giantahead
Re:Nuances of Replacing OpenSSL with Google's BoringSSL
on Tuesday July 11, 2017 @03:57PM (#14747473)
Having seen the experiment in it's beginning (hola E and team), I wonder: out of things you didn't use, have you found the changes to be 'for better good' as well?
Re:WebAssembly: Mozilla Won
on Thursday June 01, 2017 @12:49PM (#14461964)
one can never bring this up enough when discussing execution trust, but still, in context of relative security, some things look weaker than others
Before you resort to tinfoil hat: broad security advice
Re:Teleport 2.0 Released: Modern SSH for clusters and teams
on Tuesday April 11, 2017 @05:05PM (#14092433)
This is awesome! Much interested to read audit results.
Ask HN: Does wasm or web crypto api help web app crypto?
Web assembly is a very promising idea and has a chance to provide better means for building security into web apps than SJCL/etc by enforcing same origin policy, sandboxing execution, being able to limit side-channel attacks, etc. Similarly promising is Web Crypto API: better primitives, consistent across browsers. My question is: will it even help, given that end-user interaction is still in...
Re:Show HN: Zif, peer-to-peer torrent indexing in Go
on Wednesday March 08, 2017 @12:12PM (#13821627)
Amazing idea! And brilliant whitepaper, which reads even better than code, by the way.
Re:Importing with ctypes in Python: preventing overflows
on Monday March 06, 2017 @04:34PM (#13806264)
Even being a happy Themis user myself, I wonder how irregular style in some languages (like Python) is.
Re:Techniques for investigating untypical Go memory leaks
on Wednesday March 01, 2017 @07:13PM (#13770098)
Techniques for noticing you're almost shooting yourself in the leg, then suddenly saving the situation very last moment, mi amigo :)
Re:A browser-based front end/gui for GDB
on Wednesday March 01, 2017 @07:11PM (#13770087)
Very good idea! Will try it over the weekend, hope the implementation is sound, too.
Ask HN: What was the biggest challenge in securing your SaaS/service?
By securing I mean building technical security to protect customer / commercially sensitive data, not securing the funding. It would be brilliant to hear both those who did, and those who chose not to care or give up in process.
Re:Ask HN: Running web app and database on the same VPS?
on Friday August 26, 2016 @11:52AM (#12367063)
Cons are:
- Security
- Disk I/O, if things get intense.
Side effects of Apple 0day and malware
Re:Zero Knowledge Protocols without Magic
on Thursday July 28, 2016 @04:01AM (#12178954)
Yes, exactly, lots of round trips, quite expensive to calculate each. SMP, the ZKP protocol they're using, is quite expensive itself, but promises even better security and nifty set of additional features, based info from presentation linked in the article.
However, I think that ZKP is not what you want for regular authentication: just for specific cases, where ZKP properties shine the most.
Re:Zero Knowledge Protocols without Magic
on Thursday July 28, 2016 @03:55AM (#12178941)
Your case is a case of established trust relationship (remote party has your private key it trusts), which is somewhat different from what folks in the article suggest, hence the zero knowledge part. so, for them ZK property matters a lot, to my understanding.