• 0 Posts
  • 419 Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle

  • yea, ever since TPM was first making the conspiracy rounds in the 90’s there has been a huge misunderstanding of its purpose, let alone its capabilities. I 100% agree with the author that looking at the TPM as an evil blackbox is really just depriving users of a tool that can be implemented in an open source way to secure user privacy. The GPU however is impossible to implement in an opensource way by everyone except a small handful of semiconductor companies, and even then you would rely on proprietary microcode that woul take millions of manhours to reverse engineer if it were even possible. So if I were some megacorp who relied on Imaginary Property, the GPU that was exclusively created by a fellow megacorp is where I’d place my trust.

    I also dont know why Win11 requires a tpm2.0, but since it does, and my current computer doesnt have one, I’m certanly not going to run it.







  • Cloudflare is in an interesting space. They are a service provider (ddos protection, scalable edge caching, SSL termination, etc) that allows the highly centralized internet to function. However they aren’t a gatekeeper at all. You only need cloudflare if you are in the top 5% of internet websites by volume. So when cloudflare has a problem, Lemmy isn’t affected, but Reddit is. My blog isn’t affected, but someone like https://blog.ipspace.net/ is affected.

    My personal browsing habbits meant I didn’t even realize there was a cloudflare problem until I read an article about it on Lemmy. Anyway, just a tangent, but as a network engineer I’m sure i’ll be interested in the RCA.









  • Well I haven’t see the arguement for why Quantum resistent encryption would somehow be weaker to traditional cryptographic techniques. I understand that early “quantum encryption” alogrithms were flawed, and it’ll probably be a long time before we get the DES of Quantum Encryption. But all that means is that we don’t have vetted “strong” quantum encryption techniques yet, and should stick with traditional encryption since quantum encryption isn’t worth it yet. If Quantum encryption becomes worthwhile, we shouldn’t have “traditional encryption”, because it will be obsolete.

    If the first cylinder lock was easily bypassed compared to my old reliable wafer lock, then why should I use the cylinder lock at all? Now that cylinder locks are better then wafer locks why should I use a tumbler lock at all? There is no added security by using a wafer lock.


  • You can always encrypt the payload twice if you want. But really what are you arguing? That every time you encrypt something, you should encrypt it serially with all known encryption algorithms “just in case?” Hell why not do it again just to make sure?

    A key component of encryption is efficiency. Most cryptographic processes are going to be occurring billions of times across billions of transactions and involving billions of systems. It’s worthwhile for robust encryption algorithms to be efficient and avoid unnecessary calculations unless those calculations demonstrate some advantage. For example PBKDF2, where the multiple rounds of identical encryption convey a demonstrable increase in time to decrypt via brute-force mechanisms. If the standard is 4096 which it was in 2005, you coming along and saying, but why isn’t it 4097? The CIA is using >4096, therefore that means that 4096 is insecure! Isn’t really understanding why 4096 was chosen to begin with. Additionally no one is stopping you from using one million iterations with key1 and then doing another million rounds with key2.




  • I only use windows for gaming. If Windows somehow fucks it up so much that I can play the majority of games in Linux on Steam, then I no longer have a use for them. I don’t use windows for work, and all of my normal computer use cases Linux is fully capable of, I’ll basically be forced over to Ubunutu or something, with a cracked Win11 VM for new games that don’t have linux releases.

    I suppose linux graphic drivers and performance are still an issue, but that will surely only get better, especially as the windows desktop segment of GPU sales dries up.