oakenshield

Joined 16 years ago

Karma
150
Submissions
79
Member since
Feb 22
Networking and security researcher & (former) YC founder of a data security startup, http://documents.me. Now working on security stuff at Facebook.
View on Hacker News

Recent submissions

Comment · 11 years ago
I started enjoying Netflix more when I realized I shouldn't be looking for stuff I knew of from elsewhere, but rather explore titles, rate, and help their algorithm to suggest things to me. Has been working out well so far - I got into an area I didn't think I was interested so far (superhero series).
Comment · 11 years ago
Likely they're holding their cards close to the chest as it's a competitive market.
Comment · 11 years ago
My 2 cents: many file systems do not have a file locking feature that can enforce file locking. In unix-like systems, file locks (e.g., lockf(3)) are "advisory" rather than mandatory, meaning it's up to the higher-layer apps to check whether another program has locked a file and voluntarily stop.

Any apps that do implement this feature likely do so by making the original file read-only and having the first app that opens the file work on a copy. However, I think Windows may have a mandatory file locking mechanism.

Comment · 13 years ago
Congrats Navneet, Mehul, & team!
Comment · 13 years ago
Speed is one concern but far from the main reason. You couldn't use a typical-length RSA key to encrypt a large chunk of data because there's a max input size for any given RSA key size. Standard block/stream cipher modes of operation are defined only for symmetric key ciphers.
Comment · 13 years ago
alt+. does the same thing as well, and is slightly easier to type.
Comment · 13 years ago
Speaking for the Bay area, public transportation here is shockingly bad, even for something as routine as getting to the airport. For someone living in the valley to get to SFO (about 40 miles), a taxi can cost anywhere from $50-$80, and the public transportation alternative takes anything between 2-2.5 hours, 1 bus, 3 trains, some distance walking with your luggage, and about 15 bucks. Oh, I forgot to mention that trains are once an hour, and there are a total of 3 distinct operators for the bus and train systems who are totally uncoordinated with each other.

Not surprisingly, most people who value their time prefer making a 35-minute drive at their convenience, and paying about $12-$18 per day of parking.

Comment · 13 years ago
Comment · 13 years ago
Which book did you get? Curious to find out what's in it.

> ... so disadvantageous in an evolutionary sense? Environmental factors (such as staring at a computer screen...)

Well if you're arguing that it's a nurture thing, there are plenty of us who had bad vision at childhood, right from before the dawn of the computer age. You could say that it was not computer screens but books that caused it, but how far back can you make this argument? Any sources for this claim?

Comment · 13 years ago
Correct. I didn't mean slow implementation, I meant slow enough on modern hardware using the fastest implementaiton.
Comment · 13 years ago
I may not understand the whole context, but if you're using PBKDF2 for key derivation, you don't want to use something that works "fast". You want whatever algorithm/iteration combination that is as slow as possible [1], but not too slow that it annoys the user.

[1] on modern hardware, that is.

Comment · 13 years ago
> I wonder if the C implementation is much faster

Very likely -- Run this on your machine and see if it improves things http://stackoverflow.com/a/9781943. I got about 18.6s for your python code while this one with a 16 byte salt and 250k iterations runs in 0.6s.

OWASP recommends over 100k iterations too: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet...

Comment · 13 years ago
I've been thinking about this very problem---recovering a forgotten encryption password without trusting a third party. The state of the art seems to be

1. Print it out on paper and put it in a safe. This is somewhat annoying and inconvenient for the vast majority of users, and if you lose or don't have access to the paper, you're screwed.

2. Encrypt the password using answers to some security questions and store it with an online provider you marginally trust. This has the problem of reducing the security to the strength of your answers (which may be known to any number of people close to you), and people might even forget the spelling of their answers which puts them in the same pickle.

I feel what would be ideal is some sort of a question/challenge that evokes a consistent, unique, high-entropy response from the user but the response is not based on a fact... sort of like a Rorschach test, perhaps, but one where each user would have a unique response. Is anyone aware of some system/research like this?

Comment · 13 years ago
I've read a few bits and they're all great one way or the other, primarily because chapters on specific projects are written by their primary authors. A couple of good ones

Nginx: http://www.aosabook.org/en/nginx.html LLVM: http://www.aosabook.org/en/llvm.html Sendmail: http://www.aosabook.org/en/sendmail.html

Although this means there's no consistent style across chapters, it's really something else to hear about the architectural and design decisions that the author made, and how they look back at those decisions now (esp. in the Sendmail article).

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton