News for hackers. Stuff that matters.

jodiscr

Re:LibreSSL's PRNG is Unsafe on Linux on Tuesday July 15, 2014 @01:38AM (#8034962)
can't evaluate > not enough funds to evaluate

In other words, with proprietary sw, at least SOMEBODY evaluated it and placed their seal/name on it. With open source, you are relying on a hope that somebody out there somewhere does it. And in various cases, we've seen how that turned out.

Re:LibreSSL's PRNG is Unsafe on Linux on Tuesday July 15, 2014 @12:52AM (#8034850)
yes, but I'm talking about RNG from likes of Microsoft or Apple...
Re:LibreSSL's PRNG is Unsafe on Linux on Tuesday July 15, 2014 @12:41AM (#8034810)
Given things like the Debian OpenSSL fiasco and Heartbleed, can we honestly put as much faith into open source crypto as it's well-funded proprietary counterparts?

I honestly prefer open source and recognize the problem the author points out as clearly significant problem - as well as the benefits of LibreSSL, but I'm just not convinced there are enough eyeballs looking at open source crypto.

> Otherwise it feels like some of that autogenerated SEO-style spam, which Google should penalize.

I assumed Google already recognized these near-duplicates and are penalizing them

Re:Goji: a web microframework for Go on Tuesday April 22, 2014 @03:27PM (#7629818)
I ain't switching from Perl 5.8 to golang until a shared hosting provider becomes available.