divegeek

What do you mean by "break"?

I would hate that one. Too time-consuming.

Java doesn't have unsigned integer types. Google is mostly a Java shop.

Sure, I will. I just retired this little gem, after six months of faithful service: ahbag6uWXa0aj0ee

Ahh, the memories.

BTDT and it was a huge relief when I moved my domain to Google Apps and started using Gmail. Unless it's gotten hugely more effective than it was a few years ago, Spamassassin is nowhere near as good as Gmail at recognizing spam, and spamfighting was the biggest of many chores involved in running my own server. I was constantly having to tweak and refine things to keep my spam filtering effective.

I don't miss running my own MTA. At all.

The best way to fix this is to eliminate the S-box lookup, thereby making AES constant-time.

For example: http://rd.springer.com/chapter/10.1007%2F11935070_14

True, and GPS navigation can have real-time traffic information while a cabbie can at best make an educated guess.

What's _really_ valuable, though, isn't real-time traffic information, but future traffic information. What matters isn't the traffic right now, but the traffic as it will be when you arrive at a given portion of the journey. I suspect that at present cabbies have the edge there, but that edge will also be swept away by predictive algorithms incorporating knowledge of typical traffic patterns plus lots of inputs about events that may affect traffic.

The latter point is particularly interesting if a navigation system acquires enough scale that it is directing a substantial fraction of the traffic. In that case, it knows not only what external events may affect traffic, but can further make decisions to control the flow, distributing and smoothing.

The article says there is timing data, with microsecond resolution. That's how the author's tool is able to provide "real-time" playback.

There's no such warning displayed, because that would be a security hole.

This password security measure is a Chrome extension that's required by company policy to be installed on all corporate machines. It watches all input (to browser forms) and if it detects your password being typed anywhere other than an actual sign-on page, then the next time you sign on successfully you're required to change your password. I believe there's also an e-mail notification, but it's delayed.

This is actually a pretty good password security technique, specifically because people often inadvertently type their password into the wrong forms due to focus errors, lack of caffeine, etc.

Treaty obligations do not have "almost constitutional standing". Treaty obligations have exactly the same standing as any law passed by Congress, whether they're constitutionally ratified (which is extremely rare), or congressional-executive (the common kind), in which the president signs a treaty that is completely non-binding on the US, but promises that Congress will enact legislation to fulfill its terms[0].

In either case, there is zero domestic legal consequence to deciding to ignore the treaty provisions. Technically a decision by the executive branch to violate treaty provisions is a violation of federal law, but there are no consequences. Obviously, if the US decides to violate a treaty agreement there may well be international consequences, including other nations' decisions to back out of the treaty, to refuse to trust the US in other negotiations or treaties, etc. All of that, of course, is exactly the same regardless of whether or not there is a formal process of derogation.

[0] There's a third form of treaty, "sole executive". That form is applicable when the treaty obligations are entirely within the scope of presidential power, such as Status Of Forces Agreements which the president executes in his role as Commander-In-Chief. Those, of course, have no legal standing at all except as lawful orders from the president to his employees.

OTA update should be showing up any day now. I don't think specific dates for specific devices have been given, but it was supposed to start rolling out yesterday.