CodesInChaos

general recent conversations

Discussion on question by akinuri: Wh…

Imported from a comment discussion on graphicdesign.stackexcha...

CodesInChaos

Aug 27, 2023 12:11

If you consider that sRGB isn't even a linear scale, the 50% point will not meaningfully lie between 127 and 128 at all.

Discussion on question by ThisIsNicol…

Imported from a comment discussion on worldbuilding.stackexcha...

CodesInChaos

Jun 18, 2021 14:37

You will need physics quite different from our own. You can't grow such a creature from starlight, since 1) creating matter from light creates an equivalent amount of anti-matter 2) the required energy is huge. It's also pretty weird for a species which collects energy from light to be semi-transparent, since you can't collect light that isn't absorbed. Another issue with normal physics is that the bubble of heat will need a medium (e.g. plasma), since you can't just heat vacuum.

The Side Channel

Mostly randomly generated noise. – crypto.stackexchange.com

CodesInChaos

Jun 22, 2018 11:11

@EdwardR.Murrow @Q-Club Are you talking to yourself or do both of you live in the same sanatorium?

CodesInChaos

Mar 29, 2018 13:43

@Q-Club Fine, I'll throw a hammer at it.

CodesInChaos

Mar 28, 2018 13:51

@SEJPM I have a tab open while at work, but answering crypto chat isn't exactly what I was hired for ;)

CodesInChaos

Mar 26, 2018 14:50

@DannyNiu PRF essentially means "keyed hash function"

CodesInChaos

Mar 13, 2018 13:46

@Q-Club HNQ

CodesInChaos

Feb 3, 2018 15:30

@Q-Club I totally agree. They should use comic-papyrus instead. creativemarket.com/benharman/…

CodesInChaos

Feb 2, 2018 10:48

@IlmariKaronen Do you plan on running for mod?

CodesInChaos

Jan 24, 2018 15:35

CodesInChaos

Jan 24, 2018 15:12

@jww Number of key exchanges is not the issue. You'd need a protocol that assumes contributory behaviour, or something similarly weird.

CodesInChaos

Jan 23, 2018 15:56

At that point you might also need to reject points on the twist

CodesInChaos

Jan 23, 2018 15:52

I might add a helper function for checking for low order points to my C# impl, but I don't intend to add it to the basic key-exchange function.

CodesInChaos

Jan 23, 2018 15:36

The whole point validation stuff in libsodium is paranoia, that only applies to very few applications.

CodesInChaos

Jan 16, 2018 15:46

I only know about the parts of libsodium which are the same as NaCl.

CodesInChaos

Jan 6, 2018 21:06

@Zeta.Investigator Any vaguely plausible excuse suffices for launching a new shitcoin.

CodesInChaos

Dec 30, 2017 23:24

@SqueamishOssifrage If the professor enjoys the students getting humiliated, their edits revered and inscrutable abbreviations like WP:NOR thrown at them, sure.

CodesInChaos

Dec 18, 2017 17:11

CodesInChaos

Dec 18, 2017 17:10

And pray we don't suffer a shoggoth incursion.

CodesInChaos

Dec 18, 2017 17:09

I just ignore the existence of the stackoverflow company most of the time, doing what's right for the site.

CodesInChaos

Nov 30, 2017 16:24

Q: How to fairly select a random number for a game without trusting a third party?

Several people are playing a game with random events and require a way to produce a random number. (Such as dice rolls or a lottery.) Can this be done such that each player has the power to be reasonably sure that the random number was fairly selected, without having to trust anyone else? This ...

CodesInChaos

Nov 30, 2017 16:23

@daniel Using third parties is lame. Do it the crypto way.

CodesInChaos

Nov 2, 2017 09:30

Sounds very opinion based.

CodesInChaos

Sep 3, 2017 14:14

@Truthserum I'll leave that to people who know what they're doing.

CodesInChaos

Sep 3, 2017 13:15

Mods can superping even those users.

CodesInChaos

Sep 3, 2017 13:15

@Truthserum You can only ping people who have been in the room recently.

CodesInChaos

Aug 20, 2017 11:01

But it only has 2 rounds, IIRC.

CodesInChaos

Aug 20, 2017 11:00

@DannyNiu yes

CodesInChaos

Aug 16, 2017 13:11

Beware of a potato offering gifts. The van is a trap. :P

CodesInChaos

Jul 20, 2017 17:20

@DannyNiu You can always reduce public keys to ~256 bits if you're willing to increase signature size by the same amount you're saving on the public key.

CodesInChaos

Jul 17, 2017 08:10

Was on HNQ on the weekend.

CodesInChaos

Jul 17, 2017 08:10

The 2way encryption question which received more upvotes than one would expect.

CodesInChaos

Jul 17, 2017 07:56

HNQ, as always.

CodesInChaos

Jul 14, 2017 11:15

(Unless they're talking about quantum-key-exchange combined with one-time-pad encrypted classical information, which is just pointless as long as we have working asymmetric crypto)

CodesInChaos

Jul 14, 2017 11:14

Exchanging quantum states within a large quantum computer makes sense. But doubt it's that useful over the internet.

CodesInChaos

Jul 13, 2017 13:19

@floorcat I can't even think of a use-case for a quantum internet.

Discussion on question by forest: Why…

Imported from a comment discussion on security.stackexchange.c...

CodesInChaos

Mar 19, 2018 08:55

Note that the Opera which made Math.random secure is the obsolete Opera browser, not the skin for Chrome that's marketed as Opera nowadays.

The DMZ

A serious place where infosec is discussed PS we don't do hard...

CodesInChaos

Mar 8, 2018 09:30

@AviD How so? A large part is about psychology and human memorization ability.

CodesInChaos

Mar 6, 2018 14:44

I was never convinced by those lockout tools, assuming you have a key or at least strong password. The risk of locking out yourself seems to exceed the benefit from my point of view.

CodesInChaos

Mar 6, 2018 14:41

The tricky part with paranoid approaches is how you handle the recovery workflow

Discussion on question by Shaheer: Is…

Imported from a comment discussion on money.stackexchange.com/...

CodesInChaos

Dec 22, 2017 15:53

@jamesqf At least if you don't value the privacy of cash.

Discussion on question by Layla: How …

Imported from a comment discussion on academia.stackexchange.c...

CodesInChaos

Dec 20, 2017 02:29

@ThorbjørnRavnAndersen In my experience the group dynamics and incentives are so different between school projects and work projects that the skills you carry over are very limited.

Discussion on answer by Anders: Is it…

Imported from a comment discussion on security.stackexchange.c...

CodesInChaos

Nov 23, 2017 22:53

If it's only read access, I'd consider it bad, but not a big deal. Write access on the other hand is really dangerous since it could be turned into code execution on developer machines and even servers.

Discussion on question by Federico Bo…

Imported from a comment discussion on workplace.stackexchange....

CodesInChaos

Nov 5, 2017 20:23

Are those 45 minutes one-way, or daily total?

Discussion on question by Gray9: If m…

Imported from a comment discussion on worldbuilding.stackexcha...

CodesInChaos

Oct 1, 2017 21:20

I think real-life flat-eathers claim the edge is at the south-pole and has a big ice wall.

Discussion on question by Arseni Mour…

Imported from a comment discussion on security.stackexchange.c...

CodesInChaos

Aug 17, 2017 20:06

@Qsigma Forcing the attacker to wait for your next sudo usually doesn't delay them much.

CodesInChaos

Aug 17, 2017 20:06

@Qsigma Why would that matter? In both cases you're entering your password into an untrusted window (plus the problem that X doesn't even prevent unprivileged background applications from sniffing keyboard input).

CodesInChaos

Aug 17, 2017 20:06

You have essentially the same problem with sudo on the console. In general security on Linux seems to be designed for multi-user systems and not to handle untrusted applications.

Discussion on question by richard: Ho…

Imported from a comment discussion on cseducators.stackexchang...

CodesInChaos

Jul 27, 2017 12:24

@gbr I think a large part of the popularity comes from git comparing favourably to (old versions of) subversion. Automatic rename tracking, not having a .svn folder in every single folder inside the repository (broke my svn checkout quite often by renaming a folder without telling svn), better merging, easy in-place branch switching, a full local copy of the repository...

Discussion on question by gborba: Cli…

Imported from a comment discussion on workplace.stackexchange....

CodesInChaos

Jul 14, 2017 20:15

20$/h is only about 36k$/yr (assuming 225 days of 8 hours each, i.e. about what a full time employee works). If your spoken English is good and you're a competent developer, you might want to try finding a better paying remote job with a US employer.