tdons
Joined 9 years ago
Karma
461
Submissions
95
Member since
Dec 24
Recent submissions
Comment · 5 years ago
Comment · 5 years ago
In the case of Signal, I imagine people assume all of the following:
1. the protocol between client and server is setup in such a way, even if Signal wanted to store interesting information, they could not access anything interesting even if they wanted to (for example, messages), thus they don't store anything since it's useless
2. the app implements the protocol faithfully and this has been checked by people perusing the source code
3. the binary downloaded from the app/play store phone is compiled from the sources listed on github
Comment · 5 years ago
https://www.security.nl/posting/34165/%22Beveiliging+ING+mob...
> "Het authenticatie protocol ziet er goed doordacht uit. Er wordt niet vertrouwd op SSL of TLS. In plaats daarvan gebruikt ING een extra encryptielaag waarvoor het wachtwoord wordt afgesproken via het SRP protocol. Ook genereert elk mobiel device een eigen profileId en een public/private sleutelpaar", merkt Van den Berg op.
In English:
> "SSL/TLS isn't trusted, instead, ING uses an extra encryption layer the password of which is negotiated using SRP. In addition, every mobile device generates an own profileId and a public/private keypair"
Assuming SRP refers to this https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...
Comment · 5 years ago
Isn’t it strange that you have to make a disclaimer like “please don’t judge me?”. Quite literally 1/2 of the USA voted for Trump, should you automatically be ashamed of that?
(It’s easy for me to say ofc, I have no horse in this race)
Comment · 5 years ago
Why is keeping a chat history important? I don't take notes of IRL conversation I have, they're ephemeral.
Not trolling, honestly curious :-)
Comment · 5 years ago
Christopher Hitchens (a Brit, can we still call them European?) would disagree with you. If you have a few minutes, check the beginning of this talk [1] about free speech. He treats the exact "fire" example at the very start of the talk :-)
Comment · 5 years ago
I speak from experience, unfortunately :)
Comment · 5 years ago
However... it can also trigger new behaviour because programs / services run for longer than normal because deployments aren't being refreshed as frequently as normal.
Comment · 5 years ago
The Von Neumann extractor mentioned in the article is interesting.
There are other approaches too. I once implemented an algorithm to remove unknown bias from a bitstream in a streaming fashion. According to the paper I used their result was theoretically optimal. Check it out: https://github.com/tdons/deskew-bernoulli
Comment · 5 years ago
Define 'secure'?
Comment · 5 years ago
I refuse to believe that people care more about the monetary and legal consequences of killing another person than the moral aspect.
Hypothesis: Dutch drivers are more careful around cyclists primarily because everyone rides a bicycle themselves. Knowing what it's like riding a bicycle in heavy traffic makes you a more careful driver.
Comment · 5 years ago
You primarily watch out because you don't want to kill someone else.
Comment · 5 years ago
It works in Houten, The Netherlands [1]
[1] https://en.wikipedia.org/wiki/Houten
Come visit!
>The design principle of separating cycling and walking from car traffic has been pushed to the limit. Houten is unique in this. Cycling comfort and safety are extremely high (optimal), even by Dutch standards. A large network of bike paths makes it convenient to cycle to various destinations and within the town the bike is the most popular means of transport. > The city of Houten is known as, nationally and internationally, and in growing interest from home and abroad, as the worlds best practical example for bicycle friendliness. A growing number of groups with politicians, developers, designers and students visit cycling city Houten for study purposes and inspiration.
Comment · 5 years ago
I remember hearing about Michael Burry [1] also looking into aquifers and future water shortages.
[1] https://en.wikipedia.org/wiki/Michael_Burry
> Burry has focused much of his attention on investing in water, gold, and farm land. Burry has been quoted saying "Fresh, clean water cannot be taken for granted. And it is not—water is political, and litigious."[20] At the end of the 2015 biographical dramedy film The Big Short, a statement regarding Burry's current interest reads, "The small investing he still does is all focused on one commodity: water."[20]
Comment · 6 years ago
An iron man is a triathlon, you are looking for steelman!
1. downloading the binary
2. jailbreaking the phone to extract the binary (pretty sure this is necessary on iOS)
3. check the version of the binary, then compile the original sources of the version
4. ??? compare the two binaries, this is likely the most difficult part, they won't be identical because of things like codesigning (and build flags, timestamps, ...)
I know noone that does this.