• 0 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle







  • Slotos@feddit.nltoMildly Infuriating@lemmy.worldForm over function, eh?
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    3
    ·
    3 months ago

    In the dark, with the other side obscured (or just broken), you don’t want the blinker to actively prompt you to come to a wrong conclusion.

    It’s better to see a blinking light and think “I don’t see enough, gotta slow down” than see a blinking arrow and potentially not even realize it’s a turn signal.












  • I described a route to spoof DNS root authority that Russia and China can use already. Single root is not an advantage, it’s merely a different kind of implementation with different attack vectors.

    When it comes to security, it is better to have multiple different implementations coalesce at a point of service delivery, than have a single source of truth. If everything is delivered via DNS, there’s your tasty target for a capable adversary. If there are multiple verification mechanisms, it’s easier to tailor an attack for a specific target.

    I want cryptographic infrastructure I rely on to be the last resort for anyone capable of dealing with it.