The DMZ

It means "I do not know what I'm talking about, I'm suffering from the Dunning–Kruger effect. Once everything has a NFT, then everything will be a NFT and the blockchain is complete. Once the blockchain is complete, everything will be solved."

yep! but it's like using javascript to change the hardware so you flash a light at the case later and change a bit on memory

Finalists for Password Hashing Competition have been announced: password-hashing.net/candidates.html

It's not a classic XY-problem, it's a quadratic XY-problem where X is another XY-problem.

I think the worst "question" was like "Is my neighbor spying on me with a camera?" and it was just an Ikea lamp on a desk

Essentially, the CRTM (Core Root of Trust for Measurement) aka BIOS boot block is a read-only portion of the BIOS which simply passes a hash of the BIOS to the TPM which stores it in PCRs. Then the PCRs are extended as the next hash is added (for PCI option ROMs, other firmware config stuff, MBR, bootloater, etc.). Then the TPM can "unseal" if the hash at the end matches a desired value. The unsealed content is what proves the computer has not been tampered with. See Qubes' Anti-Evil Maid.

anyone posts star wars spoilers and they're on a one way trip to kicks-ville courtesy of my mouse :)

github.com/zhuowei/nft_ptr

Why does someone have to come to every HNQ and suggest security by obscurity as useful?

What's with this religious defense of Gibson?

HNQ should be renamed to "trollbait"

room topic changed to The DMZ: ' DROP Table Morotorium;-- [donuts] [double-entendre] [food] [libations] [rory] [security]

"The DMZ -- for otherwise intelligent people"

Who is just randomly starring stuff?

obligatory "tinfoil hats can actually amplify the feared signals" hacks.mit.edu/Hacks/by_year/2005/tinfoil_hats

No calendar, no zero days.

Behold, our ursine overlord, the bear Thomas Pornin himself, has created and published BearSSL, an ultra-portable implementation of SSL/TLS with a small memory footprint and many constant-time implementations!

@MechMK1 The community really needs to decide if they want to review and evaluate every rando's algorithm. If it was me, I would create a requirement that every such question about a practical application of password hashing in a live environment must include how it is superior to Argon2 and why they need to roll their own. It seems to me that once people learn there is a standard approach, they might simply back off.

@kalina I kissed a girl with cherry and chocolate chapstick. It was very nice. Like kissing a black forest gateaux

usenix.org/system/files/1401_08-12_mickens.pdf

Let it be noted that @Simon was yourmommed by @ThomasPornin himself. The only ostensible adult here.

and it's proven time and time again that drm stops the user from using your software, not the pirates from pirating it

@RоryMcCune Star 8 people and you get hat.

I believe that we replaced planned obsolescence with "scheduled obsolescence"

Every time I open the chat it's either forest asking something nobody can answer or Joshua telling how old he is :-)

If the asker used the wrong terms, I provide them with the more helpful terms and check the search results to ensure there are rich hits and ask them if the search term put them on the right path. (and then close it on the basis that the question is too local for the asker, but they ultimately got what they needed)

I'm still working on the rule-of-thumb that if I can find an answer on Google in less than 2 minutes (and I time myself) using the keywords from the question itself, that it gets closed for "lack of research effort" (and that might be a euphemism for "lack of basic search skills" in some cases).

o

3 times a week, a whole army of nerds reading xkcd slap their foreheads and say "why didn't I thought of this before?"

Pretty much everything starred on the DMZ is crap.

@schroeder tbh, On 2 of the 3 sites I'm mod on it gets you a year off

Oh my god. TLS is exactly like dating. First you start with something polite, maybe a handshake. Then you get to know each others preferences. Next, you exchange numbers. Finally you start communicating with each other.

LEEEEEEEEEEEERORRRRRRRRRRRRRRY ALSOP

@Jacco The biggest security issue is probably not CBC or CFB, but PHP.

#BanStefan

@schroeder The solution to handling bias should not be introducing a new bias, which is what a lot of people do. On the other hand, a system like removing the names of people is completely fine.

Voting should go like this: @ThomasPornin selects someone. We all shuddup & @Simon sends us all donuts. Everyone is happy. The End.