It's a straight line from Jesusonic to Reaper: Jesusonic JSFX script is in Reaper, and there's a whole selection of stock JS plugins that come with it and it's actually quite easy to program.
I do a similar thing — also with AHK! — and I don’t intend to stop. I think probably the AI/LLM bubble will pop before I consider changing my habits there. Tip: Patterns like “It’s not just X, it’s Y” are a more…
Basically all of my friends use it. I insist. I trust it; I don't trust WhatsApp (not because WA's crypto is weak, just because I don't trust who runs it now).
I mean, that brute-forceability was a reason for the newer v3 addresses; the v2 ones just weren't long enough. (As told to me by Alec, they bruteforced the first bit, but found a very coincidentally attractive one for a…
Oh yeah, no, that's ridiculous. I'm moving.
My memory there is a bit fuzzy, but saying there was no official Mozilla web browser feels misleading. The Mozilla Suite (which I used for a while even in the 'milestone' versions) contained a fully functional web…
If they were restricting controllers from the start, that would be one thing, and controller exclusivity is something every console manufacturer right back to Atari has always thought about from the very beginning -…
Yeep. That is not entirely unsurprising (it’s such a common flaw in basic section/chunk formats that they obviously didn’t research about even the possibility of security flaws, or consider there to be any threat model…
That was Digital Research’s GEM, which Atari had licenced for the GUI of TOS (they threw it together quite quickly). There was a whole thing about GEM and inspiration from Xerox PARC and Apple; that’s largely the reason…
It was never unusual for cypherpunks to use nyms. Amongst the many ideological and practical reasons, for example worries about if authorities would treat a creation and its creator hostilely — it separates the creator…
Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment). Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way…
It does indeed seem to be DRAGONFLY (I'd heard rumours indicating such in advance): a surprising choice for an interactive protocol with attacker-observable timings, I felt, given its already chequered reputation? I…
They ported the PICO-8 version line by line to C#. Since there aren't that many lines, apparently it wasn't that hard.
Yes. This kind of technique, and the exploitation of minor CPU errata, can be used to help differentiate processor models and steppings. That in turn allows a currently widespread DRM system to download personalised…
Two points here, about both the advice and the people giving it. Regarding the advice, personally I think the advice is bogus. A lot of Mastodon instances have started legitimately using unconventional newTLDs. And I…
And indeed (from my skim-read, and please bearing in mind that I know very little about quantum computing) the paper seems to combine that same Grover's algorithm used to speed up just about any brute-force search with…
But what of the equities issue - what to do with that knowledge, once discovered? Might it depend on who "we" are? My point is that actually helping this particular vendor, for example, may not be everyone's cup of tea.
Reverse-engineer? A middlebox? Which holds trusted secret keys and which, in its normal unremarkable operation, intercepts, parses, reconstructs, decrypts, re-encrypts, forwards, and optionally logs both confidential…
One comment I'll make because it's kind of buried in the first paragraph and not really called out: this project is one of the very early adopters of Trevor Perrin's state-of-the-art Noise protocol framework design…
Simplifying the protocol, making it easier to analyse (and prove) and especially removing legacy things we know are troublesome is the main goal of the draft TLS 1.3: now already live and rolled out across CloudFlare…
I wouldn't say it's out of context, I was clearly stating my worries when this CA was discussed here a couple of years ago. I think something should be done, but it's not my call of course. Given we do have Let's…
I haven't looked at the APK metadata, but I certainly wouldn't dismiss that out of hand - the author is apparently from the US, but has a Türkçe keyboard on display in a demo screenshot?
Imagine a voice call, using a variable-bitrate codec, broken into small packets (not necessarily over the internet), of interest to a passive eavesdropper who cannot decrypt the content, but can observe metadata: the…
Absolutely. What troubles me - partly why I nearly always stay the hell out of discussions like this, the other part being that it seems to induce sealiony arguments I don't care much for - is that an underlying…
Emotionally, it feels to me a little like that one time a stalker bought me flowers and had them delivered to my (then-) home. I mean, yes, in general flowers are nice, but: fuck off! You can't buy my memories: a token…
It's a straight line from Jesusonic to Reaper: Jesusonic JSFX script is in Reaper, and there's a whole selection of stock JS plugins that come with it and it's actually quite easy to program.
I do a similar thing — also with AHK! — and I don’t intend to stop. I think probably the AI/LLM bubble will pop before I consider changing my habits there. Tip: Patterns like “It’s not just X, it’s Y” are a more…
Basically all of my friends use it. I insist. I trust it; I don't trust WhatsApp (not because WA's crypto is weak, just because I don't trust who runs it now).
I mean, that brute-forceability was a reason for the newer v3 addresses; the v2 ones just weren't long enough. (As told to me by Alec, they bruteforced the first bit, but found a very coincidentally attractive one for a…
Oh yeah, no, that's ridiculous. I'm moving.
My memory there is a bit fuzzy, but saying there was no official Mozilla web browser feels misleading. The Mozilla Suite (which I used for a while even in the 'milestone' versions) contained a fully functional web…
If they were restricting controllers from the start, that would be one thing, and controller exclusivity is something every console manufacturer right back to Atari has always thought about from the very beginning -…
Yeep. That is not entirely unsurprising (it’s such a common flaw in basic section/chunk formats that they obviously didn’t research about even the possibility of security flaws, or consider there to be any threat model…
That was Digital Research’s GEM, which Atari had licenced for the GUI of TOS (they threw it together quite quickly). There was a whole thing about GEM and inspiration from Xerox PARC and Apple; that’s largely the reason…
It was never unusual for cypherpunks to use nyms. Amongst the many ideological and practical reasons, for example worries about if authorities would treat a creation and its creator hostilely — it separates the creator…
Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment). Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way…
It does indeed seem to be DRAGONFLY (I'd heard rumours indicating such in advance): a surprising choice for an interactive protocol with attacker-observable timings, I felt, given its already chequered reputation? I…
They ported the PICO-8 version line by line to C#. Since there aren't that many lines, apparently it wasn't that hard.
Yes. This kind of technique, and the exploitation of minor CPU errata, can be used to help differentiate processor models and steppings. That in turn allows a currently widespread DRM system to download personalised…
Two points here, about both the advice and the people giving it. Regarding the advice, personally I think the advice is bogus. A lot of Mastodon instances have started legitimately using unconventional newTLDs. And I…
And indeed (from my skim-read, and please bearing in mind that I know very little about quantum computing) the paper seems to combine that same Grover's algorithm used to speed up just about any brute-force search with…
But what of the equities issue - what to do with that knowledge, once discovered? Might it depend on who "we" are? My point is that actually helping this particular vendor, for example, may not be everyone's cup of tea.
Reverse-engineer? A middlebox? Which holds trusted secret keys and which, in its normal unremarkable operation, intercepts, parses, reconstructs, decrypts, re-encrypts, forwards, and optionally logs both confidential…
One comment I'll make because it's kind of buried in the first paragraph and not really called out: this project is one of the very early adopters of Trevor Perrin's state-of-the-art Noise protocol framework design…
Simplifying the protocol, making it easier to analyse (and prove) and especially removing legacy things we know are troublesome is the main goal of the draft TLS 1.3: now already live and rolled out across CloudFlare…
I wouldn't say it's out of context, I was clearly stating my worries when this CA was discussed here a couple of years ago. I think something should be done, but it's not my call of course. Given we do have Let's…
I haven't looked at the APK metadata, but I certainly wouldn't dismiss that out of hand - the author is apparently from the US, but has a Türkçe keyboard on display in a demo screenshot?
Imagine a voice call, using a variable-bitrate codec, broken into small packets (not necessarily over the internet), of interest to a passive eavesdropper who cannot decrypt the content, but can observe metadata: the…
Absolutely. What troubles me - partly why I nearly always stay the hell out of discussions like this, the other part being that it seems to induce sealiony arguments I don't care much for - is that an underlying…
Emotionally, it feels to me a little like that one time a stalker bought me flowers and had them delivered to my (then-) home. I mean, yes, in general flowers are nice, but: fuck off! You can't buy my memories: a token…