Y'know what sucks?
Cryptocurrency grifting.
Y'know what doesn't suck?
Furry blogger dropping a 0day on those fools
(I'm told that this will be available on squirrelly.blog when DNS stops being a fuck)
4
Post
Replies:
7
No replies yet
Be the first to share your thoughts.
@soatok > Jesus fucking Christ, what mouth-breathing, beady-eyed, slack-jawed, sister-fucking dipshits wrote this?
Was his name Claude?
@soatok I was in disbelief when seeing that counter value that I had to check the source code. Oh gawd, they really did an xkcd.com/221 .
But then I wondered: why that number? Could it be that they copied the same flawed logic from the unmaintained JS library they're using for AES? https://github.com/ricmoo/aes-js?tab=readme-ov-file#ctr---counter-recommended
Truly flabbergasting.
2
@litchralee_v6 @soatok The one time I've cracked a cryptosystem in anger, it was because someone forgot to set an IV. Classic mistake.
@litchralee_v6 @soatok ah, but see, 5 is one more than 4, so therefore it must be more secure. logic!
1
@gsuberland @soatok I've long wanted to make exceedingly-niche T shirts for myself, the sort that reference things which read mostly normal for the general public, but would pique the interest of people in that field.
I feel like a shirt that says "// The counter is optional, and if omitted will begin at 1" followed by an unlabeled diagram of the AES S-box would meet that criteria.
@soatok
*snerk*
Nice nice nice nice.
.... did they actually?
XD
Oh gods, I miss when the cryptocurrency slop was at /least/ the domain of actual cryptography nerds.
Such a fundamental misunderstanding of the whole gods damned point. It's so incompetent I'd almost suspect them of intentionally weakening their product.
