alphager

Tell me about it! We've got slightly under 10'000 distinct software assets we are trying to catalogue. There are now a handful of vendors claiming to be able to scan for crypto, but they all suck.

I work as a security architect in a major European company. We're currently demanding a full cryptographic inventory of every new product purchased or service built in-house and will start demanding PQC in 2028.

Not because we expect a workable quantum computer by 2030 (current estimates are around 2035-2040), but because stuff survives for decades in large enterprises (especially if it touches hardware in any way. Think OT, think controllers for all kinds of machines).

Now that PQC is standardized, there's no gain not to demand it (it's basically a demand to use a current openSSL/libreSSL/$library), but not demanding it now will cause a major headache once/if quantum computers work.

TLS connection speed matter only for a very tiny niche of applications; those will choose according to their needs. For the general case, it just doesn't matter.

If your threat model includes store-now-decrypt-later, you should have been demanding PQC for years.

The check for citizenship is not done at the polling place; it's done at the time of voter registration with plenty of accepted IDs.

ZFS on Linux works great, but with most distributions, it will compile the kernel module on device upon installation. Only Ubuntu distributes binaries.

As a consequence, you don't necessarily want a rolling distro, as the ZFS module can get out of sync with the kernel.

ZFS itself is build for both BSD and Linux from the same source, so there's feature parity there.

There's bias and then there's ignoring all of your own laws when it's convenient.

There are very limited seats (a few teens of thousands). Free market logic dictates that the 100000 richest fans get the tickets.

If you don't like it, you are not a true believer in a free market. There's a reason social democrat countries heavily subsidize culture.

*in the US

It is absolutely bonkers to think about using UV to disinfect human skin, let alone the inside of the human body.

Any UV radiation strong enough to destroy the cells of bacteria is strong enough to destroy human cells. We know that UV-radiaton that's not strong enough to kill bacteria is already harmful to human skin (we call the phenomenon sunburn).

Nope. You have to possess a valid ID or passport, but you are not required to carry it. Keeping it at home is perfectly fine.

Carrying it is practical and most Germans do carry their ID, but it's not a requirement.

We are as close as you can get, but we estimate that we're about 3.5% away from true optimum on the hardest problem we try to optimize.

Absolutely true in the real world; I was part of a real team that explored quantum optimization algorithms as part of a strategic initiative (my day job is algorithmic optimization on classical computers).

Our problem is similar (but not identical) to the traveling salesman problem. We run on a tight time constraint (measured in days for the complex type and measured in minutes for the simple type).

We're running approximations on classic computers but estimate that we'd save billions if we could reach optimum.

Logistics would love to optimize the traveling salesman problem.

X$ for the ticket plus a convenience fee/service fee for standing in line.

What difficulties do you mean? We got Sepa instant transfers nowadays...

How is that a ban?

It's in all kinds of medicine. People take some pills and then add a cough syrup, not noticing that the syrup also contains it as an active ingredient.

Stealing is one possible problem (transactions out of country are really hard to claw back), but the major fear is probably stability. You won't like the consequences if a significant percentage of your countries banks are down for a few days...

That are paid (if not avoided) at the location of the owner, not the location of the dc.

Datacenters really aren't that good for the locals. Low property tax, just tens of jobs but very high infrastructure needs.

Just be aware that DW is literally government propaganda. If you want news from a German perspective, it's great; however its purpose is explicitly to give the German governments POV.

A steam sauna originating in Turkey, popular in many Arabic countries.

People with 2 minimum wage jobs have even less time.

That would be about 10-15 years after the moment it would have been wise to migrate to PQC. You won't have the time to migrate before breach when you start after ECC is broken.

They are selling access to GPU computation. Seeking their used GPUs would flood the market with cheap competitors using their old GPUs.

Most admins on Wikipedia are competent in areas outside of webdev and security.

Those usecases are at least 5 years if not 10 years out. They require software support which won't come until a significant part of the pc market has the necessary hardware for it. Until then, paying extra for the hardware is foolish.

This will only come if Windows 12 requires a TPU and most of the old hardware is decommissioned.

The UK supports the attacks by giving logistical support to the US through the use of UK airbases.

No, LTCS means the version after the end of public beta.

Telnet client is an optional feature in Windows that needs to be enabled/installed.

I've seen this happen with both juniors and seniors. They do come back with a working solution /for the happy path/. Because the happy path is easy. It turns out that most of the complexity sits in the unhappy paths.

The 30 seconds (+30-60 seconds to account for clock drift) are long enough to exploit.

TOTP is primarily a defense against password reuse (3rd party site gets popped and leaks passwords, thanks to TOTP my site isn't overrun by adversaries) and password stuffing attacks.