2,206 karma · joined April 4, 2012
Minneapolis, MN.
Does any of that fall under "user experience" for you?
This attack works by measuring the absolute (wall) time that elapses during many crypto operations and deriving the speed / private keys based on statistical methods applied to that timing data.
Side-channel attacks are by definition, attacks against unintentional information leakage by a machine. The laws of thermodynamics virtually ensure that side channel attacks will be a persistent issue as long as computers are made of matter and consume electricity, multi-tenant computing exacerbates the issue.
There is likely still potential for side channel attacks. From a 'first principles' approach a computer is always going to leak information about it's current state (power, noise, emi, etc) and the methods / tools / techniques for analyzing that leaking information are only getting better.
The multi-tenant nature of modern infrastructure is the bigger issue in play here.
Other people in this thread: Just disable turbo boost!
cloud providers: quivering over the cost implications of either.
>We have demonstrated how a clever attacker can use a novel chosen-ciphertext attack against SIKE to perform full key extraction via remote timing, despite SIKE being implemented as “constant time”.
That's a pretty clear cut power dynamic no matter what the VCs recommend.
>he holds a majority of shares
>My co-founder has decided he wants to pivot
>My co-founder has said he would be fine with me pursuing the initial idea
>asked my co-founder for rights to use the existing code in my new venture, he refused
Are you sure you are a co-founder? It sounds like you are an employee
Says who? What's the penalty? Some silly fine?
Elon loves to do exactly that, he does it now just to style on the SEC with how rich he is.
Hard to find longevity or stability in a role that exists to fail
It's also a pretty big negative mark for merchants that get charge-backs issued against them, if just a small percentage of people used charge backs to cancel these "subscriptions" it would make their processing fees skyrocket or even get them dropped by the major processors
I always assumed that was the point of the document to begin with.
Is anyone collecting objective data on the average lifespan of google products that aren't search, ads or maps?
Trading securities and/or advocating for a free & fair market in which to trade those securities =/= literal violent insurrection.
Sure looks like a rigged game to me.
Meanwhile you're jumping on internet message boards to try and explain how "the man" is actually totally right in this situation and everyone should really go back to dutifully enriching him without questions.