cvwright

24 ms·

331.
by cvwright 5y ago
Recent convert to Anglicanism here. It’s a lot more formal than the Baptist tradition that I grew up in. There are a lot of rote prayers for every occasion - morning, night, etc. When I was younger I would have found this inauthentic, for
332.
by cvwright 5y ago
I bought this book after it came up in a previous thread on HN. It really is good. Short, simple, and direct.
333.
by cvwright 5y ago
The main result that I’m thinking of is quite old — going back to the Ford assembly line days IIRC. NPR had a great segment on it several years ago. I’m on mobile now, but I’ll try to so some digging when I get back to a real computer. I
334.
by cvwright 5y ago
Just wanted to point out that this > I truly believed in the mission, worked hard, was paid a lot, achieved great things and was overall very satisfied. and this > used to leave at 5pm sharp are not mutually exclusive. We have this we
335.
by cvwright 5y ago
SRP never got a security proof?!? Wtf man? I guess standards for publication have, uh, evolved a bit over the past 20 years. Thanks for the explanation, this was helpful.
336.
by cvwright 5y ago
I think this gets at the root of the confusion. Talking through this has been helpful, so thanks. So the main thing is that apparently using a PAKE is not sufficient by itself. Not revealing the password at login time only solves part of
337.
by cvwright 5y ago
> It seems like you're saying that SRP is OK as long as you don't use SRP, but rather a modern PAKE, and then call it SRP. No, that is not what I'm saying. The SRP paper says "Use a hash function to hash the password
338.
by cvwright 5y ago
> The server can store a sha256 of the PBKDF2 output of your client hashing process or whatevs? Before we started working on the PAKE thing, I actually kludged together something similar in my own client: https://github.com&#x
339.
by cvwright 5y ago
The shrug was that it’s weird to call something dead when it never really took off in the first place. > you shouldn’t use SRP in a 2021 design Ok I guess I’ll take your word for it. Which PAKE should we use instead? This is the perfec
340.
by cvwright 5y ago
Disclaimer: I'm not an expert in this stuff, just a 3rd party client developer who is interested in the topic. AFAIK, there are two ways to validate a new device in Matrix. It sounds like you're describing the interactive device v
341.
by cvwright 5y ago
Yeah, sorry if my description wasn't clear. > It sounds like what you want is a password-based KDF, to derive keys clientside for the encrypted bundle. The encrypted blob containing E2EE keys is encrypted with a symmetric key that&#
342.
by cvwright 5y ago
Here's one example where a PAKE would be very helpful. In Matrix E2EE chat, every user winds up with a ton of different E2EE sessions and thus a ton of different keys that they need to store. (This part of the protocol is unnecessaril
343.
by cvwright 5y ago
So the two main problems with SRP, according to this post, are: 1. It exposes the salt and verifier to the adversary, enabling a brute-force search for the password 2. It relies on the discrete log problem, and is thus vulnerable to quantum
344.
by cvwright 5y ago
You're being downvoted, but I originally had the same question. It's actually a native app. It's mostly Objective C, but increasingly written in Swift. https://github.com/vector-im/element-ios There is
345.
by cvwright 5y ago
Personally, I've had much better luck with MOCA than with powerline. Full gigabit speeds in an older 1940s house using basic Motorola adapters off of Amazon.
346.
by cvwright 5y ago
Or the billions wasted trying to rebuild Iraq and Afghanistan.
347.
by cvwright 5y ago
The problem with this theory is that people thought the same thing before WW1. Know who was the biggest trading partner for France and Germany in 1914? It was each other.
348.
by cvwright 5y ago
Agreed about Mastodon, unfortunately. But that has not been my experience with Matrix.
349.
by cvwright 5y ago
Mastodon and Matrix instead?
350.
by cvwright 5y ago
I can confirm this. I’ve been implementing App Store subscriptions this week and last. The StoreKit (1.0) piece is easily the worst thing I’ve had to deal with in building the whole app. But I’d still rather do this than try to build the w
351.
by cvwright 5y ago
You’re right that it’s infeasible to block everything dumb from an online system. Humans gonna human. > avoid surfacing them algorithmically and rewarding them This is the key. And I’ve come to believe that the only way to prevent the
352.
by cvwright 5y ago
For $4k you could get an (old) refurbished R820 with 1.5TB of (old) DDR3 RAM. Which is a far cry from the claimed 4TB, but still, damn.
353.
by cvwright 5y ago
I want the original version back. 2000's Facebook was actually pretty great while it lasted.
354.
by cvwright 5y ago
I would argue that this Apple system is not so much surveillance as a censorship mechanism. They check for a finite set of "bad" things that no one is allowed to have. Because they went so far out of their way to avoid learning a
355.
by cvwright 5y ago
If you're not impressed by the perceptual hash, then you should at least be impressed by their implementation of the private set intersection. That's something that not a lot of companies could pull off. It doesn't make the
356.
by cvwright 5y ago
The first 90% is solving the problem. The next 90% is telling the story so people can understand how you can help them.
357.
by cvwright 5y ago
You want to argue that Covid results are due to politics? Then maybe you can tell us why blue states NJ, NY, and MA have the highest death rates in the US?
358.
by cvwright 5y ago
From "Follow the science" to "Who cares if it works or not?" in 17 short months...
359.
by cvwright 5y ago
Well, since you asked... :-) I've been working on something in this space for a little while. It's called Circles. Originally, I just wanted a safer and easier way to share baby photos with my extended family. Safer than posti
360.
by cvwright 5y ago
My wife and I were looking into traveling from the US to Europe this summer, if the borders had opened up earlier. At the time, Germany was not allowing cloth masks on public transport. N95, surgical masks, or stay home. So here we have a

More ›