Hacker Newsnew | past | comments | ask | show | jobs | submit | rbsn's commentslogin

How can you actually make sensitive operations take constant time? This sounds impossibly hard. For example, your operating system could be context switching thousands of times per second. Your password comparison function could cause a page fault because the trailing end of the password spans onto another page of virtual memory. These are all factors that would throw any calculation for constant time out of the window.


> How can you actually make sensitive operations take constant time? This sounds impossibly hard. For example, your operating system could be context switching thousands of times per second.

Sorry, it appears that I didn't actually define constant time anywhere. What I really mean is that:

    Runtime does not depend in any way on the *value* of secret data.
So while actual runtime may vary, it's not varying because of the value of something we want to protect.

So it's not about keeping "absolute" time constant, but only the impact of the secret on runtime.


Just to follow up on topic of WhatsApp and Erlang, here is a presentation given at Erlang Factory 2014 about their goals with scaling WhatsApp to billions of simultaneous users.

http://youtu.be/c12cYAUTXXs


He did spell organisation correctly, just used British rather than of American English.


A small webpage I put together using JavaScript and Chart.js to help show the difference in utilization that can be achieved between slotted and unslotted ALOHAnet.


Can you not have end to end encryption of the frames that go over the wire? I guess it's immensely expensive when you're transmitting at 100Gb/s.


I'm sure you can, and cost isn't really an issue for the various three letter US agencies. They still treat tapping into said encrypted comms lines as a hostile act.


Oh wow. These were installed on all the computers at school. We would often have hours where we didn't have any lessons scheduled, but couldn't play games, watch YouTube or go on Facebook as we would get our accounts suspended. This was the only game we could play as we could argue that it was technically "learning". The other one was a website where you had to name and locate all states in the USA. We are a British school.


British Airways does offer quite a competitive service. Now that Willie Walsh has stopped IAG bleeding cash from the acquisition of Iberia (an airline desperately in debt) they're turning a healthy profit for an airline - a complete parallel universe to what is happening at AA.


Hi, thanks for your comments. You can type help to see a list of commands that are support.

To answer your question about cd, mv, nano, etc I made this in the few hours I had yesterday afternoon, so I'm afraid I only had time to implement a small subset of commands.

I've now put it up on GitHub (https://github.com/grbsn/web-sh). I hope people can use it as a starting point to build their own web based console applications. Let's see how it goes!


Nope. I'm actually looking at second hand ThinkPads, T series.


We're getting hooked up at home with FTTP this month with Gigaclear. Up to 1000Mbps symmetric up and down.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: