commandersaki

5 ms·

31.
by commandersaki 3mo ago
I'm guessing none to be honest. It sounds plausible but in practice it's probably too difficult to do anything useful compared to other tried and true vectors. Everyone goes to the extremes when it comes to these theories and thro
32.
by commandersaki 3mo ago
How many victims are known to be exploited by video codecs? Compare that with the wider landscape of how victims are being exploited.
33.
by commandersaki 3mo ago
Looking at the comments from the previous thread at least on Android looks like you need to root the device. I'm not sure that is still required.
34.
2026.06.19: EuroQCI Feedback(blog.cr.yp.to)
2 points by commandersaki 3mo ago|0 comments
35.
by commandersaki 3mo ago
E2EE done properly is why. See 1Password security whitepaper for how.
36.
by commandersaki 4mo ago
OP was making the case that CGNAT adds to the latency in some significant way. Yes it adds latency, but it is of negligible concern.
37.
by commandersaki 4mo ago
You do realise that mobile usage is a subset of the Internet and the Internet is not just about end user connectivity. But you still haven't addressed my original point, how has IPv6 averted the impending (at the time) IP exhaustion pr
38.
by commandersaki 4mo ago
20 years too late.
39.
by commandersaki 4mo ago
NAT / CGNAT has been doing the heavy lifting extending the life of the Internet; ipv6 has done jack shit. If v6 was useful and actually averted v4 exhaustion we'd all be accessing v6 sites/addresses at this point. Put another
40.
by commandersaki 4mo ago
It was also predicted that the address exhaustion problem would be averted, in fact that was the purpose of v6. It failed to deliver.
41.
by commandersaki 4mo ago
Considerably simpler? There's two ways (maybe more?) to autoconfigure v6 addresses on a host, I'll never know or remember which to use. In v4 there's DHCP, that's all you need to know (nobody uses BOOTP). These endless c
42.
by commandersaki 4mo ago
Which is which?
43.
by commandersaki 4mo ago
We are still talking a fraction of a millisecond, a few hundred microseconds at most. People are blowing out of proportion latency saved with v6, it's negligible at best, or at worst let's not forget IPv6 is two separate island be
44.
by commandersaki 4mo ago
Sparing a few hundred microseconds of latency is tangibly a better experience?
45.
by commandersaki 4mo ago
Still not fit for purpose.
46.
by commandersaki 4mo ago
With crypto publicly available tests come in form of KATs (Known Answer Tests), it ensures that the implementation works for certain inputs and thus it'll probably work for the whole domain, but it does not protect from subtle forms of
47.
by commandersaki 4mo ago
So what has the reception been like with IETF?
48.
by commandersaki 4mo ago
I'm sceptical of verifying or generating ZKPs due to the cost of running a RISC-V program. But I guess if we have LLM inference in protocols, this might be acceptable. I'm not sure how it's fully used in the protocol and whet
49.
by commandersaki 4mo ago
I know internally they use an IPsec implementation written by Rust (I think in the iCloud infra). Heard this from an ex-Apple engineer Ben (forgot his last name) that did a wonderful presentation of Rust from first principles. He said that
50.
by commandersaki 4mo ago
Heaps excited about this because there's a dearth of work in application crypto as the mindshare is dominated by PQC or Crapto. I am a little sceptical of this because of the need for ZKP and running a RISC-V program for protocol inter
51.
by commandersaki 4mo ago
I was interested in Nix because it could automate setup and configuration of macOS features. But all it does is usually run defaults or some intermediatary. In the end I stuck with brew and wrote an idempotent setupmac() function in my bash
52.
by commandersaki 4mo ago
Homebrew is a non-profit project run entirely by volunteers, not employees. We need your funds to pay for software, hardware and hosting around continuous integration and future improvements to the project. Every donation will be spent on
53.
by commandersaki 4mo ago
Recommend changing link to https://encryptedspaces.org/ as that is non paywalled and more authoritative. I didn't want to make a new submission.
54.
by commandersaki 4mo ago
Very unlikely to lose support for Rosetta for Linux. Maybe just Rosetta 2 for mac apps.
55.
by commandersaki 4mo ago
I wonder if the custom virtio can be used to support attaching the built-in sdcard readers on macs which aren't exposed as usb.
56.
by commandersaki 4mo ago
Yeah I find this useful for redirecting storage/sdcard*, so you can format linux filesystems or use other tools. * need a usb sdcard reader for macbook pro cause the builtin is not usb)
57.
by commandersaki 4mo ago
Would be cool if you can redirect USB devices to the VM.
58.
Today I disabled IPv6 on my home router entirely(xcancel.com)
8 points by commandersaki 4mo ago|0 comments
59.
by commandersaki 4mo ago
Seems cold how they present this, but on the other hand I’ve ignored Ladybird because I just don’t think they’ll have meaningful impact, so I remain unaffected by this policy change.
60.
by commandersaki 4mo ago
I mean sure if it has to do with CPU & memory & storage there's probably little you can do except replace the SoC, but it's also the least likely component to fail. Everything else is a removable module and pretty easy to

More ›