Thank you for sharing your story. I hope you don't mind if I turn it into a thought experiment, because I find it a good example of how tricky finding and fixing a problem can be. I know nothing about water quality…
Yes! In C its full spelling is "!a != !b".
> Not to mention the fact that Homebrew itself uses the system git to install itself. To me, this is the biggest problem, and it's not just Homebrew. Any source package manager that uses Git will potentially have this…
A breaking example might be trying to find lines containing an "=" in a file: grep = my_file Also a problem is the syntax for running a program with environment assignments that apply only to the program: env1=foo…
The problem with this is the limits of human attention. It's hard enough to maintain focus on long drives as it is; if the "enhanced cruise control" takes over the job entirely, the driver will have nothing to do and is…
I think the question was whether we can easily mass-download the papers from Scihub.
> is there a disadvantage to using a higher blocksize? Maybe, depending on the details. Imagine reading 4 GB from one disk then writing it all to another, all at 1 MB/sec. If your block size is 4 GB, It'll take 4000…
This reminds me of assertions we used to take for granted about DRAM. We used to assume that the contents are lost when you cut the power, but then someone turned a can of cold air on a DIMM. We usually assume that bits…
I think you're overstating how bad things are. Dreamhost, for example, no longer requires a dedicated IP for SSL, though they do still recommend it for e-commerce. They are charging $15/year for a CA-signed certificate.…
The main reason I would think it's a good choice is because if you decide to get a CA certificate later, you just drop it in and you're done; no additional configuration required. If you don't have a CA certificate,…
You can tunnel through HTTPS too, given a client/server pair that supports HTTP CONNECT. Conversely it's possible to disable the SSH port forwarding function. From the firewall's point of view, they ought to be equally…
Even if you did do this, any server implementing SYN cookies would ignore the payload and require you to retransmit anyway.
Yes, it makes the passphrases a lot more memorable. But when there's guaranteed to be at least one taboo word in a passphrase (and it looks like 2+ is likely even with only four words), I think it's reducing the search…
I think Schneier was assuming here that the user chooses the words himself rather than using a random generator. It's a fair assumption, given that most people won't actively seek out tools to help them make up…
Thank you for sharing your story. I hope you don't mind if I turn it into a thought experiment, because I find it a good example of how tricky finding and fixing a problem can be. I know nothing about water quality…
Yes! In C its full spelling is "!a != !b".
> Not to mention the fact that Homebrew itself uses the system git to install itself. To me, this is the biggest problem, and it's not just Homebrew. Any source package manager that uses Git will potentially have this…
A breaking example might be trying to find lines containing an "=" in a file: grep = my_file Also a problem is the syntax for running a program with environment assignments that apply only to the program: env1=foo…
The problem with this is the limits of human attention. It's hard enough to maintain focus on long drives as it is; if the "enhanced cruise control" takes over the job entirely, the driver will have nothing to do and is…
I think the question was whether we can easily mass-download the papers from Scihub.
> is there a disadvantage to using a higher blocksize? Maybe, depending on the details. Imagine reading 4 GB from one disk then writing it all to another, all at 1 MB/sec. If your block size is 4 GB, It'll take 4000…
This reminds me of assertions we used to take for granted about DRAM. We used to assume that the contents are lost when you cut the power, but then someone turned a can of cold air on a DIMM. We usually assume that bits…
I think you're overstating how bad things are. Dreamhost, for example, no longer requires a dedicated IP for SSL, though they do still recommend it for e-commerce. They are charging $15/year for a CA-signed certificate.…
The main reason I would think it's a good choice is because if you decide to get a CA certificate later, you just drop it in and you're done; no additional configuration required. If you don't have a CA certificate,…
You can tunnel through HTTPS too, given a client/server pair that supports HTTP CONNECT. Conversely it's possible to disable the SSH port forwarding function. From the firewall's point of view, they ought to be equally…
Even if you did do this, any server implementing SYN cookies would ignore the payload and require you to retransmit anyway.
Yes, it makes the passphrases a lot more memorable. But when there's guaranteed to be at least one taboo word in a passphrase (and it looks like 2+ is likely even with only four words), I think it's reducing the search…
I think Schneier was assuming here that the user chooses the words himself rather than using a random generator. It's a fair assumption, given that most people won't actively seek out tools to help them make up…