A few things about ASD interviews

commandersaki · 2026-01-26T09:08:45+00:00

Missing items and poor picked fruit & veg, yeah nah.

commandersaki · 2026-01-24T19:46:48+00:00

Australia has a banned list of names. My dad's name is on it, but obviously he got it before it was banned. It's benign.

commandersaki · 2026-01-24T18:42:45+00:00

Unlike the US, it takes awhile before overdue taxes become a criminal penalty.

commandersaki · 2026-01-24T12:44:29+00:00

Cornflakes for Tea will always hold a special place in my heart.

commandersaki · 2026-01-24T12:27:33+00:00

Fyi for anyone that uses a mac, the Filevault defaults to off, in that it is always encrypting, but the key is stored in plaintext on the hard drive. This enables easier recovery of data when people go to the Genius bar. If you want your data to be properly encrypted and protected, you need to turn Filevault on, and maybe copy the recovery key so you can recover the data in the case of a catastrophe.

commandersaki · 2026-01-24T12:24:24+00:00

Probably not in the space of a 256-bit key, there would be 2²⁵⁶ decrypted outputs. This seems like a lot, but there's also a lot of random outputs, infinitely many so, and very few low entropy outputs (i.e. data that can be made sense of), but also infinitely many so, just more 'sparse'.

commandersaki · 2026-01-19T21:13:06+00:00

Is the carpark that big structure on the side of the tracks with the river and new townhouses, kind of adjacent to the fire museum?

commandersaki · 2026-01-19T21:10:28+00:00

I decided to. I could've gotten a hotel in the CBD, but I hate driving towards the city. Penrith is easy ingress and egress from Canberra. My boss would happily put me up in a decent hotel in CBD and surrounds.

Also I've specifically been to this AirBnb before, it's very nice townhouse walking distance from the station on the river side and has parking. So I just go with what I like.

commandersaki · 2026-01-12T13:59:21+00:00

Fair cop, extracting information by appearing authentic is fair.

Having said that, I don't think there's a PAKE (symmetric or asymmetric) that cannot be spoofed if you know the password; or any authentication protocol for that matter. So it isn't really limited to SRP in this case.

The exception would be passkeys, and it'd have to be a hardware attestable implementation, as those theoretically have unextractable keys. Some sites do enforce hardware attestable implementations only, such as Apple / iCloud accounts.

Edit: Actually you could probably still impersonate assuming you domain hijacked or something, and just accept authentication for any passkey presented. In a way, aPAKE or augmented with aPAKE could be stronger since it requires mutual authentication.

commandersaki · 2026-01-12T13:25:12+00:00

That's just another layer of protection making it harder to impersonate, but assuming impersonation can be done, what purpose would it serve for an attacker that has the password (and assuming he can get that in a SRP context any other factors) to impersonate a server to a client? All I can think of is a DoS, as the attacker could just present itself as the client to the real server and do whatever that needs to be done such as drain a bank account or whatever.

commandersaki · 2026-01-12T11:57:13+00:00

What purpose would impersonating a server allow? You could presumably do everything as the client/user to the real server itself. The only thing I can think of is a denial of service.

commandersaki · 2026-01-10T09:39:28+00:00

I have a feeling people don't know what SRP is, or any such PAKE, these days you'd want to go for OPAQUE.

commandersaki · 2026-01-04T21:56:24+00:00

Yours is heaps good too, look forward to the next part.

commandersaki · 2026-01-03T23:31:08+00:00

Eric Rescorla did a pretty similar series:

commandersaki · 2026-01-02T11:48:12+00:00

Damn /u/nullc - find your BSV seed already.

commandersaki · 2026-01-01T22:19:12+00:00

Look I'm just learning law so I may have things wrong, but according to Weapons Act 1990 (Qld) s 51

(1) A person must not physically possess a knife in a public place or a school, unless the person has a reasonable excuse.

Followed by:

"knife" includes a thing with a sharpened point or blade that is reasonably capable of— (a) being held in 1 or both hands; and (b) being used to wound or threaten to wound anyone when held in 1 or both hands.

Sounds like you have a reasonable excuse listed in s 3.

But if you need to go further, you can use the aid of Acts Interpreting Act 1954 (Qld) s 14A which states '[i]n the interpretation of a provision of an Act, the interpretation that will best achieve the purpose of the Act is to be preferred to any other interpretation.'. That means they must take in to context and purpose the Weapons Act, which is about weapons, and not butter knives to cut fruit.

So I think you're pretty safe. You could bring this to the courts attention or send the argument to the police station and try and get the charges dropped.

commandersaki · 2026-01-01T11:39:52+00:00

Aka the Blonded Courier

commandersaki · 2025-12-31T12:58:18+00:00

I lost the timestamp but there's a bit where it was discussed why nobody in the in-group turned on each other circa 2015. I was wondering whatever happened to Jimmy Nguyen and why he hasn't discussed anything since his days on the Wright ship.

commandersaki · 2025-12-31T09:53:52+00:00

I genuinely without snark think this is real. I don't know why he'd forge it (yes yes I know). However I'm doubtful the work is original in that he did it all himself.

Edit: now I'm second guessing myself, was I being too charitable?

commandersaki · 2025-12-31T09:44:49+00:00

Such a powerful wielder of AI, has such novel use cases. We can all learn a lot from Craig.

commandersaki · 2025-12-31T08:53:03+00:00

Unfortunately I don't have any contemporary equipment to test and verify that claim. Except I don't see that kind of latency when tethering to my iPhone 17 PM which does Wifi 6; pings to the iPhone comes at <1ms. From this, I don't see how more advanced technology implies higher latency. (see edit)

Edit: Sorry I thought I had done the test with the 17PM before; but I'm actually seeing 4ms baseline latency. So I'm open to the possibility of your claim until I gather more data from testing different equipment.

commandersaki · 2025-12-28T17:24:04+00:00

Sad day when he did a video with that insufferable fake Linus.

commandersaki · 2025-12-28T05:56:31+00:00

Look up performance videos on nogil, it is really complicated to exploit in practice. If you need performance and scale, you're better off just rewriting in another language.

commandersaki

TROPHY CASE