Re: BlueHat v13 crypto talks - request for leaks ;)

2013-12-14 Thread Tom Ritter
I can answer for Cryptopocalype. :) I had a follow-up blog post after Black Hat, but the crux is looking for the next crypto black swan. Joux's work in optimizing the function field sieve for fields of a small characteristic has been a significance improvement kind of out of left field. If he or

RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e

2013-12-14 Thread coderman
as per the FreeBSD announcement[0] and others[1][2] direct use of RDRAND as sole entropy source is not recommended. from Westmere onward you could use AES-NI to make crypto fast in OpenSSL. a common theme is to initialize OpenSSL via ENGINE_load_builtin_engines() which lets OpenSSL take

Re: [Full-disclosure] RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e

2013-12-14 Thread coderman
On Sat, Dec 14, 2013 at 8:31 AM, Dennis E. Hamilton dennis.hamil...@acm.org wrote: It would have been good if you had said security issue ... i think the word you're looking for is Feature. ... but you and me are not the customer. ;)

Re: RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e

2013-12-14 Thread coderman
On Sat, Dec 14, 2013 at 4:33 AM, coderman coder...@gmail.com wrote: ... if you are using an application linked with openssl-1.0.1-beta1 through openssl-1.0.1e you should do one of the following: ... b.) call RAND_set_rand_engine(NULL) after ENGINE_load_builtin_engines(). correction: this

Fwd: Jacob impervious to Rubber Hose Cryptanalysis performed by Stewart Baker

2013-12-14 Thread coderman
this is pretty amusing :P (and needs a Knuth is my Homeboy homage?) --- http://bendrath.blogspot.be/2013/12/layers-of-struggle-privacy-vs.html Layers of the struggle privacy vs surveillance, in my picture of the year This is the picture of the year for me, on so many different layers: [view

Re: Jacob impervious to Rubber Hose Cryptanalysis performed by Stewart Baker

2013-12-14 Thread grarpamp
this is pretty amusing :P Perfect :) Wonder if the panel talk is online?

Re: BlueHat v13 crypto talks - request for leaks ;)

2013-12-14 Thread Peter Gutmann
Tom Ritter t...@ritter.vg writes: ECC has other attributes that make it attractive too, so let's get the plumbing ready, so we can support a quick pivot away from RSA and over to ECC if we have to. ECC however has the downside that it's incredibly brittle. For example there's the scary tendency

Re: Services Blocking Tor [was: Joke]

2013-12-14 Thread grarpamp
On Sat, Dec 14, 2013 at 1:20 PM, Juan Garofalo juan@gmail.com wrote: --On Friday, December 13, 2013 7:31 PM -0800 Tom Ritter t...@ritter.vg So, I tried to create an account at bitcointalk.org and got this Due to abuse, registration through Tor is not permitted. That's got to

Re: Joke

2013-12-14 Thread Al Jigong Billings
Do you ever have anything positive or nice to say, Juan? On Saturday, December 14, 2013, Juan Garofalo wrote: --On Friday, December 13, 2013 7:31 PM -0800 Tom Ritter t...@ritter.vgjavascript:; wrote: I doubt it - abuse through Tor is a legitimate problem. Not sure what that

c4-r3kN.txt (urls)

2013-12-14 Thread brian carroll
../correction_regarding; = last {urls} list, a needed clarification about applied concrete, its also massive and important role in reconceptualization. bridges, hi-ways, skyscrapers along with steel, office parks via CMUs. innovative material- and form-based aesthetics (its own language or

Re: Joke

2013-12-14 Thread Al Billings
From: Juan Garofalo Juan Garofalo Do you ever have anything positive or nice to say, Juan?  Oh, I'm pretty sorry I upset you, Al. Tell me, please, Whose boots you  think I should be licking?  Any that make you grow up into a human being that isn’t an asshole? --  Al Billings

Re: Joke

2013-12-14 Thread Juan Garofalo
--On Saturday, December 14, 2013 1:30 PM -0800 Al Billings alb...@openbuddha.com wrote: From: Juan Garofalo Juan Garofalo Do you ever have anything positive or nice to say, Juan?  Oh, I'm pretty sorry I upset you, Al. Tell me, please, Whose boots you  think I should be licking? 

Re: Joke

2013-12-14 Thread Juan Garofalo
--On Saturday, December 14, 2013 1:30 PM -0800 Al Billings alb...@openbuddha.com wrote: From: Juan Garofalo Juan Garofalo Do you ever have anything positive or nice to say, Juan?  Oh, I'm pretty sorry I upset you, Al. Tell me, please, Whose boots you  think I should be licking? 

Re: Fwd: Jacob impervious to Rubber Hose Cryptanalysis performed by Stewart Baker

2013-12-14 Thread griffin
Il 14.12.2013 13:36 coderman ha scritto: this is pretty amusing :P (and needs a Knuth is my Homeboy homage?) The title that spawned a dozen fanfics. ;P It's pretty excellent that they're both able to have a sense of humour about the situation. And, maybe someone will bring in the magic

Re: Gmail's receiving mostly authenticated email

2013-12-14 Thread Peter Gutmann
Bill Stewart bill.stew...@pobox.com writes: Saw an interesting article from Gmail on their inbound email statistics. Over 91% is authenticated with either DKIM or SPF. What percentage of that is using 512-bit keys? Peter.