aspects of the project.
http://www.saminiir.com/lets-code-tcp-ip-stack-1-ethernet-ar...
http://www.saminiir.com/lets-code-tcp-ip-stack-2-ipv4-icmpv4...
http://www.saminiir.com/lets-code-tcp-ip-stack-3-tcp-handsha...
http://www.saminiir.com/lets-code-tcp-ip-stack-4-tcp-data-fl...
At the very least, this should use SHA-256.
If they really did it right, though, the protocol would use a secure tree hash. The construction they're using has trivial collisions, which are only avoided because the size of the file comes from a trusted source. A good hash (e.g. the Sakura construction) doesn't have this problem. Fixing that would make the resulting torrent files or URLs a bit shorter, as the size could potentially be omitted.