HN user

dewyatt

420 karma

Compromised by the CIA, do not trust this account

Posts4
Comments128
View on HN

To rule out if it was a coding error, I tried to decompress the gzip file with bash via gzip -dc file. bash threw a strange error, “can’t seek file descriptor” when trying to read the file. This error is emitted from bash.c here.

Unless I am reading this wrong, the error would have been emitted by gzip, not bash. There is no redirection or anything here, bash is not even aware of that file.

I'm not sure what you're implying, but without context, the screenshot is meaningless.

It could be that Phil has a policy of not storing private keys on his iPhone or something. Is that so unusual?

Anyways, maybe you're privy to context that I'm missing.

The PGP Problem 7 years ago

Yes, it depends on what you mean. The packets themselves aren't a big deal to me, it's more the ability to construct them in arbitrary ways that concerns me.

The PGP Problem 7 years ago

Every well-known bad cryptosystem eventually sprouts an RFC extension that supports curves or AEAD, so that its proponents can claim on message boards that they support modern cryptography.

I'm being attacked! :P

The PGP Problem 7 years ago

I can probably agree on the packet format, it's excessively flexible and easy to implement insecurely.

The PGP Problem 7 years ago

PGP theater

Hmm I don't see it as theater if you are unable to intercept and decrypt my message. Or forge my signature, etc.

Much of that could be solved by an implementation having user-controlled policies that whitelist/blacklist sets of algorithms. An implementation could be made with a sane default policy.

Of course, some things ought to just be replaced (S2K).

The OpenPGP RFC bis does add AEAD. The spec is overall much too flexible IMO and could use some modernization, but I don't see it as un-salvageable, as you seem to.

It's all digital from what I've seen. It seems like some clear epoxy would work well. Maybe some mineral oil after it cures, just to help fill little gaps (since epoxy tends to be pretty viscous).

EDIT: Although epoxy makes it a bit difficult to change the battery, depending on how you go about it. Maybe some conformal coating on the PCB + mineral oil.

My desktop w/a Ryzen 1800x still randomly freezes. I disabled most of the power saving features in the UEFI, which definitely reduced the frequency but it still happens on rare occasions. :(

I work pretty much 100% on my desktop at home every day. Only reason I'm on a laptop right now is because of a power outage.

I would recommend considering GitLab CI as well. I started moving some projects over there a few months back and I've been quite happy with it. The transition from Travis CI was pretty smooth. There are some differences in concepts (cache vs artifacts), but the GitLab CI documentation is pretty good.

Plus you can run it all locally with a couple of docker containers (gitlab-ce/gitlab-ee & gitlab-runner).