cendyne

8 ms·

31.
by cendyne 3y ago
An AES key is symmetric. Both parties need it for this cryptographic operation. The OTP key is separate from other keys that enable WebAuthn. Also, please don't use Yubikey OTPs. While they can't be brute forced like TOTPs, they c
32.
by cendyne 3y ago
Alignment of large language models and machine learning is about shaping its behaviors to support the values of its maintainers and discourage behaviors that go against the same values. Like, you can't get a positive response by asking
33.
by cendyne 3y ago
Was their generosity for gifting you candy crush turned away?
34.
Mozilla wants its documentation to gaslight you(xeiaso.net)
4 points by cendyne 3y ago|2 comments
35.
by cendyne 3y ago
I get half a day of vacation per week of oncall. It is awarded months after the fact due to manual spreadsheet tracking and HR processes. That vacation is not eligible for pay out if I resigned.
36.
by cendyne 3y ago
https://cendyne.dev/posts/ Usually one article a month. The content is driven for what I feel strongly about in the moment, be it cryptography or managing teams to tech-social issues.
37.
by cendyne 3y ago
Looking forward to when edge services like Cloudflare, Cloudimage, imgix, etc. support JXL too. AVIF has such a harsh encoding time. It is also a bit too bulky in wasm on the edge to encode yourself too.
38.
Anything can be a message queue if you use it wrongly enough(xeiaso.net)
624 points by cendyne 3y ago|239 comments
39.
by cendyne 4y ago
For those wondering: the local threat here is a malicious extension can modify the function of navigator.credentials. While not malicious, this has been shown to be possible by 1Password. See https://www.future.1password.com&#x2F
40.
by cendyne 4y ago
Thank you for these resources!
41.
by cendyne 4y ago
The "augmented" label confused me a lot too. I saw Steve Thomas's presentation in person at DEF CON and could not find material online using that phrase outside of his materials.
42.
So Kyber it is The latest IP Update on the NIST workshop(twitter.com)
1 points by cendyne 4y ago|0 comments
43.
by cendyne 4y ago
An anime called Psycho-Pass comments on this. A system existed to replace the remote view with a cartoonish environment with chicken characters so the operators would not receive psychological harm from operating a violet instrument.
44.
by cendyne 4y ago
I love the adaptation for the season. ECB in halloween candy! The horror! https://twitter.com/FiloSottile/status/1578783337442938882
45.
by cendyne 4y ago
I have been personally emailed to participate in an interview under another candidates name. It set off so many alarms for me. I did not respond. Here’s what I was sent. > Hope you're doing well. > We're a tightly-knit team
46.
by cendyne 4y ago
I wonder what kind of efficiencies can be gained by swapping out metal for this in EV vehicles
47.
by cendyne 5y ago
Your example [1] on twitter for PHP is actually quite telling. I do not think it is well known among application developers, which is why I wrote this post. In fact, my base64 implementation elsewhere is vulnerable to this and it never occu
48.
by cendyne 5y ago
Hey thanks!
49.
by cendyne 5y ago
This happens to me when I research some RFC concepts surrounding oauth, saml, and the like. It’s incredibly frustrating.