buu700

79 ms·

901.
by buu700 11y ago
Since no one else has explicitly brought this up: https://tonyarcieri.com/whats-wrong-with-webcrypto (also see Matasano's "JavaScript Cryptography Considered Harmful", etc.). There is nothing that a service l
902.
by buu700 11y ago
Reproducible builds are on our very-near-future roadmap at Cyph, which will be important to mitigate a hypothetical scenario in which we somehow lose our minds and deploy code that differs from the GitHub repo. We control the whole packagin
903.
by buu700 11y ago
Ah, then maybe it's just easier for me because I've never really liked fries and have always seen noodles as nothing more than vessels for sauces/cheeses/meats/etc. (a common complaint about shirataki is that it&#x2
904.
by buu700 11y ago
I would actually say that it's extremely easy, but only because any carb cravings I may have are met with the flour/sugar substitutes and pre-baked goods from LC Foods (holdthecarbs.com), along with other common carb replacements
905.
by buu700 11y ago
About two years now, and I'd been doing it less strictly / on-and-off for a year and a half before that. I've definitely noticed feeling much more focused and productive since starting, and it also helped with dropping from 2
906.
by buu700 11y ago
As someone who eats strictly keto (low-carb/high-fat), I actually have to make a concerted effort to get enough salt in my diet due to my naturally retaining less water than non-keto people. This includes making somewhat high-salt food
907.
by buu700 11y ago
Yep, exactly. We may need to pin things like TypeScript and minifiers to specific versions in our local environment's Dockerfile, but otherwise there should be no issues with other people's machines computing the same packages and
908.
by buu700 11y ago
Absolutely agreed! We haven't gone as far as to make Cyph truly FLOSS, but our source code is publicly available under the Ms-RSL: https://github.com/cyph/cyph In the near future, we plan to go further than that b
909.
How 2 SpaceX Alums Are Using Encryption for Good(dcinno.streetwise.co)
7 points by buu700 11y ago|4 comments
910.
by buu700 11y ago
I can name exactly one. Cyph (cyph.com) accomplishes secure E2E encrypted messaging by pinning a bootstrap in the browser that validates and executes cryptographically signed packages.
911.
by buu700 11y ago
Nope, it's really just an off-the-cuff thought I've had, not something I've put serious thought into the implementation of or tried to pitch to anyone.
912.
by buu700 11y ago
Well, yeah, that'd make more sense; I guess that was more along the lines of what I meant to say. Generally speaking, the idea is that the DMV (or some other government entity) would act as a CA for all of its citizens.
913.
by buu700 11y ago
Personally, I think the DMV should issue a private key to everyone in the US. Aside from making the implementation of a remote/online voting system trivial, it would rid us of the horribly broken way we've been using social securi
914.
by buu700 11y ago
+1. I once lost my ID and showed up at the airport with a photocopy of my passport; they just asked for whatever else I had on hand (credit card, company badge) and patted me down.
915.
by buu700 11y ago
Ah, thanks! That makes more sense.
916.
by buu700 11y ago
I'm surprised this wasn't announced officially by dang. I spent some time the other day searching for the official announcement of HN's new responsive design, and just figured I must've missed it.
917.
by buu700 11y ago
Cyph — Washington, DC / Los Angeles — Full Time — REMOTE Hiring for: Business Development / Enterprise Sales --- Cyph makes post-quantum encrypted communication dead simple, including voice/video calls and file transfers. Unl
918.
by buu700 11y ago
Google App Engine includes pretty much the same thing, except it's more mature since it's been around for ages. (JS isn't among its supported languages though — Go, Java, Python, PHP — but IIRC they may have recently added so
919.
by buu700 11y ago
Actually, that's an interesting challenge that the company that makes that bread (LC Foods) has run into with their nutritional labelling. Because fiber is technically carbohydrate (just not digestible by humans), there isn't real
920.
by buu700 11y ago
This one is fantastic, and only 1g carbohydrate per serving because it's primarily fiber and protein: http://www.holdthecarbs.com/low-carb-fresh-baked/low-carb-wh... (The company has some sort of patented flour su
921.
by buu700 11y ago
Fun fact: Cyph's certificate from DigiCert is the first EV cert ever deployed to a .onion address ( https://cyphdbyhiddenbhs.onion ).
922.
by buu700 11y ago
For Cyph, I initially looked into Tableau and various analytics platforms like Mixpanel, then ultimately realised that Google Analytics (which we were already using) had an events API that worked fine for our needs. See: https://
923.
by buu700 11y ago
I think the point is that this is an entire class of vulnerability that most people may never have thought about, but could very easily result in some nasty remote code execution and/or privilege escalation via setuid.
924.
by buu700 11y ago
> The end user doesn't care about IndexedDB. I'm not sure what this is supposed to mean; the end user also doesn't care about JavaScript or their OS kernel.
925.
by buu700 11y ago
My point is less about anything related to asm.js per se, and more that there isn't a good reason for wasm not to support this particular use case.
926.
by buu700 11y ago
Any idea if wasm / ES6 modules / module loader shims work with object URLs and/or data URIs cross-browser by design? Doing something similar for Workers, one of the problems we've had is that IE and I think Safari block
927.
by buu700 11y ago
That'd be perfect; thanks! I'll have to play around with that once wasm is in a testable state. As far as compiling within the browser, it sounds like compiling the wasm will be the same process as compiling to asm.js – except the
928.
by buu700 11y ago
>Could you import a module, and then call the resulting functions from within your Worker? ... I'd be interested to hear them. I have more detail here[1], but what it comes down to is that our application's security model is de
929.
by buu700 11y ago
Hmm, neither one of these options (ES6 import or <script> type wasm) can quite fit in with the way we're using asm.js (including it inline with other JavaScript inside a Worker[1]). If there were a way to flexibly invoke wasm in
930.
by buu700 11y ago
Any idea how this will end up working in practice? If it will actually require linking to an external .wasm file, that'll break the way we're currently using asm.js. I'd like to see something that works more or less to the

More ›