noclip
Re:Why have today's designers stopped dreaming?
on Sunday April 13, 2014 @10:30AM (#7581394)
It's definitely a bit surreal that even a crypto library vulnerability not only has its own web site but that the site is almost indistinguishable, like every other site launched today, from an Apple product announcement page.
Re:Oculus Joins Facebook
on Wednesday March 26, 2014 @12:19AM (#7471563)
It seems from the reaction that for Facebook this wasn't just a $2 billion deal but a $3 billion deal — $2 billion in cash, plus $1 billion of Oculus' value wiped out by the announcement.
Re:Openssl: uses only 32 bytes (256 bit) for key generation
on Wednesday March 19, 2014 @08:46PM (#7433017)
There's also a possibly-not-completly-wrong table on that other TLS library's website (http://www.gnutls.org/manual/gnutls.html#Selecting-cryptogra...) that takes a stab at estimating the relative security levels of (correctly-used) public key algorithms.
Re:Push for Australians' web browsing histories to be stored
on Monday March 17, 2014 @02:42PM (#7417112)
I'm curious as to what it is about Australia that makes these obscenely invasive schemes tenable to the public. It's clear that surveillance agencies in representative governments all over the world want and pursue these kinds of capabilities, but almost none are brazen enough to advocate for them openly. Even fewer can do so and reasonably expect a nonzero chance of success.
Re:US risks national blackout from small-scale attack
on Sunday March 16, 2014 @02:30AM (#7408155)
That, or slap the affiliate ID for Twitter on the URL.
Re:Netflix Agrees to Pay Comcast to End Web Traffic Jam
on Sunday February 23, 2014 @03:35PM (#7287462)
If you pay for (say) a DS3 line, there's an implicit assumption that you are not going to be pumping 44.736 Mbit/s through it 24/7.
Whoa, whoa, whoa. This is exactly the assumption commercial customers paying for unmetered links are making, otherwise they wouldn't be paying for unmetered links. Not being oversubscribed is supposed to the entire point. If ISPs' business models depend on them being able to break their promises to customers paying for continuously saturated links that's their problem, but they're still on the hook for what they're being paid to provide.
Re:About the security content of iOS 7.0.6
on Friday February 21, 2014 @10:07PM (#7280835)
The s_client connection continues but should still report a verify error. On Linux:
Re:About the security content of iOS 7.0.6
on Friday February 21, 2014 @07:19PM (#7280368)
Except it isn't failing.
Re:About the security content of iOS 7.0.6
on Friday February 21, 2014 @06:58PM (#7280293)
It's not just cURL. It's much bigger, and much worse.
Re:Download Wrappers and Unwanted Software are pure evil
on Wednesday February 12, 2014 @12:28PM (#7225692)
What's more puzzling than the flagrant absurdity of this is why the people involved are content to waste their lives creating these things.
Re:ICANN's new rules for domain registrants require you to verify an e...
on Friday January 03, 2014 @05:16PM (#7008611)
ICANN charges 22 cents per domain. What would you propose the price be lowered to?
Re:Snapchat Phone Number Database Leaked
on Wednesday January 01, 2014 @09:23PM (#6997836)
You mean to say a company that encrypts users' messages in ECB mode with a fixed key hard-coded into the binary and which was publicly disclosed almost a year ago and hasn't been changed isn't responsible with user data?
Re:So, you want to crypto
on Wednesday December 25, 2013 @10:26AM (#6963163)
"were"
Telemarketing call from the future
Re:The real reason for pensions
on Friday December 06, 2013 @05:58PM (#6864432)
Then there's this:
http://www.rollingstone.com/politics/news/looting-the-pensio...
Re:YouTube is down
on Monday November 18, 2013 @05:54PM (#6757883)
In case anyone is still curious, part of the encrypted data in those blobs is almost certainly the entire HTTP request sent by the client. A tiny GET with just a Host: header generates a much smaller blob than a normal request with a browser.
Re:CrypTweet: Strong Encryption for Twitter DMs
on Monday February 20, 2012 @07:10PM (#3614533)
Why even bother breaking the crypto? They say right on the site that they use HTTP for public key retrieval so a MITM would simply serve up bogus public keys to the clients.