Adi

@WilliamMariager Your worries are justified. Password managers aren't really built to protect against attacks where a malicious software is installed on the same machine where you use the password manager.

Glad doing business with you

@user5348fh8y5 Perfect. Thanks, buddy. I just received the money.

but I guess that goes well with the level of service you'd provide anyway, so yeah.. suitable price

@TerryChia Beer/h? Unless that beer is Samuel Adams' Utopias, that's too cheap

My hourly rate is 150 euros

@user5348fh8y5 Sure, I can take a look. Would you like my Bitcoin (or PayPal) address to send me money?

by the mere virtue of me stating it

Actually, it's not an opinion - it's a fact.

which is the correct one.

@user5348fh8y5 You don't need other members. All you need is my opinion.

@user5348fh8y5 Terry has no clue what he's talking about

@user5348fh8y5 Link 1 is most secure

😂

Morning

@RoryAlsop Yup. Very disappointing

mornin'

He usually giggles when watching porn?

> I ensure I do not disturb others while watching, by not giggling

@Ohnana Like he sent you an email or something?

Titi?

@Ohnana What?!

@SEJPM Thanks. I'll give them a call tomorrow

@SEJPM Yup, they do. Like I said, this is what I currently do with the OneRNG ("True" RNG)

@M'vy Anyway. PRNG issues are two kinds: Good sources of entropy, and good RNG logic that doesn't fuck up your already good entropy

@SEJPM I'm well aware of FIPS 140-2. Nothing in it regarding exposing RNs

So far you're only talking about standards and how they're supposed to be

So if you can tell me the name of one HSM that I can use instead of OneRNG, I'd be very greatful

@SEJPM I currently OpenSSL fed with OneRNG

@SEJPM Would that work with something like OpenSSL? (it supports outside sources of entropy)

and you don't remember which manufacturer?

Just give me the name/model of this HSM

You're making a claim.

Man, I'm not saying you're not giving correct information.

and I've worked with a few

So far, I've never seen an HSM that exposes the random numbers it generates

Any source on the second part?

@SEJPM Alright, this sounds very good.

If you want a replacement for your PRNG, you don't want something that keeps the generated number/key from you.

and stored

Or are they internally used

@SEJPM Do FIPS certified HSMs give you the random number?

There's a difference between being a scholar for the money & fame, and being a scholar who sometimes gets those as a recognition for his/her efforts and achievements. I don't see why a bright individual as yourself would mix these two notions. While you're the only person who knows what is in your heart, you just appear to others as patronizing and condescending. This is, of course, different from not accepting honors from entities that you deem immoral, for example.

To add to the salary disclosure discussion: In Finland, Sweden, and Norway, you can just walk in to any tax office branch, use one of the available machines, and just type in the name of any person in the country to get their tax info, including paid taxes from which you can deduce salary.

Test

Test

CCCCCombo breaker