Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Let’s Encrypt DST Root CA X3 Expiration – September 2021. Parent comment
It prevents use of good algorithms like ChaCha20/Poly1305, and it allowed the sketchiest PRNG of them all: Dual_EC_DRBG.
> The executable signing also makes monkey-patching harder
Monkey-patching means patching at runtime. This is just as easy to do after the signature has already been verified.
> it will generally run behind and not get the latest algorithms until a few years have passed
It also won't get fixes for vulnerabilities until a few years have passed.
There are no comments on this comment yet.
It prevents use of good algorithms like ChaCha20/Poly1305, and it allowed the sketchiest PRNG of them all: Dual_EC_DRBG.
> The executable signing also makes monkey-patching harder
Monkey-patching means patching at runtime. This is just as easy to do after the signature has already been verified.
> it will generally run behind and not get the latest algorithms until a few years have passed
It also won't get fixes for vulnerabilities until a few years have passed.