BoppreH

13 ms·

211.
by BoppreH 2y ago
True, and hybrid cryptography is definitely the way to go. But there's more to it than just resistance to cryptanalysis: crashes, memory leaks, disabled security features (e.g., ASLR), irregular performance, supply chain attacks... PQC
212.
by BoppreH 2y ago
Excellent post, I've always recommended people to this series. I'm curious what's the general opinion on the production-readiness of these solutions. Open Quantum Safe, for example, discourages it's use in production, an
213.
by BoppreH 2y ago
> Program security requirements >> You must do the following: >>> Use memory-safe programming languages, or features that improve memory safety within other languages, within the alternative web browser engine at a mini
214.
by BoppreH 2y ago
I use https://healthchecks.io [1] to track backup tasks and alert if they haven't run in X days. With one cURL command at the start and one at the end, I also get alerts immediately if it fails, and can track duration. [1]
215.
by BoppreH 2y ago
I was scraping their website every few minutes, from a cloud provider, using a cookie I created by logging in manually while VPN'ing through the cloud (so the IP looked the same). Eventually the cookie started "expiring" quic
216.
by BoppreH 2y ago
- Oracle Cloud Free Tier[1] for a Ubuntu VPS (4 ARM cores, 24 GB RAM). Surprisingly pleasant and reliable, given who's offering and for how much ($0). It used to be on DigitalOcean, until they kept screwing up their FreeBSD support and
217.
by BoppreH 2y ago
I often have to download songs for children to sing, but they have trouble with fast or low-pitched songs. It destroys the audio quality, but they don't seem to mind.
218.
by BoppreH 2y ago
I sent you an email with the code and instructions. I won't share it openly because I don't want to tempt people into finding security flaws for fun. It's definitely not code that I'm proud of, but it's been serving
219.
by BoppreH 2y ago
I have a 3-letter domain that I use as my personal playground (think "xyz.com"). It features: - One-click anonymous upload of text, clipboard, and files. So from any computer, I can visit xyz.com + ctrl+v to upload the clipboard,
220.
by BoppreH 2y ago
The gyroscope aiming on mobile is fantastic! I've never seen a demo with such small latency and responsive to small movements. Even more impressive by being a web page and not a native web.
221.
by BoppreH 2y ago
This pattern has several other advantages that are worth mentioning: - You can attach the plan to your Change Management, both for documentation and approval. - You can manually edit the plan. - The plan can be processed by other tools (lin
222.
by BoppreH 2y ago
You can still do that, the folder is at: %appdata%\Microsoft\Windows\Start Menu\Programs\Startup I have a few sshfs[1] mounts there. [1] https://github.com/winfsp/sshfs-win
223.
by BoppreH 2y ago
> The incident did not quickly subside here. Embarrassing questions were directed in Federal Parliament to. the Government of the day by both Mr C Chambers (Member for Adelaide) and Mr F Daly (Grayndler) during the Budget debate the foll
224.
by BoppreH 2y ago
This also allows one to pass parameters to `foo.init()`, something you cannot do with naked imports.
225.
by BoppreH 2y ago
That's not a very useful definition of "in-band signaling". For me, the main difference is an out-of-band protocol that says: "The first two bytes represent the string length, in big-endian, followed by that many bytes p
226.
3D advertisement for Rewe supermarkets using Three.js(nachhaltigkeit.rewe.de)
2 points by BoppreH 2y ago|1 comments
227.
by BoppreH 2y ago
This is a scrollable canvas animation advertising "regional products" for the German supermarket chain Rewe. It seems to use a combination of 3D geometry with 2D sprites ("billboarding") rendered to Canvas, implemented w
228.
by BoppreH 2y ago
The explanation could be better, but I really like the idea. It punishes you for not updating your dependencies and for having too many direct dependencies. But it doesn't punish you for indirect dependencies (that you have little co
229.
by BoppreH 3y ago
I always enjoy these explainers that use computer science terms. In this case, you can be more precise about the type of graph: double-entry accounting creates a Directed[0] Bipartite Graph[1] with Labelled Edges[2]. Every edge is between a
230.
by BoppreH 3y ago
Oh, there's a Gwern page about that. That's perfect, thanks for the link.
231.
by BoppreH 3y ago
But publish it where, though? It has to be: - Publicly accessible. - Timestamped. - Immutable (or at least with edits marked as such). - Widely trusted (or too big to be bribed in small cases, e.g., Google). - And keep those features for ma
232.
by BoppreH 3y ago
I wonder why we don't have better (widely trusted and used) timestamping services. It has always been easy to prove that something happened after a certain time: take a photo of today's newspaper, mention stock prices, etc. But
233.
by BoppreH 3y ago
I was thinking of more genral API versioning, not just for web services. Like example.com/api/v2/ on steroids. And what happens with services sharing stateful resources? When the database schema is at version 10, a service ex
234.
by BoppreH 3y ago
Lovely idea, I'm curious to hear more about the deployment experiences. > combining the above system with socket-activation and scale-to-zero servers That sounds good at first, but less and less reasonable the more I think about it
235.
by BoppreH 3y ago
People accept manually entering types only at a relatively high level. It'd be different if types were "function that takes a non-empty list of even numbers between 2 and 100, and a possibly tainted non-negative non-NaN float in m
236.
by BoppreH 3y ago
I've never used OCaml, so I'm curious to what exactly happens, and if language design can prevent that. If I download a random project and delete the interface files, will that be enough to see issues, or is it something that happ
237.
by BoppreH 3y ago
I've heard that, but never seen an example*. If the type system complains of an issue in other code after a local change, doesn't that mean that the other code indeed needs updating (modulo false positives, which should be rarer w
238.
by BoppreH 3y ago
I've always wondered if global type inference wouldn't be a game changer. Maybe it could be fast enough with caching and careful language semantics? You could still have your IDE showing you type hints as documentation, but have i
239.
by BoppreH 3y ago
I find it interesting that there's no mention of private information after ~2020. No whistleblowers, private demos, chats with Altman, or anything not found in mainstream news. Is that required for filing a case, or is Musk operating f
240.
by BoppreH 3y ago
Probably not common, since that aspect is part of the complaint. See "E. OpenAI’s Shifting Corporate Structure": > 70. In the years following the announcement of the OpenAI, L.P., OpenAI’s corporate structure became increasingl

More ›