安全与隐私gwern.net编辑精选
死亡笔记：L、匿名性与逃避熵（2017）
Death Note: L, Anonymity and Eluding Entropy (2017)
2019 — 2021，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
Gwern 的经典长文，用信息论逐帧复盘《死亡笔记》中 L 与基拉的博弈：分析夜神月因暴露笔记规则、直播挑衅、时间模式等一系列操作失误和侧信道泄露，如何把'全日本任何人'的巨大匿名空间一步步压缩到自己头上，并推演了完美犯罪者本应如何对抗熵减。它既是对原作的严谨同人分析，也是一堂关于匿名性与操作安全的实战课。
为什么经久不衰：把侦探漫画当成真实的匿名性案例来严格计算比特与熵，趣味与安全思维兼备，因此多年来被反复重读、屡上首页。
HN 评论精选
月最大的败笔是暴露笔记的存在和规则；固定时间批量书写才是更稳妥的方案。
我的看法稍有不同。月之所以犯下大量错误，恰恰因为死亡笔记太强大——若月不犯明显错误，L 几乎没有任何合理办法抓住他（而且那样故事也会很无聊）。毫无疑问，月最大的错误是暴露了死亡笔记的存在及其全部规则，这不仅让 L 几乎得到了所需的全部信息，还把他此后的行动都框死了。如果不知道笔记的规则，我认为即使 L 百分之百确定月是凶手，除了直接绑架或暗杀外也无计可施。不过比起文章结尾的方案，我觉得有个简单得多的办法：1. 用一周时间收集想写的名字；2. 再等一周，然后在每周固定的时刻统一写下；3. 严格保持这个日程。名字要尽量公开、广为人知，让信息流向无从追溯（记住，目标是制造恐惧，而非精确打击）。坚持固定日程意味着此后不会再泄露任何额外信息。
arugulum查看英文原文
I would frame things a little differently. Light makes a lot of mistakes because the Death note is incredibly powerful and there would be almost no reasonable way for L to catch Light without Light making obvious mistakes (and would also make for a boring story). Undoubtedly, the biggest mistake Light makes is revealing the existence of the Death Note, and all the rules therein, which not only gives L (almost) all the information he needs, but also traps him from any subsequent activity. Without knowing the rules of the Death Note, I don't think L could have done anything (besides outright abducting/murdering Light) to stop Light, even if he is 100% sure Light is "responsible". That said, I feel like a much simpler solution than what's proposed at the end of the essay is: 1. Gather up the names you want to write over the course of a week. 2. Wait another week, then write it at a specific point of time of the week. 3. Keep to that schedule. The names need to be as public and as well known as possible such that it would be impossible to trace the flow of information. (Remember, the goal is fear, not specificity.) Keeping to that schedule means you will never leak more information thereafter.
质疑文章对'错误4'的分析：L 本就计划逐地区轮流直播，先从小城市开始才是更优策略。
文章很有意思，我唯一真正有异议的是'错误4'的分析。基于 L 在广播中的说法，他的计划本就是逐个地区轮流直播，直到被'杀'为止；林德·泰勒是以活命为交换的死刑犯，会配合多次广播。而且即使不是直播而是录播，月也不可能分辨出来，反应会一样（何况林德在 L 的看管下，L 自己也知道他死了）。在《死亡笔记》创作的年代，互联网传播还不普及，人们至少要几小时才会知道这类广播（足够在各地轮流播完）。L 或许还希望基拉不在大城市，这样能砍掉更多比特的熵；我认为更好的做法其实是先从小城市开始播——大城市里这种事件更可能被迅速传遍全日本。
cyphar查看英文原文
Very interesting article, my only real contention is on the point made in Mistake 4: > You can see it was a gamble by considering if Light had been outside Kanto; since he would not see it live, he would not have reacted, and all L would learn is that his suspect was in that other 2/3 of the population, for a gain of only ~0.3 bits. My understanding of L's plan (based on what he said in the broadcast) was that he intended to do several live broadcasts, one in each region, until he was caught. Lind L. Taylor was a death row criminal being offered a deal to survive, and would've gone along with doing several broadcasts. Additionally, even if they didn't do it live and simply recorded it there's no way that Light would've known it wasn't live and he would've acted in the same manner (and since Lind was in L's custody, L would've known if he died even if Light didn't). At the time Death Note was written, mass internet communication wasn't as prevalent and so you wouldn't expect people to find out about events like the broadcast for at least a few hours (long enough to do broadcasts in each region). L probably hoped that Kira was in a less populated city since it would cut down on more bits of entropy (and I'd argue it would've been a better idea to start broadcasting to smaller cities first -- since it's more likely an event like this in a big city would be quickly broadcast to the rest of Japan).
强烈推荐阅读原作漫画，动画省略了许多理解剧情的关键细节。
我真心建议所有人——不只是漫画迷——去读《死亡笔记》。它非常非常出色，如此精雕细琢的侦探故事极为罕见。而且一定要读原作漫画，动画跳过了很多理解全篇所必需的细节。
Alekhine查看英文原文
I truly encourage anybody, not just manga fans, to read Death Note. It is very, very good. Very rarely do you find such a well-crafted detective story. And you have to read it. The anime skips over a lot of details that are necessary to fully understand everything.
提醒：文章包含大量剧透，未读原作者慎入。
如果你还没读过《死亡笔记》但一直把它列在待读清单上，别看这篇文章——标题里应该标注'含剧透'……
coldtea查看英文原文
If you haven't read Dead Note but have it on a shortlist, don't read the article. It should have "contains spoilers" on the title...
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选