I'm more used to working with 1*k* of RAM and 32*k* of code for a sensor node.

32MB? Goodness. I used to run a Sun workstation as a firewall on 4MB!

Rgds

Damon

Goodness.

So that stuff that goes on as part of everyday politics in northern Europe, eg London, is "communism or fascism with corruption, violence, and death aplenty" is it?

Rgds

Damon

I have no keychain. I carry one bare physical key.

Hi

We're working on a project (in public) to try to help secure out-of-the-box links from low-power cheap sensor nodes to the concentrator (or equivalent) in IoT networks.

Eg see:

http://www.earth.org.uk/note-o...
and
http://lists.opentrv.org.uk/pi...

to pick a couple of related items.

Anyone who'd like to help us get this right with solutions open source, please do contact us eg via @OpenTRV on Twitter or email.

Rgds

Damon

And not to drag this out longer than necessary, the problem is not "government" itself, but the details of how it works in each place.

Rgds

Damon

PS. In any case, thank you for the civil discussion!

My point is only that I would not be 'free' to take sensible entrepreneurial risks in the "land of the free" whereas I am under the NHS which is frequently derided from that side of the pond as some sort of socialist (itself a swear word) nightmare.

I'm railing against the "all government intervention" is bad school of thought/kneejerk. The NHS is not perfect by any means, but it happens to work much better and cheaper than the US model from where I'm standing.

LIFE IS NOT BINARY! (Not so catchy to chant in marches though. B^>)

Neither do I think that unending government intervention is a good thing. I am somewhat to the right of centre in UK politics (and just voted, tactically, an hour ago, in our general election).

Rgds

Damon

No, it's:

1) The uncapped costs that might bankrupt me and of which I would have little visibility or control.

2) The whole 'pre-existing condition' mess as I understand it that nukes mobility.

Particularly the second would have been a problem for me whereas the NHS fixes me anyway.

Rgds

Damon

There are various bands of dental treatment charges, but they are not uncapped so far as I know. Haven't needed that much fun.

Glasses, varies. My last eye test was completely free as I was referred by a doctor. I do pay for classes, but if you want to go economy it's pretty cheap and you can probably have glasses prescribed. I'm pretty much in the budget category even variofocals.

In neither case could I be bankrupted by unlimited uncontrolled charges.

Rgds

Damon

Except, over here in downtrodden communist UK (keep an eye on tomorrow's election for us to become ultra-communist under a Tory/SNP/DUP alliance (joke)) guess how much of this rubbish I have to deal with?

1) An occasional fixed reasonable prescription charge, free for my kids.

2) Dentist fees, typically about £20/$30 each six month check-up, for a "scale and polish". Again, free for my kids.

Yeah, it's terrible over here.

As I have often pointed out, I would not be on my 3rd significant start-up if I'd been tried to my first random employer because of a health plan, given one or two exciting health blips over time.

Government is never ever good, ever. Unless it builds Interstates.

Rgds

Damon

GEM? Our bug-fix library on top of GEM was bigger than GEM itself.

Not saying that DOS/Windows was anything other than unnecessarily crap and buggy for a long time... (And it'll still take another decade for me to fully trust Microsoft to write 'reliable' rather than meretricious code...)

Rgds

Damon

Someone like many of us, and/or with a life many of us would aspire to, of an age similar to the likely median here (indeed I am a newly-minted 47-year old tech CEO, though not in his league nor in the Valley), white collar, dies suddenly.

It's shocking.

And though most deaths in the news can be dismissed as "would never happen to me because $HUGE_DIFFERENCE", this is less easy to dismiss, even if it turns out ultimately to be just bad luck.

Don't be so airily heartless: this is some genuine human interest for nerds, even if maybe no huge shakes in the big scheme of things.

Rgds

Damon

Look elsewhere in this story: I've posted a 2013 paper where using this type of attack it appears that very nearly 100% of your secret key bits can be recovered as you do a single encryption in another process.

Note: not just revealing that I did an encryption, but what the bits of the key were that did it.

*That* seems bad enough to need serious thought (or refutation) ASAP.

Rgds

Damon

Such as this?

https://eprint.iacr.org/2013/4...

"We demonstrate the efficacy of the FLUSH+RELOAD
attack by using it to extract the private encryption keys
from a victim program running GnuPG 1.4.13. We tested
the attack both between two unrelated processes in a sin-
gle operating system and between processes running in
separate virtual machines. On average, the attack is able
to recover 96.7% of the bits of the secret key by observ-
ing a single signature or decryption round"

Rgds

Damon

http://en.wikipedia.org/wiki/N...

[citation provided]

I know someone who can do that right now for appliances, probably previously unseen.

Thus with a big enough incentive (such as getting access to your bank account) the danger is real.

Rgds

Damon

Interesting, thank you.

Given that I no longer see differential pricing in any of my own retail bills, and given remarks from BT execs some time ago that they'd like the differentials to go away, I assumed that they'd gone at wholesale level too.

What ratios are there in the wholesale pricing, eg is it still anything like 4:1 between the highest and lowest by time of day?

Rgds

Damon