bvttf's comments

bvttf | 8 years ago | on: Protecting Against HSTS Abuse

While I'd also like https as a default, that's not going to prevent this tracking if you still respect the intent of HSTS.

If you try https first, and that fails, do you try again over http? Whether or not you'd fallback would leak the same information.

bvttf | 8 years ago | on: How New York's Roosevelt Island Sucks Away Summer Trash Stink

So in summary, the garbage collection is not something that you just dump something on. It's not a big truck. It's a series of tubes. And if you don't understand, those tubes can be filled and if they are filled, when you put your [trash] in, it gets in line and it's going to be delayed by anyone that puts into that tube enormous amounts of material, enormous amounts of material.

bvttf | 10 years ago | on: Hackers and Heroes: Rise of the CCC and Hackerspaces

> What about Maker Faire, HOPE, DEF CON, etc.

OK, as someone who's been to all of these.

The team/cooperation part I think he's referring to is that CCC will have a large area dedicated different hackerspaces/assemblies. So c-base gets a corner that they decorate, as does Metalab, while many smaller hackerspaces will have a ~12-seat table dedicated to their group, where they can put up any cool projects they want to show off.

Maker Faire has something similar, where local groups will get an area to show off. HOPE has had some more topic-based assemblies like TOOOL. DEFCON has workshop tracks and more thematic "events" that happen, like DEFCON Shoot or the bike ride, but not as much of groups of real-life co-conspirators making things happen, with the notable exception of 303.

bvttf | 10 years ago | on: Birds that fear death

Did they do a control test with that mask and no dead bird? That fucking mask might be enough on its own.

/twajs

bvttf | 10 years ago | on: Encrypted database case #1

Any attacker above a script kiddie (where they can/want to make money off you) will have someone not as good as Dennis, but with the skill to do what's demonstrated here.

It's not that different from lots of DRM breaks.

bvttf | 11 years ago | on: USBCondom

I bought a few, the ones I got had a thick clear plastic wrapper that's not in the pictures.

bvttf | 12 years ago | on: TLS/SSL implementation in Haskell

Not him, but I don't think the regular lazy evaluation worry about building up a million thunks and GC hell would be as much of a problem as it being awkward to not have things happen too fast and leave side channel attacks from timing.
page 1