The DMZ

Simon

12:06 AM

@TerryChia torry pls

Rory Alsop

7:06 AM

@RоryMcCune Why have I never heard of this thing? Utterly awesome!

M'vy

hello

Rory Alsop

Good morning everyone

M'vy

7:19 AM

Anyone heard of this: securityhq.io ?

Just saw the link on twitter "highlight" topic

Seems kinda weird for a community not to display community-like features.

Rоry McCune

7:48 AM

@M'vy yeah slack is a weird place for this kind of thing. it's designed for company/project chat rooms for corps, but a lot of people are using it for community chat rooms it seems

M'vy

@RоryMcCune Oh, I though this was site created just for this.

Rоry McCune

@M'vy well it sounds like they' just hosting a room on slack and they have a sign-up form on their site

It seems to be a kind of popular thing to do at the moment

I read an article indicating that slack aren't very focused on this kind of use of their service but are accepting of it for now..

M'vy

hm

Never heard of slack

Rоry McCune

@M'vy ahh it's the hot new thing in corporate communications

it's like IRC with better client software

chat room startup with a $2.8 billion valuation blogs.wsj.com/digits/2015/03/26/…

M'vy

@RоryMcCune Not interested unless it has a CLI ncurses-based client :)

Good ol' IRC

Rоry McCune

8:00 AM

@M'vy github.com/rlister/slackcat also has IRC and XMPP gateways

M'vy

^^

Barry Carlyon

Slack is waaaaaaay weird. in terms of it's explosion

Suddenly every man and their dog has a slack room…

Journeyman Geek

8:20 AM

@RоryMcCune A bunch of comms room regulars moved there too

Barry Carlyon

I'm not sure why there is a benefit to it really when compared to a StackExchange chat room myself

Rоry McCune

@BarryCarlyon yeah the only benefit I can see is better mobile clients and IRC integration

Adi

@M'vy So far, it seems like a spam thingy

Journeyman Geek

You don't want to be on stackexchange, want some privacy, and don't want to run it yourself.

Rоry McCune

so it's easier to participate on the move

Barry Carlyon

8:22 AM

Indeed. Slack is just a nicely wrappered IRC bouncer at heart. A bouncer for those who can't get one

Journeyman Geek

SE has a pretty nice unofficial mobile chat client

Rоry McCune

@BarryCarlyon and it's worth $2.8 B !!

@JourneymanGeek for android only

Journeyman Geek

True ;p

Rоry McCune

watcha @deed02392

Adi

I applied for this SecurityHQ thing a month ago, still haven't heard anything from them

Barry Carlyon

8:23 AM

Their charge struture is per user. But you don't get that much for the money.

Adi

Assholes :(

I'm probably not cool enough

Barry Carlyon

Since the largest thing you get is infinite chat log. Just add you own IRC bot to log for you…

You lose the edits but meh

Journeyman Geek

github.com/Canop/miaou

Rоry McCune

@JourneymanGeek quick spin up some instances on AWS, get a hipster logo and claim your billion Dollar valuation

Barry Carlyon

is a slack user It's nice for Twitch moderation teams since avoids the traditional skype and possible IP leaking.

Journeyman Geek

8:26 AM

lol

You guys know the funny thing about slack?

Its an offshoot of this en.wikipedia.org/wiki/Glitch_%28video_game%29

Barry Carlyon

prepares to giggle manly

ha lol

Adi

Okay, I need to stop looking at the Hot Questions for a while

7

Q: Sexy desktop wallpapers in the office

A colleague uses a wallpaper manager which cycles through his collection of desktop wallpapers, a seemingly unending collection of tattooed women in lingerie. There is no nudity but the images are definitely sexualised in that the models all have large breasts, pouting or touching themselves, yo...

Rоry McCune

@Adi I'd avoid workplace.se if I was you :)

Adi

@RоryMcCune Currently, there's no way to filter out sites from the hot questions list

Rоry McCune

@Adi yeah but you could not click on any hot questions from that site :)

Adi

8:32 AM

Really?! :|

It's like you don't know me

a title that has "sexy" in it and you want me to not click it

Haa! :D

Rоry McCune

@Adi heh

Rory Alsop

I'm vaguely browsing... I have men ripping out and replacing windows at home today (no, not with Unix) so I'm enjoying the sunshine and being impressed at their speed

But now @Adi has me onto Workplace I may get stuck for a bit over there

Journeyman Geek

heh. My wallpaper's my dog ;p

Rory Alsop

Mine is from one of @tildal's pictures over on Space. The Sombrero galaxy

Adi

@RoryAlsop Link?

M'vy

8:38 AM

@RoryAlsop space.se?

Journeyman Geek

(some of my co-workers have dogs, and well, I never actually see my desktop anyway ;p

Arperum

I don't even know... whatever it was when I got this laptop.

Rory Alsop

Yes. space exploration SE. Or as I like to call it: S.Ex.Se :-)

Arperum

Windows logo it seems. I never see it anyway.

Adi

My wallpaper:

Arperum

8:39 AM

@Adi That's pretty dark.

M'vy

@Adi impressionist ?

Barry Carlyon

My wallpaper: d2x0df1ouqk3w0.cloudfront.net/portal%20wall%20paper.png

Journeyman Geek

Black on black. With black highlights.

Rory Alsop

I'll get a link later @Adi - it was a 65 Mb file I think

Adi

@Arperum My eyes like it. Very dark, but not fully black.

Rory Alsop

8:40 AM

Most of my wallpapers are Hubble pics, with the gamma cranked right down so as to not obscure things

Adi

@M'vy Convenient

@BarryCarlyon I like it

Journeyman Geek

That's my home wallpaper

Barry Carlyon

I know a few artists and thats one of their works

Arperum

@JourneymanGeek image not found.

(until you click it anyway)

Adi

@Arperum Yay for embedded hotlink protection

Barry Carlyon

8:43 AM

@JourneymanGeek that is nice

I usually run with works logo but white on black. But it's always dark/black

Adi

area51.stackexchange.com/proposals/62814/sexuality/63671#63671

Journeyman Geek

Pretty certain that won't make it into beta.

Adi

I suspect so

Rory Alsop

It never dies

This must be the fourth attempt

Adi

I'm really really against Stackoverflow sites in languages other than English.

Tinned_Tuna

9:08 AM

@Adi how come?

Adi

English is the de facto lingua franca in our modern world

It's even more true in the world of IT

and especially programming

The whole idea of StackExchange is to have the first page of Google filled with the answers you need for the questions you have

Arperum

@Adi Maybe programming and the like, but it's not the most spoken language. That's still one specific version of Mandarin.

Adi

Now if people start forming those isolated communities on a network like StackExchange, more valuable content will be hidden away from the rest of us

@Arperum Lingua franca != most spoeken language

Gilles

@Adi Are you prepared to give up all your computer equipment that runs code written by programmers who cannot write a sentence in English?

Arperum

@Adi Don't latin me. I'm not good at that.

Tinned_Tuna

9:12 AM

I don't think it's fair to exclude people who don't know English.

Adi

@Gilles I'm sorry, I don't think I understood what you're trying to say

@Tinned_Tuna Those people should start learning English

CodesInChaos

When I started with programming my English was close to non existent, so it was nice to have German resources available.

@Adi Which takes several years.

Adi

@CodesInChaos So very not true

Without having at least a basic working knowledge of English, you cannot expect to be a good programmer who is familiar with latest technologies

Gilles

@Adi That's a blatant fallacy. There won't be less content for English speakers, because the new content will be produced by people who cannot produce content in English.

Adi

Japanese can take several years to learn, something similar for Arabic, and maybe Finnish.

CodesInChaos

9:14 AM

Of course you should to learn English at some point, but I only got decent at English when I was 14 or so.

Adi

but English, oh no

Gilles

@Adi Again, that is completely wrong. There are millions and millions of programmers who do not speak a word of English.

Adi

@Gilles English content won't magically disappear when there's more non-English content. I didn't say that. Please don't twist my words

Isolation will encourage non-English speakers to stay away from the more diverse pool of knowledge in English

The pool in which we're currently swimming

Right now!

CodesInChaos

@Adi I don't think English is easier than say Japanese in general. It's mainly easier if you know other European languages, because the grammar of those is relatively similar.

Gilles

@Adi Then why are you against the existence of non-English content? It won't take anything away from you.

Letting others have good things doesn't take the good things away from you.

Adi

9:17 AM

@Gilles The formation of isolated communities in our very connected world will rob both English speakers and non-English speakers from potentially valuable knowledge

This isn't just about me (as an English speaker)

CodesInChaos

I started with programming around the same time I started learning English. At least for the first several years I strongly preferred German resources.

Adi

Non-English speakers (by being encouraged not learn English) will miss out on the valuable knowledge available only in English

CodesInChaos

I don't think it's a good idea to say "don't learn programming until you know English"

Adi

@CodesInChaos I agree. That's why I said you can't expect to be familiar of the newest stuff in the IT world.

Gilles

@Adi Non-English speakers already do miss out on the valuable knowledge available only in English. And they aren't going to learn English, what a weird assumption.

Now as a strategic matter, it does make sense for us non-Chinese speakers to discourage Chinese people from using Chinese, because by the time we retire, we may be crippled by our lack of knowledge of Chinese. But I don't like this kind of aggressive behavior.

Tinned_Tuna

9:21 AM

@Adi you're basically saying: to be a part of this community, you must be fortunate enough to have had English tutoring/learning resources/etc. made available to you.

CodesInChaos

@Adi I don't think the newest stuff matters that much. It takes several years until you see if it'll get abandoned in favour of the latest far or become important. I'd worry more about the niche stuff on which information is rare, even in English.

Adi

@Tinned_Tuna Or that you have a TV, or access to YouTube

Tinned_Tuna

Yes, those are things which a lot of people don't have great access to.

Adi

Many of us, including me, learned a lot of English just by watching English cartoons

@Tinned_Tuna Sooo.. they have access to Stackoverflow but not YouTube?

Tinned_Tuna

YouTube famously found this when they optimised their site for low bandwidth consumers.

@Adi yes, low bandwidth /= no bandwidth.

There's also a cost to bandwidth in a lot of places.

Adi

9:24 AM

@CodesInChaos I guess I very much agree with that statement

Tinned_Tuna

if you are lucky enough to speak English well, you are permitted to enter the community.

CodesInChaos

@Adi Learning a language only by media consumption is pretty impressive, especially if you aren't a young child anymore.

Rоry McCune

@CodesInChaos depends on whether you are looking to be employed by some of the larger "hipper" companies. for them lack of knowledge of new things would be frowned upon I'd expect

CodesInChaos

Personally I don't like relying on fancy technology. A good programming language and a database are central. Everything else is just peripheral libraries.

Adi

@Tinned_Tuna Come on! "Lucky enough"! English isn't such an elitist skill that only the privileged few know.

Arperum

9:29 AM

@Adi You'd be surprised.

Tinned_Tuna

@Adi @Arperum is right -- there are plenty of places where learning English is a privilege afforded to the wealthy.

Rоry McCune

@CodesInChaos sure if you can avoid all the froth of new things, that's likely good, but in some circles it's unavoidable

as a tester I have to have a decent awareness of 'em in case I get asked to test them

which unfortuately includes JavaScript <shudder>

Adi

I really don't get it. I grew up in a poor family in Syria, and yet I learned good enough English to get myself started on reading actual books in English which boosted my knowledge.

Shortly after that, watching YouTube, reading Wikipedia, and watching American and British TV shows taught me a lot about spoken English

Tinned_Tuna

I was lucky enough to be able to learn English, therefore everyone is lucky enough to be able to learn English!

Adi

and I don't consider myself and very smart person when it comes to learning Languages

@Tinned_Tuna Uhh.. luck luck luck

Any good thing that ever happened to anybody is now luck

Fine.

Arperum

9:33 AM

@Adi Because you had the will and power to do so.

Gilles

@Adi how old were you when you started?

learning languages gets harder with age

Adi

@Arperum I guess I was lucky to have the will and power.

Hey, I guess all of our knowledge that we have now (talking to people in this room) is just because we're lucky

Tinned_Tuna

@Adi yes.

Adi

@Gilles 4-5

Tinned_Tuna

@Adi we are extremely fortunate to have this ability and resource.

Gilles

9:37 AM

@Adi So I concur with Tinned_Tuna: you were lucky to be able to start on English early.

If you'd started at 15 you'd probably be struggling.

Tinned_Tuna

I was fortunate to be born white, male, in the UK, in an area with good schools, so that I was lucky enough to go to a good university and I was lucky that I wasn't ill during my time at university. I am incredibly lucky by any standard. The fact that others overcome adversity to get to the same position does not mean that we should perpetuate that adversity. If anything we should recognise our own good luck and use our position to help those with a worse starting position.

Adi

Well, I guess that's one element of beauty in our world. We have so many different people with so many different views on life.

Rоry McCune

forums.theregister.co.uk/forum/1/2015/04/26/… <-quality insult

Rоry McCune

10:09 AM

BTW if anyone is looking at the Win10 preview there's a load of improvements in the console app but you need to disable the legacy mode in properties (on by default) to get them working

Barry Carlyon

10:49 AM

@RоryMcCune that IS a good one

Stack Exchange

Although right now I'm more excited about ESPRESSO's radial velocity measurements, so I'm listening to This Kiss, her song about measuring "centrifugal motion" on "a rooftop under the sky".

Tinned_Tuna

I like the recent "What If?"

Which (as the article points out) is summed up by "Are spiders closer than the sun is big" :-D

Lucas Kauffman

11:04 AM

security.stackexchange.com/questions/86954/… @RoryAlsop @AviD needs deletion :)

M'vy

flagged

Adi

Any Dutch people?

Arperum

@Adi I speak the language, but live a country to the south of it.

Adi

I'm trying to find some fast way to get from Amsterdam to a nowhere called Gulpen

The train is almost 4 hours. I don't want to waste 4 hours

Arperum

11:21 AM

My quick search on the ns.nl website(official train site thing) resulted in 3 hours (assuming you are travelling today) take a train to Maastricht, and then take a bus from there.

Gilles

@Adi near Maastricht? That's about as far as you can get from Amsterdam while still being in continental NL

Adi

@Gilles I wasn't able to find any flight form Amsterdam to there

Gilles

I doubt you'll find anything quicker than the train (and not insanely expensive like a private jet)

Adi

Yeah, you guys are right

I'll take a train

Gilles

It's too short for a flight. A flight takes a minimum of 4 hours to go anywhere.

Does NL even have domestic flights? It's a small country

Arperum

11:24 AM

I've never heard of these anyway. Belgium doesn't have them IIRC, but Belgium is way smaller.

Lucas Kauffman

11:44 AM

@Adi what are you going to to do there? Smoke weed?

Adi

@LucasKauffman Of course

and visit some friends who are refugees there

Lucas Kauffman

@Arperum domestic We have domestic flights from Oostende to brussels for instance

and brussels to charleroi

@Adi from Syria?

Adi

Jepp

Lucas Kauffman

@Adi Be careful though, everyone who is from Syria is being monitored

Adi

@LucasKauffman Well, umm.. I am from Syria :D

Rоry McCune

11:47 AM

@LucasKauffman @Adi already gets "randomly screened" whenever he travels..

Adi

and I don't mind being monitored. I got nothing to hide, baby. As long as I don't get anally inspected, I'm good

and what @RоryM siad.

I ditched the option of growing a fashionable beard ever since I came to Finland

Arperum

@LucasKauffman Do we? I didn't know that.

M'vy

@Adi Do the chance of being randomly screened increases with the beard length?

Arperum

@M'vy Longer beards are known to cause terrorism.

Adi

@M'vy Not in my case, I don't think so. Carrying a Syrian passport already gives you the terminal velocity of "random" inspection possibility.

Lucas Kauffman

12:14 PM

@Adi Do you know unexpected jihad?

Arperum

@LucasKauffman Wouldn't that make it expected?

M'vy

schneier.com/blog/archives/2015/04/the_further_dem_1.html

Lucas Kauffman

We're Not Aiming For The Truck (Original Video)

►

/cc @Arperum

Arperum

@LucasKauffman rofl. Offensive jokes FTW!

Simon

Is md5 checksum the most effective (processing-wise) way of confirming that 2 files are identical?

False positives are more or less an issue (it would be for audio files).

Rory Alsop

12:28 PM

@LucasKauffman done - sorry for the delay.

Rоry McCune

@RoryAlsop you deleted @AviD ?!?

Rory Alsop

pfffft

Simon

rip ovid

Lucas Kauffman

@RoryAlsop This delay is unacceptable. I expect a maximum RTT of 10 minutes

Rory Alsop

@LucasKauffman I had no windows

and until the one was finished I couldn't sit in my office

Adi

12:41 PM

@LucasKauffman Hehehe.. I do :D

@Simon Is security in the picture?

i.e. are you dealing with an adversary? Or is just that you want to make sure that some files are/aren't dupes?

Simon

@Adi The latter, yes.

Adi

@Simon If you have a ready implementation in MD5, go for that

Otherwise, CRC-32 is damn fast

Simon

@Adi I don't have anything implemented yet so I'll definitely check out CRC-32. Thanks!

Lucas Kauffman

@RoryAlsop what happened to the windows :p?

Adi

@Simon What's your preferred lang?

Lucas Kauffman

12:45 PM

@Simon or SHA3 if you want to be hipster

Simon

@Adi That would be a Python project.

Adi

@Simon Boom matteomattei.com/how-to-calculate-the-crc32-of-a-file-in-python

Simon

@LucasKauffman supa hipsta

Rory Alsop

@LucasKauffman they were old - needed replacing

Simon

@Adi Legit as F, cheers.

Lucas Kauffman

12:46 PM

@Simon pypi.python.org/pypi/pysha3

D:

Simon

I guess I'd need to do benchmark tests.

Lucas Kauffman

@RoryAlsop you did get those cool windows with liquid crystals so you can turn the window white for privacy?

Adi

@Simon No hash algorithm will beat CRC-32.. because it's not a hash algorithm

Simon

@Adi Then it is settled, woohoo!

Lucas Kauffman

Rоry McCune

12:48 PM

@Adi unless you have an ASIC that does that hash algo :op

Rory Alsop

@LucasKauffman no, because I am not a millionaire

Adi

@RоryMcCune :|

Rоry McCune

@Adi never say never :)

Lucas Kauffman

@RoryAlsop Ah it's not your $large_bank office?

Rory Alsop

@LucasKauffman nah - home:-)

Simon

12:51 PM

@Adi Integrity-wise, what's the matter with CRC-32?

Lucas Kauffman

I'd build myself a nice office with telly screens for monitoring, blinding windows, bose surround sound, an espresso and grinder machine

Adi

@Simon Tell me your concern in English

Rоry McCune

@LucasKauffman we're getting new home offices at the moment :)

Simon

@Adi LULZ

Rоry McCune

converting our garage

Adi

12:52 PM

You're worried that ... will happen.

Simon

@Adi Why isn't it the standard over md5?

Rоry McCune

@Adi simon est préoccupé que la collision pourrait ruiner sa journée, mais il est également préoccupé par la vitesse de l'algorithme qu'il nous.

M'vy

@Simon because CRC32 is a control code, not a hash

Adi

@Simon Because, like I said earlier, they're two different algorithms for two different purposes. CRC is for error checking, to make sure that a file has been transferred over network correctly

"file"

Simon

Ahhh.

Adi

12:54 PM

You check the file before you send it, and you check it after it arrives. If CRC is the same, then the file has arrived successfully

Which means it also works for checking if you have two copies of the same file

Simon

Which also means that I can deal with 2 issues with the very same algorithm. Legit.

Adi

@Simon and MD5 can do the same as well. It's just that CRC is a lot faster

M'vy

CRC are a mean to detect (and eventually correct) errors of transmission

Simon

Yeah, in this case I need speed.

SPEEEEED

Adi

Now, if you only want to check two files a time, and you're not processing 1 million files in batch, then MD5 is also good

and you have audio files that aren't bigger than, say, 100mb

then MD5 is good as well

Simon

12:57 PM

It would be X files of Y size.

X being a music library, Y being a track.

Adi

and how often you do the check?

Every time you add a new file to the library?

Simon

Yes.

Adi

Hmm.. then CRC might not be the best option

Simon

You could also select a folder instead of a single track, which would be convenient.

Lucas Kauffman

@RоryMcCune nice, are you getting the tempered glass

Simon

12:58 PM

Oh.

Adi

@Simon Will you have some sort of a database?

I highly recommend you cache the hash/checksum values instead of calculating them every time

Rоry McCune

@LucasKauffman nah there's not a lot of potential for people peeking into my office apart from perhaps badgers and Pine Martens..

Simon

@Adi Very good idea, indeed.

Lucas Kauffman

@RоryMcCune honeybadgers :o?

Gilles

@Simon what about reencoded files?

Lucas Kauffman

12:59 PM

@RоryMcCune but an espresso machine?

Rоry McCune

@LucasKauffman I do hope not! Although the non-honey variety that we have here are kind of similar

Simon

@Gilles Too bad, you would have a duplicate in your library.

Rоry McCune

@LucasKauffman well we already have a nespresso and a filter coffee maker :)

Lucas Kauffman

@RоryMcCune nespresso

what else?

Rоry McCune

@LucasKauffman well some of the local coffee hipsters ( @AviD )would look down on such things

Gilles

1:01 PM

5

A: How to find (and delete) duplicate files

If your deduplication task is music related, first run the picard application to correctly identify and tag your music (so that you find duplicate .mp3/.ogg files even if their names are incorrect). Note that picard is also available as an Ubuntu package. That done, based on the musicip_puid tag...

Lucas Kauffman

@RоryMcCune nah, I love coffee, Nespresso is still one of the better mainstream coffees

Simon

@Gilles Interesting.

Lucas Kauffman

@RоryMcCune India Origins Ristretto

Rоry McCune

@LucasKauffman yeah I'd agree, realistically I'm not going to go to the hassle of a "real" espresso machine very often, whereas nespresso is easy enough to be used a couple of times a day.

@LucasKauffman yeah some of the fancy ones are quite nice..

M'vy

@Simon you want to detect dupes?

Simon

1:03 PM

@M'vy Yes. Basically, if it's the very same track but with a different name, I want it to be flagged as a dupe.

If it was converted into another format, then it's not a dupe.

(in my design)

M'vy

@Simon then CRC are not the way to go.

Simon

How come?

Adi

@Simon I just explained it to you

M'vy

They are not concerned with the uniqueness of a file. Hashes are

Adi

If you only have one file and you want check it against another file to make sure they're/aren't the same, then CRC is good

M'vy

1:05 PM

Both can assess a file has not been modified for a given file

Adi

but if you want to compare files against a library of files, then CRC is no go

Simon

Alright, I get it now.

Rory Alsop

@LucasKauffman I have a Tassimo

M'vy

That's part of why hashes are slower than CRCs.

Adi

Umm.. for some reason, I was just accepted into SecurityHQ

M'vy

1:09 PM

@Adi Seems fishy :)

Adi

Oh my god! It's awful!

It's like a shitty version of the DMZ

Simon

I'm not a fan of Slack for some reason.

Gilles

@Adi what is it?

M'vy

> a shitty version of the DMZ

:)

Well, basically it seems to be a community for security <insert something here> wanting to discuss topics. I guess.

Thomas Pornin

@Adi On some architectures, MD4 is reputed to be even faster than CRC-32 (it is cryptographically broken, but not as much as CRC-32 which never offered cryptographic security to begin with).

Adi

1:22 PM

Yeah, it got a lot of hype on Twitter a month ago, so I signed up

Today, after we discussed it here, I was accepted

So this makes me think that we have people from here there as well

M'vy

@Adi or it's just a huge coincidence :)

CodesInChaos

2:34 PM

@Adi I'm not sure if CRC is that actually fast.

@Simon Does it really matter? Unless you have a RAID, you should be IO bound, not limited by crypto performance.

Simon

@CodesInChaos When users would upload their tracks, that's where the check would be done.

Wait, I can't actually do the checksum if I haven't downloaded the file.

Right?

CodesInChaos

Depends on context. The server could publish the hash.

Simon

Consider the case where the user has a web page, then selects a local folder to upload to the server.

CodesInChaos

You could either send the hash to the server prior to upload, which then checks if it already has the file.

Or you could download the list of all hashes the server has, but if the server has many files, that quickly becomes infeasible.

Simon

Who would be responsible of producing the hash of the track on the client-side?

By "who" I mean what are my options?

It has to be able to read a local file without uploading it to the server, so JS could do that?

CodesInChaos

2:43 PM

The client side program. If it's a web application, you probably can use the javascript File API for that. But I'm not sure if you can select a whole folder, or just individual files.

Tinned_Tuna

@CodesInChaos there's some interesting data structures one can use to facilitate that and minimise bandwidth used.

Thomas Pornin

@CodesInChaos It depends on implementation and architecture, but CRC-32 is usually on par with MD5. MD4 can be somewhat faster (especially on non-Thumb ARM CPU where 32-bit rotations are "free").

Simon

@CodesInChaos Alright, fair enough.

Thomas Pornin

CRC-32 wins again on very short inputs (less than 64 bytes).

CodesInChaos

But if simon wants to hash in javascript, that might affect relative performance.

Thomas Pornin

2:45 PM

@CodesInChaos (Unrelated question) Do you have heard of any attempt at implementing DES / 3DES in constant-time ?

CodesInChaos

No

Thomas Pornin

Specifically 3DES in CBC mode.

Simon

@CodesInChaos And I assume that's pretty much my only option, since I don't want to upload the track to the server if it's already there.

That's a waste of bandwidth.

And time.

Thomas Pornin

The bitslice implementations can be quite fast but they need 32 to 128 parallel instances, which works for CBC decryption but not encryption.

Rоry McCune

@Simon jsperf.com/md5-shootout/7 <-- JavaScript MD5 shootout.. trivia point @paj28 wrote the top implementation on that list..

Simon

2:50 PM

@RоryMcCune Awesome, thanks.

Transcript for