Retr0id

27 ms·

871.
by Retr0id 7mo ago
I know I'm responding to an LLM but in the interest of not polluting the dataset further I'll point out that all the primitives used here are already post-quantum secure.
872.
by Retr0id 7mo ago
Mastodon infra can have outages, too.
873.
by Retr0id 7mo ago
> The VerifyHMAC() function unconditionally returns true when the HMAC field is empty This kind of thing is super common in vibecoded crypto, I wonder why it keeps happening.
874.
by Retr0id 7mo ago
Mmmm vibecrypto, my favourite. I don't see anything obviously broken (at a glance) but as a perf improvement, there's little reason to use Argon2id for the "verification hash" step, might as well use sha256 there. Ther
875.
by Retr0id 7mo ago
The perceptual hashes used for this kind of thing are, necessarily, much more susceptible to collisions than cryptographic hashes - so it's not out of the question at all.
876.
by Retr0id 7mo ago
This is why I regularly reset my face.
877.
by Retr0id 7mo ago
I don't know the full picture behind their decision-making but immutability is much easier to reason about in a distributed system, in general.
878.
by Retr0id 7mo ago
> mailing lists were large group emails in old typewriter font lol
879.
by Retr0id 7mo ago
This is true, but just about everyone has a symlink cycle on their system at `/proc/self/root`, and for the most part nobody notices. Having a max recursion depth is usually more useful than actively trying to detect cycles.
880.
by Retr0id 7mo ago
GP was talking about symlink cycles though, which can't produce orphans during deletion.
881.
by Retr0id 7mo ago
I'm very sceptical of their claims that ~780Hz is in some way special, especially the way they represent it graphically. Playing a frequency sweep while wearing WH-1000XM3 headphones, I don't notice any particular drop-off there.
882.
by Retr0id 7mo ago
Considered broken by what?
883.
by Retr0id 7mo ago
Quantum computing does not break all cryptography.
884.
by Retr0id 7mo ago
> Q-day means there is a way to deterministically retrieve any private key from a public key That's exactly what it means. (Note also that under ECDSA you can retrieve a public key from a valid signature). How do you prove anything,
885.
by Retr0id 7mo ago
A hard fork implies a difference in consensus rules, and what do you propose that difference be? Existing wallets need to actively commit to some PQ signature mechanism, prior to Q-day.
886.
by Retr0id 7mo ago
It's a property of the filesystem, docker does not virtualize fs.
887.
by Retr0id 7mo ago
"the sqlite people" don't say anything that contradicts this
888.
by Retr0id 7mo ago
They tell you to use a proper FS, which is largely orthogonal to containerization.
889.
by Retr0id 7mo ago
It's an artefact of the "second chance pool" mechanism.
890.
by Retr0id 7mo ago
Perhaps they're using NFS or something - which would give them issues regardless of container boundaries.
891.
by Retr0id 7mo ago
> I think you're exactly right about the WAL shared memory not crossing the container boundary. I don't, fwiw (so long as all containers are bind mounting the same underlying fs).
892.
by Retr0id 7mo ago
> This is unlikely to work across containers. Why not?
893.
by Retr0id 7mo ago
I do like Go's syntax but I can't help thinking the best language for C interop is C.
894.
by Retr0id 7mo ago
I don't really "get" the sweet-spot being targeted here. You don't get channels, goroutines, or gc, so aside from syntax and spatial memory safety you're not really inheriting much from Go. There is also no pathway
895.
by Retr0id 7mo ago
It's not my methodology to be clear, but they have picked up actual regressions that happened in the past - e.g. https://news.ycombinator.com/item?id=46815013
896.
by Retr0id 7mo ago
Something like this: https://marginlab.ai/trackers/claude-code/ (see methodology section)
897.
by Retr0id 7mo ago
I'm just saying it's epistemically unrigorous to the point of being equivalent to anecdata.
898.
by Retr0id 7mo ago
You mean the Claude output? The same claude that has "regressed to the point it cannot be trusted"?
899.
by Retr0id 7mo ago
This seems anecdotal but with extra words. I'm fairly sure this is just the "wow this is so much better than the previous-gen model" effect wearing off.
900.
by Retr0id 7mo ago
Good to know that my claude-dar is still working.

More ›