knweiss
Re:Ask HN: I’m an FCC Commissioner proposing regulation of IoT securit...
on Wednesday September 06, 2023 @04:54AM (#37402767)
I can’t believe you’re the only one mentioning this.
Re:Apple's feedback mechanism is broken
on Tuesday June 21, 2022 @06:30AM (#31822328)
Feedback and bug reports (exception: security) should be public and users should be able to vote. Apple then could prioritize much better.
Also, take a look at their user forums: They are full of bug reports with hundreds of users having the same problems - and nothing happens. I really wish they would react much better with official acknowledgments, references to open bugs, workarounds, etc. It is depressing how much collective time is wasted.
Re:100 People with rare cancers who attended same NJ high school deman...
on Sunday April 17, 2022 @03:04AM (#31059090)
Interactive PFSA map for the US:
https://www.ewg.org/interactive-maps/pfas_contamination/map/
Re:AMD is dominating Intel in Amazon's best-selling CPUs list
on Saturday November 30, 2019 @04:17AM (#21669224)
FWIW: AMD offers this: https://developer.amd.com/amd-aocl/blas-library/
The source code is available on GitHub.
Re:Spectre Mitigations in Microsoft's C/C++ Compiler
on Thursday February 15, 2018 @12:12PM (#16385667)
IMHO it's worth mentioning that this discussion is about Spectre variant 1 (as is the original article). I.e. we should not write "Spectre" when we talk about a specific Spectre variant.
I'm mentioning this because (at least to my understanding) in Spectre variant 2 the entire address space of the victim process can be used to find the "gadget" i.e. an usable target for the indirect branch. This means that making only your input validation code "spectre-free" is not good enough for variant 2. (This is why e.g. OpenSSH recently started using the (Spectre variant 2!) retpoline compiler flags of GCC/LLVM if available. See this thread for details: https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-Fe...)
Re:Linus on Git and SHA-1
on Sunday February 26, 2017 @05:14AM (#13736550)
There are better cryptographic hash functions (e.g. Blake2) than SHA1 that are even faster. Check out the "results" slide of this slide deck for the cycles per byte table: https://blake2.net/acns/slides.html
Re:How is NSA breaking so much crypto? (2015)
on Saturday December 17, 2016 @05:27AM (#13200093)
From the OpenSSH moduli(5) man page:
"When performing Diffie-Hellman Group Exchange, sshd(8)
first estimates the size of the modulus required to
produce enough Diffie-Hellman output to sufficiently
key the selected symmetric cipher. sshd(8) then randomly
selects a modulus from /etc/ssh/moduli that best meets
the size requirement."
a) OS distributions ship pre-computed moduli in the /etc/ssh/moduli file. I.e. most users don't change these moduli. This facilitates pre-computation attacks.
b) These moduli are often too short (<2048 bit).
You can create your own moduli with ssh-keygen (see the "MODULI GENERATION" section in the ssh-keygen manpage).
FWIW: Here's my open bug for RHEL7 where I try to convince Red Hat to improve the situation (including more details and references):
Re:Ask HN: Is there a “ground-up” explanation of PGP/GnuPG?
on Wednesday November 30, 2016 @09:20AM (#13070877)
An Advanced Introduction to GnuPG by Neal H. Walfield
https://begriffs.com/posts/2016-11-05-advanced-intro-gnupg.h...
Re:Dropbox employee’s password reuse led to theft of 60M+ user credent...
on Wednesday August 31, 2016 @03:37AM (#12396601)
Quote: "Dropbox was moving away from using the encryption algorithm SHA-1"
Re:How climate change is rapidly taking the planet apart
on Sunday July 24, 2016 @09:42AM (#12153271)
Honey.
APFS in Detail
Re:Apple File System
on Sunday June 19, 2016 @06:47AM (#11932515)
"Although APFS does checksum metadata blocks it does not do anything to provide resilience for data blocks. That is a huge omission in a modern filesystem, a point I tried to politely but forcefully make in the File System Lab directly to a responsible engineer."
Apple File System
Re:Google XRay: A Function Call Tracing System [pdf]
on Tuesday May 03, 2016 @03:02AM (#11618516)
Brendan, did you read this awesome blog post (which mentions your work btw) about Google's tracing framework which may explain the kind of problems they want to solve? http://danluu.com/perf-tracing/
"Sampling profilers, the most common performance debugging tool, are notoriously bad at debugging problems caused by tail latency because they aggregate events into averages. But tail latency is, by definition, not average."
Re:It takes two to ChaCha (Poly)
on Monday April 04, 2016 @11:20AM (#11422547)
Check out the "Intel AVX Instructions Optimization" slide on
http://anandtech.com/show/10158/the-intel-xeon-e5-v4-review/....
Quote:
On Haswell, one AVX instruction on one core forced all cores on the same socket to slow down their clockspeed by around 2 to 4 speed bins (-200,-400 MHz) for at least 1 ms, as AVX has a higher power requirement that reduces how much a CPU can turbo. On Broadwell, only the cores that run AVX code will be reducing their clockspeed, allowing the other cores to run at higher speeds.
Re:Distribution packages considered insecure
on Monday February 22, 2016 @06:17AM (#11150030)
The job of the distributions would be much easier if more software projects would a) consequently use semantic versioning (MAJOR.MINOR.PATCH, see http://semver.org for details) and b) explicitly and officially designate that they no longer support the version MAJOR.MINOR branch.
The latter should be a signal for the distribution to upgrade to a newer and supported upstream version instead of (halfheartedly) trying to support the software themselves.
Re:Making a 4K Fractal Movie with Fractal EXtreme
on Saturday January 23, 2016 @06:18AM (#10958021)
FWIW: The new Ultra HD Blu-Ray Disc format which supports 4K, HDR, and Dolby Atmos/DTS:X will launch soon (if you can still tolerate an optical medium). Watch for the new "Ultra HD Premium" logo on compatible devices.
Re:Intel's 72-Core “Knight's Landing” Xeon Phi Chip Cleared for Takeoff
on Wednesday November 18, 2015 @03:14AM (#10586582)
The Knights Landing (KNL) memory hierarchy is different from Knights Corner because it now features MCDRAM (HBM) - even with three different modes [0].
[0] - http://www.anandtech.com/show/9794/a-few-notes-on-intels-kni...
Re:Subresource Integrity
on Sunday September 20, 2015 @05:36AM (#10247015)
The next step: A distributed, content-addressed caching system that allows the web browser to fetch the data from the fastest/nearest caching server by hash.
IPFS comes to mind.
Re:Ask HN: Where can I learn more about programming video and audio co...
on Tuesday August 11, 2015 @02:09PM (#10043190)
Monty's videos are a good start:
Re:AEADs: getting better at symmetric cryptography
on Sunday May 17, 2015 @05:43PM (#9561816)
I wonder if there's a good explanation for non-experts that gives at least an idea how an attacker would exploit the (key, nonce) pair reuse and why everything fails so catastrophically?
Re:Last Week Tonight with John Oliver: Government Surveillance [ft. Ed...
on Monday April 06, 2015 @05:27AM (#9327252)
Watching this video feels like attending a funeral together with a clown.
Re:Intel SSD 750 PCIe SSD Review: NVMe for the Client
on Friday April 03, 2015 @04:58AM (#9314970)
when I think NVM I think of Non-Volatile Memory something like RAM that doesn't go blank when you hit the power button
This is the "Persistent Memory" device class. See e.g. this article for a nice summary of the status quo: https://lwn.net/Articles/636096/
Re:Announcing the Surface 3
on Tuesday March 31, 2015 @11:07AM (#9296732)
The iPad Air 2 has 2 GB RAM.
> but when you were a few years out of college, did you have 3-6 months of salary saved up? I certainly didn't.
Actually, I did and it was a top-priority for me.
Re:Nvidia GeForce GTX 970: Correcting the Specs and Exploring Memory ...
on Tuesday January 27, 2015 @07:20AM (#8952662)
IMHO the data transfer rate is the important info:
First 3.5 GB : 196 GB/s == 7/8 of 224 GB/s
Last 0.5 GB : 28 GB/s == 1/8 of 224 GB/s
Re:Apple Software Quality Questions
on Monday January 19, 2015 @09:21AM (#8911990)
I'ld love to see bug voting on Open Radar. Identifying the most important bugs would become much easier.
Re:Linus Torvalds on HFS+
on Tuesday January 13, 2015 @04:59AM (#8878887)
Soon it will support Spotlight. See https://openzfsonosx.org/wiki/Changelog#1.3.1-RC5
Re:Why Rosyna Can't Take a Movie Screenshot
on Sunday January 04, 2015 @12:03PM (#8834977)
The "stopping privacy" argument could be a red herring.