What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

3
1
0
2
1
0
0
0
0

Re “Cryptographic Issues in Matrix’s Rust Library Vodozemac, s1. Olm Diffie-Hellman Accepts the Identity Element”

So if you’re talking to me and I’m malicious, I can send you the ed25519 identity point and force the output of our ECDH agreement to all zeroes. That sounds bad, right? You think we’re having an encrypted conversation, but in fact that encryption is completely useless.

Now, have a ed25519 key pair:

pub 6a175eb9529f5fbbfcbb84b80e451ea8eb976653fd40da4b7b9f98d0db66031f
prv c0bf3874dfa3032ce85cf75db06f0763a3b9296c957d1fe203a318ba63049d3c

(I generated this with the Go playground)

I send you that public key. We negotiate a shared secret with each other. We’re secure right? Well, no, because anyone who’s read this post knows my private key and can compute the same key we just negotiated.

Should you be checking for that public key too? Of course not, that’s nonsense.

Soatok would of course recommend that you use Signal instead. This case is so critical that Signal checks for it, right? Yeah, it does… as of a week ago

(It’s a tad difficult to compare to what Signal is doing, because Signal has removed X3DH in favour of PQXDH, a post-quantumn hybrid replacement, and I can’t quite find the last version of libsignal that supports X3DH. But I don’t see it in an ancient version of their library which did do X3DH either)

I don’t even really like Matrix and there are certainly a lot of flaws in the protocol in general, but this vulnerability announcement feels like more hype than substance to me.

0
0
아니 이상하네
메인 모니터 -> 캡쳐보드 Out -> 캡쳐보드 In -> 게임용 컴퓨터 GPU 순으로 연결했고
캡쳐보드 USB를 송출용 컴퓨터에 연결했는데
왜 캡쳐보드에서 나오는 화면이 컴퓨터PC 모니터가 아니 송출용 PC 모니터임?
뭐야 어떻게된거야
0
0
0
0
0
0
0
1
1
2
0
0
0
0
0
3
0

After some extensive soldering time I've now got stock ready of all my expansions and peripherals for use with and compatible systems. All the info and to purchase please see: 2014.samcoupe.com

- SID Soundchip Interface (6581 configuration in stock, use the famous SID Soundchip with your RC setup, or use modern replacement such as ArmSID)

- Graphic OLED Interface (32x128 graphic display)

- ZX True Tone (ZXTT, for use with Ed Brindley's YM/AY soundcard so the soundchip is clocked exactly at the same frequency as the 128K )

- SAA1099P Sound chip Interface (Use the 6 channel stereo sound chip, as used in the , in your RC setup)

- RC-ZX Bus Interface (Use RC2014 I/O peripherals on the )

- RC-SAM Bus Interface (Use RC2014 I/O peripherals on the )

SID Soundchip Interface for RC2014 and compatiblesGraphic OLED for RC2014 and compatiblesSAA1099P Soundchip Interface for RC2014 and compatiblesZX True Tone, for use with the YM/AY Soundchip Interface by Ed Brindley
0

On the phone to a financial institusion about why I can't log in to their website.

Them: "What browser are you using?"

Me: "Firefox"

Them: "Can you try using Google Chrome?"

Me: "No"

Them: "Okay I can help you so if you go to goog-"

Me: "It's not that I don't know how, it's that I won't use Google Chrome."

Them: "We only support Google Chrome."

Guess who just closed their account and transferred their money elsewhere?

0
0
0
0
0
0
0
0

GENKI shared the below article:

ネコがのどを鳴らす音は、“声紋”のように機能する:研究結果

WIRED.jp @wired.jp@web.brid.gy

ネコの鳴き声といえば「ニャー」だが、のどを鳴らす「ゴロゴロ」という音のほうが実は個体識別に適しているという。個体ごとに固有の音響特性をもつ"声紋"のように機能していることが、このほど最新の研究で明らかになった。

Read more →
0
0
0
1
0
1
0
0

On the phone to a financial institusion about why I can't log in to their website.

Them: "What browser are you using?"

Me: "Firefox"

Them: "Can you try using Google Chrome?"

Me: "No"

Them: "Okay I can help you so if you go to goog-"

Me: "It's not that I don't know how, it's that I won't use Google Chrome."

Them: "We only support Google Chrome."

Guess who just closed their account and transferred their money elsewhere?

0

I don't think I have the stomach to listen to two years of vote-blue-no-matter-who liberals tell us that AOC shouldn't run because of misogyny, while supporting whatever milquetoast centrist man the DNC gives us.

Because, you know, we gotta court the upper middle class centrist vote that never actually swings left, instead of expanding the potential voter block like we did anytime democrats actually win.

0
0
0
1
0

Tomorrow is the first day of in 🌙
This is usually a month of joy, happiness, and prosperity in Gaza, but for the third year in a row, Gaza is losing its safety & joy, but thanks to your support and presence, this year will be more beautiful and easier for families and 🥰.

Donate any amount you can now , and show some love 💕 Thank y'all.

chuffed.org/project/help-mai-a

0
0
0