Comments URL: https://news.ycombinator.com/item?id=49385440

Points: 1

# Comments: 0

Experience and user studies have shown that users have a hard time decoding what error messages mean. "This certificate is expired, but only for a little while" isn't meaningful for people who don't have a mental model of what a certificate is.

Furthermore, "downgrading" warnings increases the incentive to ignore issues, potentially causing more problems down the line.

I'll probably share a list in some way soon and will try to ask the wider cryptographic and TLS community if anyone can figure it out.

Even if it will be practically possible to build quantum computers for average users (given they currently rely on complex physical experiments, one can doubt that), there's the question of whether there's a need for "mainstream" quantum computing.

As has often been said, quantum computers aren't some magical thing that makes every computation faster. They are faster at some very specific problems like breaking cryptography (I doubt that there's a mass market for decrypting the old WIFI traffic you stored from your neighbor, and, these days, most internet traffic is already pq safe) and simulating physics (also probably not something average joe wants to do every day).

In all likelihood, quantum computers will be specialized devices used, e.g., by scientists. You may be able to rent your quantum computing time if that gets cheap enough to be practical, but I doubt many people will ever own one.

The only source seems to be a fringe right-wing news webpage (Apollo News) citing from an internal paper (which, it sounds to me, is just a vague proposal from a media oversight body). I have not seen any reports in major news publications, and would assume there's a lot of context missing in this reporting.

There were also those that tried to be both (I believe Assembly is doing both to this day) or those that kept the gaming out (Mekka/Symposium, which no longer exists, but there's been a followup party called Breakpoint, and later another followup called Revision that still exists).

You could start running things on ARM, but, almost certainly, that comes with a lot of extra friction. (Not saying that isn't a bad idea, it'd probably improve the ecosystem as a whole and flush out architecture-specific assumptions in server software. But it's not someting trivial to do.)

I also believe there were some android ASLR issues based on the same weakness (i.e., low early boot-time entropy).

But this is all quite old, and there've been massive improvements. Basically, "don't use a very old linux kernel" is your mitigation for these issues.

The problem with hydrogen electrolysis is its energy requirements to split water. The energy requirements for the desalination of water before that is a rounding error. It's not worth the hassle to develop electrolyzers that can deal with seawater.

Sure, that's extreme. But if you're unaware of the risks, you feel sick, and you believe it's helping you.

I mean, people aren't killing themselves in masses with it, but it happens every now and then. Easily imaginable that one in a few million people will have enough tendency to take more pills and is unaware of the overdose danger.

That's not how it works...

In modern protocols, you don't encrypt at all with RSA. You use a key exchange, and if you use RSA, you only use it as a signature algorithm to initiate the key exchange.

If you happen to want to encrypt with RSA, which you usually shouldn't, you first use a padding algorithm (the modern variant of that is called RSA-OAEP) with which you prepare and then encrypt a random key. That key you then use for symmetric encryption.

Clearly yes. (Ok, not everyone, but large parts of the IT and software development community.)

There's a long history of people trying to build software that detects bad software. It's known as Antivirus software. It doesn't work very well, because you're up against fundamental truths of computational theory (the halting problem).

Most hydrogen fueling stations receive it from the next steam reformer, which will make it from fossil gas.

While China is still very reliant on fossil-fuels, and particularly dirty coal, they're at the same time working on dominating the post-fossil age at astonishing speed. After they already dominate solar and batteries, they're working on doing the same for a number of other future green industries. They are already dominating future technologies like Green Methanol that most people in Europe or the US have never heard of.

So it's completely impossible that such malicious extensions still exist.

(may contain sarcasm)

Is this a parody?