Hacker Newsnew | past | comments | ask | show | jobs | submit | norcimo5's commentslogin

How about re-using / hacking intel's ME (Management Engine) for this type of fault tolerance?


oooooor 3) The Girl Scouts accepting boys in their organization. Am I the only progressive optimist in this crowd? :p


To encrypt: tar cz foo | openssl aes-256-cbc -salt -out foo.enc

To decrypt: openssl aes-256-cbc -d -in foo.enc | tar xz

(foo can be a file or directory)


This does not contain a MAC though, does it? Also why CBC? Why not CTR/GCM instead? And why AES256 instead of Chacha20-Poly1305 or some other modern AEAD?


What are the advantages of GCM over CBC? And whats wrong with AES256?


- GCM unlike CBC is an AEAD mode (has a MAC build-in)

- CBC needs padding, which when misused can lead to padding oracle attacks

- GCM allows for parallel encryption

> And whats wrong with AES256?

There are more modern, faster and better ciphers that are designed to not be vulnerable against many side-channel attacks that AES is difficult to protect against.


GCM has an integrity check built in, which is very useful in crypto.

https://crypto.stackexchange.com/questions/2310/what-is-the-...

https://crypto.stackexchange.com/questions/14747/gcm-vs-ctrh...

https://security.stackexchange.com/questions/33569/why-do-yo...


https://github.com

There are A LOT of projects that could use your help there. Trust me, it works!


"To Live Your Best Life, Do +Applied+ Mathematics". There's something delightful about using mathematics as a mean to an end...


Awesome! Thank you for pointing out some good open-source alternative apps for 3d, video and photography!


I'm with you! This is one of the last few articles related to 'vr on linux' that I read before the Holidays: http://www.roadtovr.com/steamvr-to-get-linux-and-mac-osx-sup...

AFAIK both Unity and Unreal Engines have 'experimental' linux builds available. I started the year hardware-strapped, but hopefully sometime in 2017 I'll start dabbling with these linux alternatives.

Good luck!


Yes please! I'm not blind either, but would love to collaborate / contribute also. My email address is in my profile. Thanks.


openssl aes-256-cbc -salt -in myfile -out myfile.enc

openssl aes-256-cbc -d -in myfile.enc -out myfile


Yes, but the truth of the matter is that they did exactly that. So "can't" is not the right word in this context.


you can, but shouldn't.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: