2,712 reputation
2819
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 4 years, 6 months
seen 17 hours ago

NSA running around with their hair on fire because they realise if everyone starts using OTPs and not their weak AES algorithm then their PRISM programme is worthless. --- zuallauz - Would this simple encrypted chat program be feasible using One Time Pads?


May
22
comment Resetting vs. re-sending forgotten passwords
See How to securely hash passwords? on security.se.
May
21
comment What AI algorithm should I use to develop an automatic personal scheduler?
Scheduling sounds like a proper where Simulated annealing should work well.
May
20
comment Coinvault / Bitcrypto ransomware idea
Your idea would only work if the malware programmers were incompetent (which is possible). They could have used different keys for different files, in which case you'd only learn the key for that single file.
May
19
comment How do you avoid getters and setters?
I don't think the customer class should know about any of these things.
May
11
comment Is there any point in preventing developers from having a local copy of the database in their machine?
If your application is well written, knowledge of the database scheme shouldn't allow any attacks. Don't rely on security-through-obscurity.
May
11
comment Is there any point in preventing developers from having a local copy of the database in their machine?
How would they even write database queries without knowing the schema?
May
7
comment Java: why is there a Comparator interface but no Hasher and Equator?
1) In C# you can pass an IEqualityComparer<T> to a hash based collection. If you don't specify one, it uses a default implementation based on Object.Equals and Object.GetHashCode(). 2) IMO overriding Equals on a mutable reference type is rarely a good idea. That way the default equality is pretty strict, but you can use a more relaxed equality rule when you need it via a custom IEqualityComparer<T>.
May
4
comment Synchronization between two systems using MongoDB as changelog
One pitfall is that ObjectIds don't increase monotonically.
Apr
18
comment Using uniqueness types to implement safe parallelism
You might want to take a look at Mozilla's Rust.
Apr
13
comment How is distribution of PKI certificates allowed?
I'd expect certificates to not meet the threshold of originality required for copyright protection. In particular check the section "Mechanically-produced works" in the wikipedia article.
Apr
12
comment How can I argue convincingly against duplicating database columns?
Wouldn't adding views that do the join internally make writing queries just as easy? You could suggest them as an alternative.
Apr
9
comment How long should a GET request via a REST call take?
The performance of you system is at least 100x worse than what I'd expect. But without context we can't really help you.
Apr
7
comment Has pre-increment operators become that common?
In C++ with custom iterators this might be a useful optimization. In C I don't see why it should matter.
Apr
2
comment Does path coverage guarantee finding all bugs?
With 32 bit integers and typical cryptographic hashes (SHA2, SHA3, etc.) computing this should be quite cheap. A couple of seconds or so.
Mar
30
comment Does path coverage guarantee finding all bugs?
Easy for sufficiently small integers :)
Mar
23
comment Method extraction vs underlying assumptions
@gnat I think this question is closer to "Is it OK to split long functions and methods into smaller ones even though they don't preserve the class invariants?"
Mar
14
comment Working with static constructor in Java
As I read the question, it's about static initializers, not about normal static emthods.
Mar
14
comment Counting digits of a decimal number
When you talk about a "decimal number", do you mean an integer encoded in base 10, or are you talking about the string representation of binary floating point numbers like float or double?
Mar
13
comment What is better for scalability for this specific dataset, MongoDB or MySQL?
Do you have any evidence that performance matters at all? Do you have hundreds (or even more) requests per second? This sounds like premature optimization.
Mar
8
comment Program to look at the first say 5 characters of a word and return a string if that string is actually the first 5 characters of a word?
Just get a dictionary, truncate words to 5 letters and generate a hashset from that.