somethingnew's comments

Here's a summary from the Docker perspective https://blog.docker.com/2016/04/docker-security/

somethingnew | 10 years ago | on: Show HN: Hacker News Tab

Source: https://github.com/somethingnew2-0/hacker-news-tab

Besides Session IDs and Session Tickets[1] which already exist in the TLS protocol. He could be referring to the Token Binding Protocol Draft[2] which, quoting from it's summary, "allows client/server applications to create long-lived, uniquely identifiable TLS bindings spanning multiple TLS sessions and connections".

[1] https://en.wikipedia.org/wiki/Transport_Layer_Security#Resum...

[2] https://tools.ietf.org/html/draft-ietf-tokbind-protocol-01

somethingnew | 11 years ago

Not having to worry about calculating the length of the message before transferring it?

somethingnew | 11 years ago

How does it work? Brute force? Rainbow tables?

somethingnew | 11 years ago

My university uses them for file storage and sharing, so I imagine they have many large enterprise clients.

somethingnew | 11 years ago

Has this never been posted before?

somethingnew | 11 years ago

https://www.kickstarter.com/projects/1760935672/android-ciph...

somethingnew | 11 years ago

Running Google Hangouts through Tor would work well as it uses https by default. As long as he's using a throwaway Google account, it seems good to me.

somethingnew | 11 years ago

Exactly, the wikipedia articles for BREACH and CRIME are good starting points if nothing else.

[1] http://en.wikipedia.org/wiki/BREACH_(security_exploit)

[2] http://en.wikipedia.org/wiki/CRIME

somethingnew | 11 years ago

Yes Ubuntu is still vulnerable to 7169, but it looks as if the release has been pushed. http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...

somethingnew | 11 years ago

Reminds me of Square Invoices https://squareup.com/invoices

somethingnew | 11 years ago

http://xkcd.com/978/

somethingnew | 12 years ago

How does this compare to PostgreSQLStudio[1]?

[1]http://www.postgresqlstudio.org/

somethingnew | 12 years ago

According to Adam Langley, a Go contributor, it can still be side-channeled. https://twitter.com/agl__/status/453370970552532992

somethingnew | 12 years ago

Yes, I believe that is the answer.

somethingnew | 12 years ago

That's my question too... There's a reason there's such a thing as a cache hierarchy.

somethingnew | 12 years ago

If you want to see something awesome HP has done "recently" check out this talk on memristors. Other than that I don't know... https://www.youtube.com/watch?v=bKGhvKyjgLY

somethingnew | 12 years ago

Here's a more interesting chart http://bitcoin.clarkmoody.com/

somethingnew | 12 years ago

UW Madison represent! I took the course with this book, not with Remzi though. He is an amazing professor and this book gives a very good introduction to OS, especially Linux OS internals.