HN user

majou

168 karma

2hohe

Posts1
Comments113
View on HN
How to quit cars 3 years ago

My car was $1,500 and my insurance is ~$35. I'm lucky enough to be able to bother mechanics to teach me repairs though.

My '08 MacBook has calculations via Spotlight.

Not to mention the screenshot tool (including Command-Shift-4, Spacebar) that works immediately upon keypress unlike the new Windows built-in screenshotter. Of which it doesn't hide its own UI properly and may leave a small 1-pixel bar at the top of your screenshot! It's insane how poorly crafted Windows is, and yet it flourishes.

You're mistaken; the iPhone 5s--10 years old come Autumn--received a security update on January 23rd (iOS 12.5.7).

As the first 64-bit phone and the first phone with a proper Secure Enclave (TPM+biometric auth) it's received a lot of love from Apple.

Here you're electing to remain on the happy but bloated path.

However sometimes it may be worth to venture out a bit in exchange for reducing code, or for using code that aligns more with your philosophies.

From what I shallowly researched; GCM's nonce seems limited to 12 bytes by convention only. That nonce reuse is so fatal seems absurd to me.

Would "salting" the key safely tackle the problem?

Put explicitly;

  send <- nonce || salt || ciphertext
  recv -> decrypt(ciphertext, nonce, pbkdf(pass) || salt)
[edit: apply salt outside of the kdf]