2,172 karma · joined November 28, 2010
Multi-party computation (MPC) enables you to participate in public key cryptography with shares ("parts") of a private key divided between multiple participants from the get-go, i.e. without ever having the private key in memory at any point in time.
So for example, if you divide the shares between mobile devices and servers then all of them would need to communicate with one another to sign a message without any of them knowing the private key. There are variants (e.g. 2 out of N, etc.), but that's the gist of it.
Connecting it to cryptocurrency wallets, you can then use this scheme to create accounts where the control is shared between multiple devices and "mathematically" it doesn't matter then if one of the devices is compromised - it could never do anything on its own.
Obligatory reference to Reflections on trusting trust [1]
Hosted a party! In seriousness though, s/he refers to the German occupation of the Netherlands in WW2.
EDIT: revisiting my comment (and the wikipedia article linked), a reflection or amplification attack in this context is sending traffic and generating (perhaps much more) traffic from a different source than yours as part of an attack. For example, you could spoof the IP address of the HTTP packets and cause the server to port scan another machine -> little traffic (HTTP request) causing a lot of traffic (port scanning). As part of a DDOS attack, a botnet for example could use this to amplify their attack and masquerade the source.
[1] https://en.wikipedia.org/wiki/Denial-of-service_attack#Refle...
Anyone reading this, please post if you find any
Re: books, I liked Robert X. Cringley's Accidental Empires, but it covers only until 91 (or 93 if IIRC for the 2nd edition) of the PC industry and not really technical.
edit: also, of course: https://devblogs.microsoft.com/oldnewthing/
Source? Genuinely interested
I have no idea if they do, but it’s foolish to even cause such questions and disambiguation with your brief (which you inevitably do when you do “morals”)
Was excited to try it more after an initial impression, but this is a no-go for me:
> 1. We promote moral values.
Which of course is code word for "We promote our values". Can't believe we're in 2020 and this is part of a pitch.
Just evidence that documentation != institutional knowledge. It's not actionable knowledge if no one reads it.
The trading system and its operators deserve whatever fate results from such a decision.
Because so many others use it, if you care about latency to the counter-party server it's often a nice way to ensure low latency (by using the same availability zone).
I’m sure there are projects where it’s useful, but not “every company” useful like SQL or even a server supervisor framework. I would be happy to be proven wrong.
Exercise has always been important. So has connecting with people or marketing.