Forgot your password?

typodupeerror

Comment: Re:Secret-Key Cryptography would still work okay (Score 1) 165

by CTachyon (#39842331) Attached to: Travelling Salesman, Thriller Set In a World Where P=NP

Secret-key crypto isn't dependent on NPish-hard problems, just on complex messiness, and it'll work fine even if we've got magic quantum computers. We'd have to go relearn all of those annoying Key Distribution System methods that public-key replaced, figure out what if anything to do about signatures, and have to build a whole lot of new business models for dealing with trust, since we'd have to actually trust the people running the KDC, but we'd live.

This is not quite right. Secret key crypto will be fine if quantum computing becomes ubiquitous (or if we find out that P=BQP), but P=NP is a vastly more powerful result, to the extent that it would shatter secret key crypto as well. P=NP means that you can pluck answers to a question out of the aether with no more difficulty than checking if one random input answers the question. So if you know how to calculate "lambda key: ciphertext.decrypt(AES, key).matches(English)", then by P=NP magic you already know the list of all 256-bit AES keys that satisfy that calculation. (Substitute "English" for any human language or binary file format you prefer.) You would still have the problem of sorting through all the candidate plaintexts, but if the ciphertext is longer than 256 bits then the list of candidates will be very short. Only one time pads (key length equals plaintext length) would remain truly safe if P=NP, because an n-bit ciphertext could represent any possible n-bit plaintext, i.e. the P=NP magic doesn't teach you anything you didn't already know.

Comment: Re:Because 32bits of addressing... (Score 1) 460

by CTachyon (#39728987) Attached to: Apple Under Fire For Backing Off IPv6 Support

The only "security" NAT provides is *exactly* the same as a stateful firewall.

As much as I agree with the sentiment, I will play devil's advocate for a moment. In an ideal world they are 100% equivalent. However, I think security people may consider NAT to be more 'failsafe'. If a NAT fails to apply its capabilities correctly, you have an outage and a problem, but it failed in a way that more likely than not still doesn't let foreign traffic in. For a stateful firewall, a failure is more equally likely to cause unwanted traffic to flow. Or, if being more pessimistic, cheap home routers stop bothering to set up rules as they aren't needed and naive consumers don't care.

If anything it's the other way around: a firewall is designed for security, whereas NAT is designed for functionality. For instance, all but the cheapest NATs inspect packets and automatically open holes to the LAN for compatibility with FTP, IRC DCC, various IM protocols, etc.

Comment: Re:Where? (Score 1) 715

by CTachyon (#39725113) Attached to: The Ugly Underbelly of Coder Culture

White males have been, and continue to be, in a position of privilege.

Are we, now? I'm afraid someone didn't let me in on the secret handshake to get the privileges. Either that, or I'm just not white enough. Either way, I object to being attacked under the cover of "erosion of privilege".

Yes, we are. As a white US resident, I've never had to worry about selecting a wardrobe that carefully avoids any chance of being mistaken for a criminal (e.g. avoiding hoodies, no matter how convenient they are); and as a male, I've never had to make an on-the-spot calculation of whether or not the guy entering the elevator is going to use the confined space to sexually harass me or bully me into accepting a sexual proposition.

Only in rare cases does privilege come with a special handshake -- it's often the mere absence of bias. In the context of discrimination, "privilege" is a term of technical jargon; I strongly recommend you read Of Dogs and Lizards: A Parable of Privilege for a good explanation of what "privilege" means here.

Comment: Re:Hm (Score 1) 105

by CTachyon (#39557375) Attached to: Linux 3.3: Making a Dent In Bufferbloat?

I think it's incredibly naïve to believe that we can, in one atomic action, rip out and replace tcp/ip (or whatever other technology) with something that is "better" for whatever value of the word "better" you assign it to have. An incredible amount of work and research has gone into making things work the way that they do, and not only do they work pretty well, but upgrading them to fix issues like this buffer bloat thing is not some Manhattan Project-esque undertaking, like reengineering the internet would be.

TCP has already been replumbed numerous times since its creation. Take a look at the after-market congestion avoidance algorithms that have been bolted on, or new wire-level features like timestamps (now ~mandatory), window scaling (now ~mandatory), SACK, and ECN. If AQM takes off, it'll simply be the latest in a line of fixes that's kept TCP working across 37 years of Moore's Law.

Comment: Re:And pulic transport will never replace the car (Score 1) 187

by CTachyon (#39170003) Attached to: How Google Is Remapping Public Transportation

The subway just gets you to another subway station, you probably forgot to add the walking and waiting times. The car gets you to your destination.

No, the car gets you to a parking spot. In a big city (e.g. I live in SF), that could still be a few blocks away from your destination.

Comment: Re:Goodwin be Damned (Score 1) 244

by CTachyon (#39169905) Attached to: Human Rights Groups Push To Save Condemned Programmer In Iran

"People of the book" specifically means Abrahamic religions: Islam, Christianity, Judaism, and arguably offshoots like Baha'i. The "book" is the Torah, a.k.a. the first 5 books of what Christians call the Old Testament. The Islam founding legend says Muhammed was visited by an angel who told him "yup, everything the Jews believe is true, but here's some more stuff God forgot to tell the Jewish prophets".

Today's hatred and mistrust between Jews and Muslims... well, Israel/Europe/US and Muslims... is fairly recent; Muslims and Mizrahi Jews living in modern-day Israel got along reasonably well until the 20th century kicked over the anthill. The modern insanity is almost entirely due to ham-handed mismanagement of the Palestinian Mandate after the Ottoman Empire fell in WWI: first by Britain, whose administration was rotten enough that it triggered an armed Arab revolt and made the WWII Allies locally quite unpopular, then after Britain handed off the festering mess in the aftermath of WWII, the UN made it worse as they promptly decided to forcibly segregate the Palestinian Mandate's population into "Jews" and "not Jews", i.e. the "Trail of Tears" approach (instead of e.g. setting up a one-state secular constitutional democracy with a liberal immigration policy for Jewish diaspora). The Middle East would probably not be a powder keg today if WWI had gone just a little differently and, say, the Ottoman Empire had lingered on until after the Holocaust.

Comment: Re:Stay Classy Microsoft (Score 1) 304

by CTachyon (#39156549) Attached to: Microsoft's Anti-Google Video Campaign

... There *is* a paid version of Google Docs. You can disable advertisements in gmail in the paid version. However, I still don't feel good about Google having access to all that information. Leaves a bad taste in my mouth. ...

Google's privacy policy says they won't sell your information to third parties, and their stated business model is all about throwing algorithms at big piles of aggregated data and never having a human look at any of it. Do you really think humans at Google even have the desire to look at your data, nevermind the access to do it without getting fired on the spot? What is your threat model? What abuse are you defending against?

Comment: Re:Hello - WebKit? JavaScript? (Score 1) 290

by CTachyon (#39107687) Attached to: Google Chrome: the New Web Platform?

> It's just a step towards eventually becoming part of > the css standard

Except when it's not. There are plenty of -webkit properties that have never been proposed for standardization, and some that Apple is refusing to propose even though people are asking them to. Presumably because Apple has patents covering the behavior of those properties and doesn't actually want to license them.

So don't use those. Unlike the old IE lockin, it's pretty obvious from the "-webkit-*" prefix that they're Webkit-specific. We aren't going to raise a new generation of web developers who think that "-webkit-*" properties are standard CSS and it's those other non-Webkit browsers who are being weird and icky for not implementing a "-webkit-*" property correctly. (Ditto "-moz-*" for that matter.)

Comment: Re:Lax attitudes toward child pornography (Score 1) 722

by CTachyon (#39030357) Attached to: Reddit: No More Suggestive Content Featuring Minors

Adults already know and play the mind games

Some adults do. I was bullied in elementary school, my parents' relationship seemed barely functional, and I'm pretty nerdy - I basically distrusted most humans until college (at which point my atrophied social skills had me believing I was autistic for a while) and I only started dating in grad school. I think I've made pretty rapid progress since, but needless to say I've made tons of rookie mistakes in the process.

This is a good point, one that I nearly brought up in my original post. I was in a similar boat, due to Asperger's as much as to the obvious reason.

Politics are almost as exciting as war, and quite as dangerous. In war, you can only be killed once. -- Winston Churchill

Working...