@RoryAlsop Does your company apply the Rory test? 1) Have you followed me on Twitter. 2) Have you liked my band's Facebook page. 3) Have you been to one of my concerts? 4) Do you own one of my albums?
In older times, when someone said "I am being followed", it was understood to be ominous and creepy, and called for retaliatory action (e.g. calling the police).
@Simon No, sunny with a few sparse clouds. We expect freezing next night, but not falling water.
The way it was explained to me is that Québec, being the capitale nationale, had to have the biggest highways and roads, though it is far from having the same traffic as Montréal.
There are daily jams on the two bridges, but most of the time traffic is fluid, and a bit of snow does not imply chaos because there is room to drive around stalled cars. Plus, the bus never stops for anything, and maintains a snow-free corridor.
A contrario, there is a 3cm snow fall about once every other year in Paris, and it does imply Armageddon (all public transportation stops, hundreds of kilometers of jams, people blocked overnight in their cars, and people clamouring for the mayor's head at the end of a pike).
Now that school's back, it also looks like bad drivers came back to work. I don't remember driving through a car crash once this summer and it's happening at least once every week now, sometimes twice a day.
@ThomasPornin Yeah I heard about that on the news, that's kind of sad.
It is good that people support SHA-256. Planning actual removal of SHA-1 support in 2016 or 2017 is harsh, though.
I deem it probable that Microsoft and Google will backpedal at some point, and not really remove SHA-1 support for X.509 certificates at that date.
It is worth noting that though MD5 collisions can be produced in less than 1 second on a PC, leverageing these collisions into actual colliding certificates two several months of computations, and require the CA to use predictable serial numbers.
In that sense, even MD5 is not really "insecure" for certificates, if the involved entities (CA) apply some care (and, in any case, you want the CA to be careful, by construction).
SHA-1 is very far from the level of brokenness of MD5, so it is even safer.
> Coming back to Scotland, it'll be funny if it came out that the fate of a United UK depended on a large number of inebriated beer-swigging Scottish voters.
@ThomasPornin heh, well the ways it's if there's a no vote there'll be discomfiture aplenty in westminster as the party leads try to deliver what they promised without actually getting the backing of parliament
@LucasKauffman Yes, something like that. There are devious question, like the one where they ask you whether "Canadian constitution guarantees you the right to own several wives". I don't know what happens if you answer "yes" to that one.
@RoryAlsop No... the form was in French (I could get the English one, though, if I had wanted, because Canadian constitution does guarantee plurilinguism).
"moose (plural moose or mooses or meese)"
The moose has no less than three accepted plurals.
Scientific studies have concluded that polar bears do look at humans as possible preys, but consider them tasteless when compared to seals.
(I don't exactly know how they can conclude that without making experiments involving repeatedly presenting seal meat and human meat conjointly to polar bears.)
I'd love to see the comments from the ethics committee on that one.
Where I am in the US, health care providers refuse to send anything through email (e.g. even something as trivial as an appointment reminder). Often they claim that email is not secure.
Instead they will send me information (e.g. appointment reminders, messages from my doctor) through voicemail...
Oh c'mon a downvote? Really? I still can't find any confirmation that Dream Chaser indeed integrates LES into its body, plus, it makes me wonder why did I even bother. There was no publicly available information on the contrary at the time of writing this. Just ask for deletion next time and I'll be glad to oblige if and when it proves wrong. Thanks! (BTW it's not about reputation, I could care less about how many fake internet points I have, but I do care about what company I keep - and Space Exploration is supposed to be a community effort, not a conglomerate of each for themselves boffins). — TildalWave ♦22 mins ago
I intentionally used "boffins" because I know that one of BIS (Boffins In Space) downvoted it and upvoted an alternative answer (without even having any evidence either way)
@Xander heh, that's a nice one. I have some <marquee> text in a web server header on my site for all the services that scrape that info. I've caught a couple out over the years not sanitizing it...
odd.. it's the butt-crack of dawn here and there is a lady (neighbour) outside, maybe in her late 80's wearing a bikini.... there is no pool anywhere near here....
@Simon They are going to explain tomorrow. Perhaps as somebody cleverly quipped on Twitter they have "discovered the HSM" or a process that works in generally the same manner. That's certainly what it looks like from the diagram. It isn't really "keyless" is just that the key isn't on their servers.
So, instead, Cloudflare runs all the SSL but, instead of having the SSL private key, they talk to a server which remains on the bank side and does the crypto operation upon request from Cloudflare.
@Simon This is like a HSM, replacing hardware shielding with remoteness.
Basically, Cloudflare says that they don't want to do "security theatre" and then they proceed to do a big piece of security theatre.
The gain, from the point of view of the bank, is marginal: what they get is that in case of attack, the villains may use their private key at will but won't run away with it.
@Xander You could do SSL without verifying certificates. No need for any securely-stored key then. (I banged my head on the wall real hard, then told them to call it “TCP” instead of “SSL”.)
@ThomasPornin it's not so marginal: if they discover the breach, they can stop using the key immediately, without having to wait for revocation to go through and hope that clients do honor the revocation
This means that even if attackers hijack the actual SSL server (on Cloudflare's machines), then, the moment they get kicked out, their power stops. Attackers cannot run away while still being able to impersonate the server or decrypt future connections.
It is similar to the benefits from HSM: they won't prevent attacks, but damage is somewhat contained.
Mind the small print: this protects future connections, not past connections.
See subject. What exactly happened?
These two answers got deleted for no apparent or communicated reason:
What voip client support manual encryption?
Can Skype chat be protected from snooping? Are there safe alternatives?
Both answers are my own original work, address the questions at hand...
Some English adjectives are rather non-intuitive. In my language such form would be perfectly OK and if I meant corruptable or bribable I'd simply add a diminutive prefix to it
hmmm that's interesting, I also thought so at first, then I checked and all the sites suggested it's an adjective with a negative connotation akin to bribable
@CodesInChaos How do those Twitter lists work then? Useful for anything else than merely organizing things around? What does it do if I subscribe to one but I follow all of the list members anyway?
I guess it would add all of its tweets to my feed but since I'd already have them - nothing changes unless you also change the list?
So by subscribing I'm kinda saying I trust your judgement? ... hmmm ....
A bit of a tall order to blindly trust someone that recently admitted to not caring much for beer :P
I want to simulate the process of chain of trust validation locally , I do the following :-
1) signed my zone.
2) unbound installed , but i can not configure it for DNSSEC validation could you help ?
How can i set unbound to see and validate my zone.
How to add my ds to server ?
How to set...
Where I am in the US, health care providers refuse to send anything through email (e.g. even something as trivial as an appointment reminder). Often they claim that email is not secure.
Instead they will send me information (e.g. appointment reminders, messages from my doctor) through voicemail...
See subject. What exactly happened?
These two answers got deleted for no apparent or communicated reason:
What voip client support manual encryption?
Can Skype chat be protected from snooping? Are there safe alternatives?
Both answers are my own original work, address the questions at hand...
I want to simulate the process of chain of trust validation locally , I do the following :-
1) signed my zone.
2) unbound installed , but i can not configure it for DNSSEC validation could you help ?
How can i set unbound to see and validate my zone.
How to add my ds to server ?
How to set...
