dobbsbob

Because junk food is cheaper. $1.75 pizza slices will fill you more than a $1.75 worth of Broccoli where I live. Fast food places are also closer to them than grocery stores because they are out in the suburban sprawl so they go to what is accessible, and often those places run promotions for 2 for 1 burgers or whatever. I guess the difference is during the Depression there weren't any food subsidies so everything was expensive.

The problem is Linux, not LibreSSL. Kernel.org needs to figure out if they are depreciating or keeping sysctl and if they aren't, find a failsafe way of gathering entropy inside a chroot or when file descriptors are exhausted. You can't expect OpenSSL nor LibreSSL to cater to the slapstick that is linux kernel development. If they can't get their shit together then switch to BSD or OSX.

I had no idea US campuses even had "free speech zones". Here students can do whatever they want and there's never been a problem. Everyday some group was handing out pamphlets on the way into the student union building for whatever cause it wasn't the end of the world.

No love for KeePass in that article? I recall all those password managers being broken by tobtu.com or various users on Hashcat forums. http://www.tobtu.com/lastpass.php

Voters are willingly accepting authoritarian rulers though. They want the heroic leader who fans the flames of sectarianism, uses nationalistic football club support songs in campaigns and wears a shiny uniform. When the economy dives the tried and true solution is the standard scapegoating of whatever visible minority to offset the blame of decades of mismanagement and corruption. Look at all the extreme authoritarian movements taking off in Europe right now. Those are going to appear in a country near you very soon. It's like they don't even need to hide it anymore, these new regimes can openly campaign on a promise to restrict rights and bring back the glory days of yore and get a standing ovation. The reaction to mass surveillance here has been "only illegal immigrants need to worry or criminals".

We don't. I remind every group that tries to automate voting in my province that on election day somebody is going to denial of service the system to use it as an attention seeking platform which will just force a physical vote anyways. Other ideas floated like blockchain decentralized voting are also impossible since none of us can run a trusted personal device to vote with, and plenty of voters have no access or don't want access to phones or any other devices. Worse, every couple of elections there's some sort of scandal where a foreign "politically exposed person" has been caught propping up local candidates or outright fielding their own puppet to seemingly unimportant elections like the parks board so they can reap real estate or resource mining benefits. Imagine what kind of havoc a foreign state could wreak on an electronic voting scheme.

It's much more transparent to just do it by hand count though they tried to sabotage that too http://fullcomment.nationalpost.com/2014/03/11/dont-undermin...

Blackhat Python is out in November http://www.nostarch.com/blackhatpython 'Automating offensive forensics' should be an interesting chapter

I used chrome to translate it https://support.google.com/chrome/answer/173424?hl=en

Old man, sign ze papers! They are merely a statement that you have not been mistreated while you have been here.

NSS does something similar since NSS will not be able to access /dev/urandom via file system after the sandbox activates the chroot so they reserve it first and fails with a log warning if no descriptors are available.

The sketchy entropy is only an example, and is a work in progress. Comments read "XXX Should be replaced with a proper entropy measure." and is only called if entropy collection via /dev/urandom and sysctl have failed. If the sysctl method is depreciated it does raise(SIGKILL). They also rearranged getentroy_linux.c so that the main function with the important comments is at the top in hopes whoever is porting reads it.

If you were porting this to a GNU/Linux distro, you can read their list of options and raise (SIGKILL) resulting in silent termination if that's what your platform decided to do if both entropy methods fail, or test for it earlier and fail. Since they are BSD developers they leave it up to whoever is porting to decide.

>First, LibreSSL should raise an error if it can't get a good source of entropy.

Comments for getentropy_linux.c explain this http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/cryp...

We have very few options:

- Even syslog_r is unsafe to call at this low level, so there is no way to alert the user or program. - Cannot call abort() because some systems have unsafe corefiles.

I read in an interview you can ask to see the source if you sign plenty of NDAs and are a large prospective customer. Cryptophone GSMK operates the same

The Silent Circle phone app is end to end encryption, it's their other service that offers "Out-Circle Calling" which is encrypted to the PSTN. I don't understand the dedicated network PR either

There is for business use.

Easy to make your own burner phone with customized AOSP for temporary use while in China or CIS/Russia if worried about industrial espionage or legions of criminal blackhats hanging around hotel wireless APs. After going through the source removing stuff like debuggered and GPS binaries, and writing custom init scripts can drop in TextSecure, Redphone and many other open source apps, thegrugq's Darkmatter app, platform sign them and enforce with middleware install-time mac to prevent anything else not signed being installed and use dm-verity to check system.img on boot for tampering. Lot's of business travelers need something reasonably secure to bring that they just end up throwing away when they return. Boot a Mobiflauge patched kernel temporarily with fastboot and wipe/encrypt the device when you get back for safe disposal, then flash Paranoid Android or CyanogenMod to it and sell it on CL to get some of your money back.

There's also Nexus 7 devices that can be bought without a baseband to do this. Essential reading is the Android Hacker's Handbook by @pof. Of course using any phone for something illegal is a guaranteed way to get arrested no matter what has been done to it. The hardware will always be a bundle of proprietary blackboxes, likely with a law enforcement door to brick it, record meetings with the mic or track the owner.

the function name is arc4random but it's chacha20 http://marc.info/?l=openbsd-cvs&m=138065251627052&w=2

OpenBSD can handle the hostile tone, they aren't fragile feels about criticism. The whole point is to release this early so they (and other contributors, like Adam from Google) can get feedback so it's good people are trying to port it and offering opinions however if anybody wants to constructively criticize the project or make recommendations they have to post on the mailing list because I doubt any of them will respond to some random guy's wordpress site. If you just throw up a site and blast them you're accomplishing nothing except link bait. They have a good reason to use -Werror and would explain why if this was posted to openbsd-tech

Reminds me of a similar talk Poul-Henning Kamp gave where he presents a thought experiment on how it would be possible to subvert open source projects to ensure the priority is insecurity http://youtu.be/fwcl17Q0bpk

Did you watch the video? He looks normal to me. Maybe it's just an awful pic.

This is a good talk regarding "Trusting Trust" for binary toolchains http://youtu.be/QogdeTy7cDc

To maintain a police state you need mass surveillance and informants. Secret police make you disappear long before your armed rebellion starts and your neighbors will be too scared to get involved or are the informants who turned you in. Flooding the streets with police isn't needed, along with informants they can always work with gangs like Assad does to act as street enforcement. The state's only cost is looking the other way while trafficking goes on and paying a network of snitches in every community.

Indeed. CIA director lost his job when the FBI spied on his mistress' email account. No.2 Admiral of Strategic Command lost his position too for some gambling scandal. Certainly possible to coerce or blackmail other positions of power that are unelected. Not everybody is shameless like Anthony Weiner

Power corrupts, with all this unchecked surveillance somebody is going to use it against their political rivals it's inevitable. There could be lower level corruption too with DEA agents splitting the spoils of busts with NSA analysts in exchange for intel. Lobbyist payoffs for industrial espionage or intel on protester action against their pipeline plans. If none of this is reigned in who knows how long democracy will last, all the ingredients for a totalitarian state are ready.

Doesn't Adblock Plus permit google ads by default hence the need for Adblock Edge https://addons.mozilla.org/en-US/firefox/addon/adblock-edge/

The idea of a higher power is a deity and nothing else. AA spells this out further with 6 more steps that specifically refer to said deity. They encourage a group confessional and penance to be absolved of your behaviour or crimes while wasted. Abstinence is the only solution because religions do not tolerate anything else. For some people belief in superstition will help them get off the booze/drugs for others it won't work. Detox supervised by medical staff and a regular visit to a shrink to help you with impulse control is all that is needed. Unfortunately this costs money which many addicts don't have so they are stuck with AA who are unable to assess their program failure rate because it would be admitting that God has failed.

They lament how much security costs yet pay Microsoft licenses. It's just a big meeting of lobbyists bring your pen and notepad, sit in a meeting room converted into a cheap makeshift SCIF. Leave your proprietary consumer devices at the door on the way in

Nobody uses that much water to grow indoor weed. Plenty of grow guides around, if I remember correctly water every 3-5 days depending on if coconut fiber or soil, and pot size, flush daily towards the end of the flowering cycle.

Meanwhile, the average California household was estimated in 2011 to use more than 360 gallons of water per day. http://blogs.kqed.org/lowdown/2014/01/23/how-much-water-do-c...

Of course nothing was said about the wine industry, or how California uses 6 billion gallons of water annually to irrigate highway vegetation.

or blackhat it up with tinyScheme http://philosecurity.org/2009/01/12/interview-with-an-adware...

He was testing new material on an audience, most of those notepad jokes ended up in the polished routine. Lot's of comedians will workshop their jokes first on a small crowd, though it does leave you wide open to having them "borrowed" by other comedians before you work them into your act.

The guy who wrote the Cheers sitcom TV theme song never had to work again and lives off royalties.