>Are the real RNG's out there so cost prohibitive?
No a real RNG on a modern silicon process takes only a tiny sliver of silicon and a few very smart designers and at least one very smart cryptographer.
>no one can know if Intel could have a backdoor into it.
Except me and my colleagues, who have full visibility of it and know if a back door was put in it and no, a back door was not put in it.
If there was a back door, it would only take one person out of several hundred of those people who would know, to tell the world about a backdoor. If there isn't a backdoor (which there isn't), then there's no back door to tell the world about.
We are a company full of techies most of whom like open source principles and personal data security. So if there was a back door, you would find out about it because you could pretty much guarantee that someone would bleat, and justly so.
They also made many other changes. See appendix F of draft 1. I'm in the middle of reviewing them
The announcement and RFC is here. The comments from the previous round addressed far more than just the Dual_EC_DRBG.
There are structural issues in the spec. My comments on the previous draft address them: 1) Flow control: ES pushing, vs conditioner pulling. Reseeding on demand vs when entropy is available. 2) A purely software centric API, when all nondeterministic random number generators need a hardware component. 3) Online testing that is too onerous for resource constrained solutions, when effective technical solution exists that have been ignored. 4) Conditioners (really an SP800-90B thing, but A, B and C go hand in hand) are all single source conditioners based on large crypto functions. The current state of math tells us multiple input conditioners can be implemented with non cryptographic methods in fewer gates with higher lower-bounds for min entropy out.
>only expensive if you're always going to toys r us for the overpriced crap that gets lost in 2 days only expensive if you're always allowing them to pursue their interest in competitive horse riding.
>But there's another issue that is... odd that I don't know if anyone's considered. The vying for exclusivity on this title implies that they (Google/Apple) think that this game is so awesome that it will cause people to abandon a competitors phone for their own instead of waiting for the exclusivity to run out.
Well at least Apple think that. Not so much Google or they might have vyed harder.
>Are the marketing guys just making this stuff up as they go along?
3. Some services like Yahoo mail are still very popular.
I liked their real time market quote service, that I have paid for monthly for several years. However they notified me that they are cancelling the service. WTF?
>" an unsafe place" like SF? have you been outside there after dark?
I have. Many times. It was quite nice. They have lots of lighting so residents and visitors alike can get around despite it being night time. I wasn't mugged, except by the Hotel bill.
Slashdot Mirror
>Are the real RNG's out there so cost prohibitive?
No a real RNG on a modern silicon process takes only a tiny sliver of silicon and a few very smart designers and at least one very smart cryptographer.
>no one can know if Intel could have a backdoor into it.
Except me and my colleagues, who have full visibility of it and know if a back door was put in it and no, a back door was not put in it.
If there was a back door, it would only take one person out of several hundred of those people who would know, to tell the world about a backdoor. If there isn't a backdoor (which there isn't), then there's no back door to tell the world about.
We are a company full of techies most of whom like open source principles and personal data security. So if there was a back door, you would find out about it because you could pretty much guarantee that someone would bleat, and justly so.
Oops. I missed the link for the announcement.. here
They also made many other changes. See appendix F of draft 1. I'm in the middle of reviewing them
The announcement and RFC is here.
The comments from the previous round addressed far more than just the Dual_EC_DRBG.
There are structural issues in the spec. My comments on the previous draft address them:
1) Flow control: ES pushing, vs conditioner pulling. Reseeding on demand vs when entropy is available.
2) A purely software centric API, when all nondeterministic random number generators need a hardware component.
3) Online testing that is too onerous for resource constrained solutions, when effective technical solution exists that have been ignored.
4) Conditioners (really an SP800-90B thing, but A, B and C go hand in hand) are all single source conditioners based on large crypto functions. The current state of math tells us multiple input conditioners can be implemented with non cryptographic methods in fewer gates with higher lower-bounds for min entropy out.
There's more. See the comments.
There was only one Benny Hill.
I could, I have the license, but I want a new guitar and new laptop more than I want a motorbike right now. They cost about the same.
And your point is what?
Rain, snow, sleet, hail, rain, rain and more rain.
I used to. Since then, commute length has been a big factor in where I choose to live.
Not five minutes. 10-15. Taking the car route would be deadly. The bike route is ~3.5 miles.
Depends on the weather. I'm in Oregon. Bikes and walking are options I use.
I commute about 2 miles to and from work each day.
But the Leaf is ugly, the Tesla S is expensive and neither is convertible.
Is that an option? Who knew?!
You shouldn't be mailed a ticket for sunbathing nude regardless. Legislating against the human body is wrong on many levels.
>only expensive if you're always going to toys r us for the overpriced crap that gets lost in 2 days
only expensive if you're always allowing them to pursue their interest in competitive horse riding.
There fixed that for you.
I found the old fashioned way of making babies far more enjoyable.
>But there's another issue that is ... odd that I don't know if anyone's considered. The vying for exclusivity on this title implies that they (Google/Apple) think that this game is so awesome that it will cause people to abandon a competitors phone for their own instead of waiting for the exclusivity to run out.
Well at least Apple think that. Not so much Google or they might have vyed harder.
>Are the marketing guys just making this stuff up as they go along?
Yes.
So name these threats with specificity and explain how the Snowden leaks enabled these threats.
I no more want to live in Dallas than I do Detroit.
You know how to push the fear with non specific threats and enemies. Do you do this professionally?
Ah. OK.
3. Some services like Yahoo mail are still very popular.
I liked their real time market quote service, that I have paid for monthly for several years. However they notified me that they are cancelling the service. WTF?
>Huntsville Alabama and Palm Bay/Melbourne Florida for what should be obvious reasons.
Should be but isn't. Why are they they the top two cities with the highest density of engineers?
>" an unsafe place" like SF? have you been outside there after dark?
I have. Many times. It was quite nice. They have lots of lighting so residents and visitors alike can get around despite it being night time. I wasn't mugged, except by the Hotel bill.
The tech in Texas is centered on Austin. The techies in Texas gravitate to the most progressive parts of Texas.