dakami

Funny you should ask. I just looked into this:

https://twitter.com/dakami/status/884715382061252608

Yeah. Ethereum blew up and all that compute is going towards GPU Mining.

dakami

10 anni fadiscuss

My understanding (and please correct me if I'm wrong!) is that it's pretty easy to burn out FPGAs, electrically, in a way that it's not particularly trivial to do with other sorts of circuitry. So one downside of exposing your bitstreams is people are going to blow things up and demand new chips.

dakami

10 anni fadiscuss

Rust isn't a sandbox. The whole point of a sandbox is it survives incorrect software at runtime. Rust is compile time magic. Sure, cool, different thing.

dakami

10 anni fadiscuss

was that...like...a hundred megs for a web page?

dakami

10 anni fadiscuss

We don't build houses (he said from San Francisco)

dakami

10 anni fadiscuss

-D flag in OpenSSH.

dakami

10 anni fadiscuss

No apparent backend integration.

dakami

10 anni fadiscuss

Does Webstorm actually integrate with front end development? I'd like to whip together simple projects that aren't actually hideous, and literally every cloud IDE I'm finding just doesn't have a way to go from HTML5 code to WYSIWYG or even structured output...

dakami

10 anni fadiscuss

Are your Win10 devices domain joined? Sounds like malware.

dakami

10 anni fadiscuss

So I just started experimenting with ZFS, because it seemed required for container snapshots.

Then I found out it fragments badly, and nobody can figure out how to write a defragmenter. So, uh, keep the FS below 60-80% full apparently.

Yeah.

dakami

10 anni fadiscuss

Ah, there you go. Repro code:

#/usr/bin/python

from random import *

count=0

def get_bit():

   global count

   count+=1

   if (count%2)==0:

      return random()<0.9

   else:

      return False

def get_fair_bit():

   while 1:

      a=get_bit()

      b=get_bit()

      if a!=b: return a

while 1:

   print get_fair_bit()

I'm wondering how often this one shows up the field -- my interest here comes from the ~1% failure rate of RSA keys in the field because manufacturers actually will not install hardware RNG or externally inject key material. Field vulnerability trumps religion. It looks like you need a really stateful vuln -- something akin to "a 1 is always followed by a 0 due to power drain" wouldn't be enough because the number of 0's is still acceptably unbound.

I know there are debiasers that look at statistics across a group. Wonder what else is out there.

dakami

10 anni fadiscuss

I'm not convinced Von Neumann debiasing is vulnerable like you think. You're dropping runs (00's and 11's) so you don't care if it's 90% 0 or 90% 1, you care if there's an even number of a run or an odd number of a run.

In other words:

0000000000000001 000000001 001

...are all interchangeable. So biases can change all day.

There are _other_ issues I've seen in real world data, but not this one.

dakami

10 anni fadiscuss

It's definitely based on my approach, but it's missing the concept a bit. The only way this approach gets entropy is if you cross two clocks at very different speeds, and get randomness from the mismatched tolerances. For example, using a computer's microsecond accurate clock to measure a human's 100 millisecond scale behavior yields bits, because we can't be microsecond accurate even if we try.

The bitflipping I was exploring involved matching the CPU clock (nanosecond scale) with the real time clock (millisecond scale). This of course has some risk because the OS can easily implement the latter with the former. And in fact, in this implementation, that's actually what happens -- he's measuring the number of bit flips at nanosecond accuracy. Output is distinguishable from PRNG, as seen elsewhere.

If I remember right somebody did break my "Defcon Challenge" with Firefox.

dakami

10 anni fadiscuss

I'm interested in more of your perspective here. I was around back in the Mojo Nation era as something of an observer, but there's lots maybe I didn't see.

dakami

10 anni fadiscuss

Where does he claim this?

dakami

10 anni fadiscuss

That's exactly what makes this cool! Since we know the signed hash is a chunk from the Blockchain that is most assuredly not Sartre, we also know with cryptographic certainty that Wright does not possess a copy of Sartre with that hash. That would be what's known as a preimage attack -- given the hash from the Blockchain, find another SHA256 file with that hash. Wright could not even generate a malicious Sartre document with that property, without having executed a much larger crypto hack than Bitcoin itself.

dakami

10 anni fadiscuss

He said something was X, we have cryptographic proof it's Y.

dakami

10 anni fadiscuss

Everything before Bitcoin was really obsessed with anonymity, whereas Bitcoin was actually scared of centralization.

dakami

10 anni fadiscuss

I like the metaphor that ants are "cells with legs".

Life really isn't constrained to any of our neat categorizations; life really is whatever works over time.

dakami

10 anni fadiscuss

You might be right, you might not be, in the general case. In the specific case getaddrinfo is not performance sensitive (to say the least) and that entire block could be specially compiled 10x slower or run inside of a trivially available sandbox.

We have options we're not exploring.

Submissions

Ask HN: Is there a reasonable, actually integrated Web IDE out there?

comments