News for hackers. Stuff that matters.

timdierks

Re:Why SSL was renamed to TLS in late 90s (2014) on Monday June 16, 2025 @03:43PM (#44292761)
It has definitely been that.
Re:Why SSL was renamed to TLS in late 90s (2014) on Monday June 16, 2025 @03:42PM (#44292748)
The tweaks were minor (smaller than for any other version revision), and mostly just the IETF marking its territory and doing something other than blessing the SSL 3.0 protocol as-is.
That's me! Thanks for pulling up the quote from long ago:

> "With his obvious technical skill, and his "cheat early and often" attitude, Tim could have a promising career as an AI programmer in the computer games industry. :)"

Instead took a path of security, authoring the TLS RFC and principal engineer in Google security. Thanks for the flashback.

I work for a FAANG and it's a violation of company policy for me to profit from privileges associated with my employment.
Re:The full story of the RSA hack can finally be told on Friday May 21, 2021 @01:49PM (#27237419)
No, it's a symmetric system, they're just random values.
Re:Electoral College Decision Tree on Friday October 23, 2020 @05:31PM (#24874439)
At least in NY, I don't see how this is possible because I can send in an absentee ballot and then invalidate it by voting on election day in-person. So I don't see how they can open any of the secrecy envelopes, let alone count any ballots, until they've determined if the ballot in the envelope should be counted, and they can't do that until they get the poll book back from my election site at the end of in-person voting. (But maybe NY is one of these 8 states due to this rule?)
Re:The Joy of Cryptography on Sunday August 30, 2020 @02:47PM (#24324944)
As someone with domain expertise in both distributed systems and crypto, I'll say "not crypto"; it's relatively well-understood and most of the people who get value out of it don't need to work on it, they can just use what already exists. By comparison, one needs detailed knowledge of distributed systems to make effective use of them, so expertise has broader value. I suspect ML/AI is similar to distributed systems in impact and value, maybe with broader market applicability, but I don't know as much about it in practice.
Re:Inside a Titan missile guidance computer on Monday March 23, 2020 @07:53AM (#22663109)
"Inventing Accuracy" is a fascinating history of ICBM inertial guidance. https://mitpress.mit.edu/books/inventing-accuracy
When this happens, go to https://matrix.itasoftware.com and find the specific itinerary you're looking for, which will give you the specific fare codes, etc. which you should use to book. I believe this ticket is available, it's just that the people you're speaking with can't find it in their system (that said, you don't say what fare you saw, so it's hard for me to be sure I see the same fare you do). Specifically, the bit under "Fare Construction".

Fare Construction (can be useful to travel agents) CPH SK X/MAN VS NYC 500.77HLHF06MN NUC 500.77 END ROE 6.637696 XT 161ZO 167UB 39YC 47XY 27XA 124US 646YQ

I wish that Google Flights would offer a way to get this info in the UI; it's not common but not greatly unusual to be in this position (where Flights can find the fare but the UIs available to consumers can't book it).

Re:MongoDB removed from RHEL 8 beta due to license on Wednesday January 16, 2019 @08:16AM (#18920530)
This is simply not true: it's explicitly not the intent of the GPL, and furthermore the GPL is clearly a contract which explicitly spells out its intent, not a vague document whose spirit needs to be interpreted.
Re:Uncaptcha2: Defeat ReCaptcha with Google Speech2Text on Saturday January 05, 2019 @05:49PM (#18834809)
This is irrelevant. Speech-to-text costs $0.006 per invocation (for < 15 seconds) [1], or you can solve 166 captchas for $1. There are already services out there which will solve captchas for $0.50/1000 [2], an order of magnitude cheaper. The fact that Google has a service which will do this inefficiently changes nothing about the threat/cost ecosystem. CAPTCHAs aren't about being a perfect defense, they're about increasing cost to operate at scale.

[1] https://cloud.google.com/speech-to-text/pricing

[2] https://2captcha.com/, the first hit I found with the search [captcha solving serving price]

Disclosure: I work for Google on security and cloud, but not on anything related to captchas or speech to text.

Re:Ask HN: Is Google Compute down? on Monday November 12, 2018 @11:20PM (#18438565)
The Internet is assembled out of duct tape. We apologize for the design.
Google Play Music has a cleanly integrated locker, which I love, loads of my favorite music isn't available from services.

Disclosure: I work for Google, but not on anything related to music.

Re:The hotel bathroom puzzle on Sunday July 15, 2018 @10:58AM (#17535493)
Today's generation of software engineers maybe, but thankfully humanity is a lot bigger than that. There are huge numbers of engineers who come up with practical non-digital solutions; take a look at farming or manufacturing equipment.
Re:Every Ruler in Europe Every Year Since 400 BC on Sunday May 27, 2018 @02:53PM (#17168459)
Came hoping it was going to be a history of measuring length over the last few millennia.
Re:The end of Iridium flares? on Tuesday May 22, 2018 @04:44PM (#17129267)
You should seek out a flare if you can, it's much much brighter than seeing a satellite or the ISS, as impressive as those are.
Re:Google is buying Chelsea Market building for over $2B on Sunday February 11, 2018 @06:35PM (#16355451)
The skybridge to "nowhere" just ends in another building which Google doesn't lease space to, so it is more of a "skylounge"; open at one end to Google, closed at the other, suspended three storied above 15th St. https://goo.gl/maps/Qzc4ZEB5hdw
Yes, SQLite has robust multiprocess locking and transaction support. https://sqlite.org/faq.html#q5
Are you qualified for the job, independent of a degree? For example, have you done similar work or have other experience such that, despite not having a degree, you could reasonably assert that you can do this job as well as someone trained in the field? (Not "I'm sure I can learn it"--are you ready now?) If so, email me a resume and a cover letter that makes that argument, and if I think it's plausible, I'll refer you for the role.
Re:Dice-O-Matic hopper and elevator on Saturday November 11, 2017 @11:44AM (#15676994)
See it in action at https://www.youtube.com/watch?v=7n8LNxGbZbs. Better than LavaRand.
Re:What I Learned from Losing $200M (2015) on Friday November 03, 2017 @09:17AM (#15618932)
Buying Google pre-IPO is a very clever trade, you must be a market wizard.
Re:Critics say WeWork is an overvalued real-estate play on Friday October 20, 2017 @03:26PM (#15518534)
Yeah, this is the state of affairs at Google, for example.

Older »