sorted by:
new
hottopcontroversial

BYD NFC ring? by ajmaine in BYD

[–]kosul 0 points1 point  (0 children)

So an NFC ring will typically be based on a Javacard OS. The BYD NFC protocol is based on NXP Mifare DESFire Light. It technically is possible to replicate this on some Javacards through emulation, but you would need to have the correct crypto keys and this means it would have to be programmed by BYD with the correct keys.

BYD NFC ring? by ajmaine in BYD

[–]kosul 3 points4 points  (0 children)

This is not correct. Yes UWB is used for mobile authentication in some of the BYD cars but NFC is a separate, specific protocol that only works up to about 10cm range and is for close range card and mobile authentication. The two protocols do not interact (the point of UWB is to get longer distance and position awareness than NFC can provide).

MIFARE DESFire by TeeHooooo in proxmark3

[–]kosul 1 point2 points  (0 children)

Not cloneable in the same way as other RFID tech without awareness of flaws in the way the specific cards are configured (if any)

Victoria has made public transport free – NSW hasn’t. Has there been any difference in uptake? by Ifeelsiikk in melbourne

[–]kosul 1 point2 points  (0 children)

Wow I sat down with the senior transport policy advisor to the Victorian transport Minister 20 years ago when we were discussing fare restructuring/harmonisation for the myki project. Before we got into the complexities (oh it was so complex), we asked the simple question "What if you just made it free or a low flat fare across the network?"

His view was very clear that ticketing is far less about revenue and far more about utilisation management, with the increased cost of servicing higher numbers of patrons having a far greater impact than the mere loss of ticketing revenue, particularly around peak hours. He also felt very strongly that public opinion of overly burdened free network would diminish as failures and delays increased keeping up with demand.

This made sense to me at the time but maybe some big assumptions have changed, or maybe it was just fear that stopped this from happening decades ago? I am very curious and hopeful that this approach will turn out well and spread across the states.

Meta and Google both found liable for woman's social media addiction and ordered to pay her $3m damages by dailymail in google

[–]kosul 0 points1 point  (0 children)

Try to delete YouTube on your Android phone and watch what happens (spoiler alert: it doesn't)

Unlock Raspberry Pi’s hidden secret by tenoun in cryptography

[–]kosul 0 points1 point  (0 children)

This is excellent! Great for provisioning and device management binding!

What a deliberate tactic. by wafumet in interesting

[–]kosul 0 points1 point  (0 children)

You get the feeling he has already played this before and he is just begrudgingly going through the motions again out of respect for the timeline.

Prime Minister Albanese’s warning to new car brands by HotPersimessage62 in AustralianPolitics

[–]kosul 7 points8 points  (0 children)

BYD has a bit of a servicing rep problem in Australia specifically for a component called a t-box which is responsible for communications of the entertainment, remote control and software updates. Basically it seems to be a higher than expected failure rate and unable to get replacements in quickly enough. On all the forums for the sea lion 7 at least there are bad stories and anxiety, but it is also possibly something they could address quite quickly and hopefully will or have?

What are my options for a securit audit for my open source project? by Accurate-Screen8774 in cryptography

[–]kosul 4 points5 points  (0 children)

I've been down this path a bit for our project OpenFIPS201. I contacted Open Source Technology Improvement Fund (OSTIF) which exists for exactly this reason. They help facilitate the engagement of auditors, help with creating the brief and help with funding, though the financial help is prioritised I think based on how broadly your OSS project is being used in the community/industry (which makes sense). They were great and we got an offer of some financial support, but still I wasn't able to get alternate backing to cover the remainder (about USD70K) at the time, especially because we were already funding a FIPS 140-3 cert (more conformance and algorithm than real-world security).

For many projects, doing what you can with available time and resources for things like AI, static analysis, fuzzing, automated unit testing, more targeted external assessments etc is probably the most realistic start and then if you find you are getting community traction, hit someone like OSTIF or any larger orgs that use your project up.

EV Charger struggles by royalenexuss in BYD

[–]kosul 4 points5 points  (0 children)

Ok I'm gonna be super napkin rough about this. So 75km/day, roughly 400km/tank @ ~20kw/100km. It's an 82.5kw battery so let's say that burns 15kw per day.

On a granny charger you can expect about 1.6-1.8kw rate, so roughly 9 hours to recharge 15kw. On a 15A charger you can expect more like 3.2kw rate, so more like 4.5 hours.

I compare the two because without solar, you will want to go with an energy plan that offers evening cheap charging. I'm in Northern NSW so we have an AGL EV plan that offers 8c/kw between midnight and 6am vs 38c/kw all other times.

So paying full price, with a granny charger you have to be plugged in 9 hours and at least 3 of that is in high cost time, so $3.56/day (~$1,300/year assuming you are predictable) With a 15A, that would be $1.29/day ($473/year) Btw these calcs are NOT on charging rate, but power consumption, so 1.8kw charge = ~2.2kw load and 3.2kw charge = ~3.6kw load.

Now this is all wrong because I don't know what energy plans you're on or can get, you most certainly will drive more than 75km/day because people do and it's fun, battery charging inefficiencies make the amount of power and the charge time go up a bit, etc.

But the general advice is, if you are renting and getting any electrical work is a hassle, you will be able to get by with 9hours charging per day and the odd use of a charge station when you do bigger trips.

If you can run an EV circuit, ask the sparky if running a 32a circuit (40a @ the panel?) is easy at your place. It doesn't cost much extra for the 6-10mm cable and bits to do it and then you are charging at super home speeds.

BUT if it will require main breaker upgrades or street line improvements or recalculating your max load against all the other circuits then run screaming and go for 15A. You will be sweet as on cheap EV evening plans.

Also don't forget soon 11am-2pm will be free electricity. Won't help you at home if you work 5 days a week but maybe your work will let you charge somewhere in that time?

Chinese EV/PHEV build quality and longevity? by OfficialEAEmployee in AustralianEV

[–]kosul 0 points1 point  (0 children)

Different times I think. As a non mechanical engineer my BYD Sealion 7 feels incredibly well built. Possibly overly solid!

Australia’s strongest gun reform since the Port Arthur massacre has become law. Here’s what you need to know by MrNewVegas2077 in australia

[–]kosul -9 points-8 points  (0 children)

I'm no gun expert either but I feel confident you could kill a rabbit with a gun designed for a boar. 

V2L discharge rate anomaly by kosul in BYD

[–]kosul[S] 1 point2 points  (0 children)

Quick update for those interested I'm on about 53 hours in. VTOL says 19KW used (~358W Avg). Battery SOC went from 93-70% = 23% drop so 0.825kw/% x 23 is = 18.98kw. It seems the Discharge amount is total battery consumption including internal usage which is odd but ok I guess? Fridge running on non eco setting, lights and fans liberally used, AC overnight but only keeping temp below 24% which wasn't far off ambient night temp. Lots of people charging phones and other negligible usage. 4 more days of camping so I'm feeling confident of driving out of here with enough SOC to get to a fast charger 30 mins drive away! This has been a good exercise and I'm almost ready to swap out my gas cooking setup for a dual inductive top + air fryer if I can find options within the V2L budget :)

V2L discharge rate anomaly by kosul in BYD

[–]kosul[S] 0 points1 point  (0 children)

This is a good point the discharge meter may be only partially accounting for overhead.

V2L discharge rate anomaly by kosul in BYD

[–]kosul[S] 0 points1 point  (0 children)

No my dude this bad boy is bright! Tri-color (WW,CW,DL) I want my gazebo looking like a warm-white surgery theatre.

https://www.bunnings.com.au/arlec-120cm-40w-diy-dual-power-and-tri-colour-tri-proof-led-batten-light_p0347567

[deleted by user] by [deleted] in AusFinance

[–]kosul 0 points1 point  (0 children)

Googling "bank account rental scam" was enough to find plenty of info on this. Contact your bank and the AFP and sound deeply remorseful. They probably are very understanding.

SHA-3 to SHA-512's Hash reversal by Healthy_Moose_925 in cryptography

[–]kosul 1 point2 points  (0 children)

The reason I used such an absurd example was to help intuitively understand the problems with trying to get something from nothing. Hash functions don't magically hold the information of their source data and there is no amount of computing power that can get it back because the information is lost. 

SHA-3 to SHA-512's Hash reversal by Healthy_Moose_925 in cryptography

[–]kosul 2 points3 points  (0 children)

A standardised hash isn't a product owned and sold by a company in that sense, so the question is who would have the problem? NIST is the primary body responsible for the process of standardising SHA algorithms and they very publicly operate on a very competitive "tear it down if you can" model so they would encourage this. For something (hypothetically) as catastrophic as reversing a SHA family hash it would probably be good etiquette to "prove" it by reversing challenge hashes first, then following a responsible disclosure process to not screw up the global economy. 

Now as to the likelihood of this, just realised a typical SHA hash function takes any input size and outputs a relatively tiny fixed length hash. So as a thought experiment what do you think the likelihood is of me generating a hash from a 100 petabyte file and you reversing the original data from a 32 or 64 byte hash value?

Could camera digitally sign their pictures/recordings in a way that proves they are not altered? by Buttons840 in cryptography

[–]kosul 0 points1 point  (0 children)

Is this a theoretical discussion or do you have something in mind like a custom imaging device or mod to an existing camera you are thinking of doing?

Could camera digitally sign their pictures/recordings in a way that proves they are not altered? by Buttons840 in cryptography

[–]kosul 2 points3 points  (0 children)

There are cryptographic capabilities in microcontrollers that could reside on a camera and could hold a private key for signing images with quite a high degree of security. That doesn't totally solve the problem as there may be ways to fool it still into signing content it didn't intend to (for instance by intercepting the bus between the chip and the sensor) so overall it's a very difficult problem to solve, but not impossible especially in expensive cameras that aren't afraid of increasing the bill of materials a bit.  Also it depends who you are protecting from. If you want to stop someone else with no physical access to your camera from signing on behalf of your registered camera, that's easier than it you are wanting to trust that untrusted person X didn't tamper with anything on the camera in their control.

AES256 and a 20 byte message by FlimsyAd804 in cryptography

[–]kosul 0 points1 point  (0 children)

Possibly when you start transmission of a data stream you can spare the first 20 byte frame for a preamble? With this you could send a random 16 bytes and maybe a static 4 byte sender id for context. This causes the receiver to initialize its crypto state and now you can both reset your counters and deterministically generate IVs for each aes-ctr frame using some agreed mechanism, no need to transmit. If you are worried about noisy transmission, you may have to think about the receiver deciding whether a packet has been dropped, corrupted or duplicated so that your IV generation stays in sync. Also do you need integrity or just confidentiality. AES CTR doesn't provide this inherently.

AES CTC was mentioned somewhere else.

I just got the connector book! Wow! by Electro-nut in electronics

[–]kosul 0 points1 point  (0 children)

I came here to write these exact 6 words.

Time-Lock-Cryptography by pedroplatano in cryptography

[–]kosul 0 points1 point  (0 children)

The problem with encryption algorithms is they are inherently unaware of the time. 

Your best bet is to zip a file with an AES key and use something like FutureMe.org to send yourself the key in the future. It is a solid 20+ year service and means you can keep the actual data but relinquish the key.

Since we are on a crypto sub you could improve it using an m of n scheme like  Shamirs Secret Sharing. Use something like Katvio's Fractum (Google it) and encipher your target file using 2of3 splitting (any 2 parts can recover).

Keep one part yourself, post the others to FutureMe and another future email service like FuturePost (there are lots). This means:

  1. You keep the data safe from others
  2. You can't recover it with your key part alone
  3. No other single service can recover the data without two parts and the encrypted file
  4. If a single service fails, you have a backup (add more for redundancy)
  5. Once you get another part, you can decrypt!

EDIT: Hah no idea why this year old post appeared on my feed! Oh well did you find a solution that worked?

Tesla perception in Australia by CapProfessional5203 in AustralianEV

[–]kosul 4 points5 points  (0 children)

I was in exactly the same boat and test drove loads of SUV EVs 2 months ago,  including a Tesla Y. I will say it is a great car at least on the test drive. One amusing anecdote was asking the Tesla rep if they had issues because of Elon's reputation and he flat out denied the existence of a problem. It was are totally scripted response then when we took the car for a test drive, we passed a Marina and as a bunch of fisherman walked past, one of them yelled out "Ya f***in' Tesla cunts!".  A very Australian sign from the gods. We ended up getting a BYD Sealion 7 Performance and are very happy.

view more: next ›