On: Flaw found in online encryption method

[nohat]

I took the 'the straightforward approach would require about ten core-years and would not scale well' to mean they had a more efficient method.

[tptacek → nohat]

They do, but does it matter? Ten core-years is not a forbidding threshold.

[nohat → tptacek]

Not really - it does make a difference between amateur attackers and professional, but the potential value is high enough that there will probably be plenty of well funded attackers.