er4hn

23 ms·

121.
by er4hn 3y ago
As someone with experience in this myself: It depends on where you want to be in the foodchain. This comes up with companies that need to meet these standards to sell to someone in the Federal space (or someone who is selling to someone in
122.
by er4hn 3y ago
On that note, what good code coverage tools are out there? GitHub and Gerrit, as well as (egads) ReviewBoard don't seem to have native support for this in the review. It's unfortunate since it seems super useful to have be up fron
123.
by er4hn 3y ago
aka the Benz AMG exception: https://www.mbotw.com/section-179-tax-exemption/
124.
by er4hn 3y ago
Always a wonderful reminder of how computer science is a flat circle.
125.
by er4hn 3y ago
thanks for correcting me on that. oops!
126.
by er4hn 3y ago
The scariest part about heavenbanning is that it is possible to deploy today. Xe talks about this being trialed on Reddit. It also makes a lot of sense to be a product to try and wall off "troublesome" online entities. The downsid
127.
by er4hn 3y ago
That is a goal of the government. EO 14028 makes the biden administration the first to take cybersecurity seriously. The problems are two fold: - An attacker only has to get lucky once. You have to do the right thing everytime. and - It&#x2
128.
by er4hn 3y ago
Is this what envoy (by Ambassador Labs?) is named after? https://www.getambassador.io/learn/envoy-proxy
129.
by er4hn 3y ago
This is likely to be cyclical though. Fast cars[1], large amounts of processing power[2], access to cryptographic algorithms, are all things that started out expensive to be on the cutting edge, some still are expensive on the cutting edge,
130.
by er4hn 3y ago
This is a custom chip that they are making. I don't think that they should be required to sell it, but if others find it valuable you could expect to see hardware startups making their own RISC-V AI chips as well that you could buy.
131.
by er4hn 3y ago
You do have a few details to worry about such as the size of the random_seed, and how much you can output before you need to get a new seed. There's also a problem that if the state of the rng is exposed at any point, all past generate
132.
by er4hn 3y ago
That's just my bad attempt at a joke. "Longest serving code writer" may be more accurate, but IC gets lumped in as that so frequently and he publicly took that title back on. This is getting less funny the more I try to expla
133.
by er4hn 3y ago
Mitchell Hashimoto, Hashicorps longest serving IC, has been working on his own terminal emulator as a side project: https://mitchellh.com/ghostty . It's been interesting to read through his logs and see how it develops
134.
by er4hn 3y ago
This is very detailed and a fun read. I'd done a similar set of research in 2022 as well: https://er4hn.info/blog/2022.08.23-tormentnexus/
135.
by er4hn 3y ago
Great article! Love the focus on implementing. Fingers crossed he will explain PQ signatures like SPHINCS+ as a follow up.
136.
by er4hn 3y ago
Regus / Spaces (the "hipper" version of Regus, same parent company) existed long before WeWork. They're not as nice because they're run as an actual business but they do exist around the world and are perfectly fine
137.
by er4hn 3y ago
What's worth noting is that this is driven by the US Fed Gov (spec. Department of Defense) as a way to get vendors onboard: https://en.wikipedia.org/wiki/DoD_IPv6_product_certification . The govt takes a stance tha
138.
by er4hn 3y ago
Best enjoyed with some local unregulated bread and a hot (100F for 3 mins) cup of standard reference yerba mate tea: https://shop.nist.gov/ccrz__ProductDetails?sku=3253&cclcl=en...
139.
by er4hn 3y ago
I'm halfway through Walter Issacson's bio on him and I don't get the impression he cares about liberals. He seems to view his companies as something closer to an e/acc vision of saving the world through better technology
140.
by er4hn 3y ago
latency on controls would be a real killer. I suppose you could stuff the director in the frunk, a la Mechanical Turk, to solve that problem.
141.
by er4hn 3y ago
happy to see "Lack of Phishing-Resistant MFA" added to the top 10 here. Moving away from SMS / Push to App MFA to something like a yubikey is a major upgrade to operational security.
142.
by er4hn 3y ago
Please cite the wizards and dragons comment. Sounds fascinating!
143.
by er4hn 3y ago
Moby Dick is a combination of a beautiful story combined with the most boring details imaginable about whaling. As far as I recall those details add nothing to the story beyond Melville being worried he would not have enough "street cr
144.
by er4hn 3y ago
The Doomed City is a bad example since it was specifically released in a post-soviet era. It had very direct criticisms of communism which lead to the authors deciding to not release it during the soviet era they wrote it. "Hard to be
145.
Tacit Knowledge Is Dangerous(er4hn.info)
3 points by er4hn 3y ago|1 comments
146.
by er4hn 3y ago
I agree, this is tragic. I always enjoyed her spicy takes on the west, especially her pride in China. They were fierce, but they weren't mindlessly nationalist. She'd take the time to explain how and why people in China felt and s
147.
by er4hn 3y ago
Case in point: Microsoft recently losing a critical signing key that definitely wasn't in an HSM.
148.
by er4hn 3y ago
CVSS is really just used to stack-rank issues and decide how to handle them. Orgs get a list of CVEs, they sort them by score to decide which ones to handle first. From there someone removed from the actual process comes up with deadlines s
149.
by er4hn 3y ago
Up until every Chrome tab spawns a new Fuchsia OS.
150.
by er4hn 3y ago
The part about the margins always annoys me. They are comparing final cost to cost of goods + labor to manufacture, but there are other components than that. There is the cost of stores, of store staff to sell you the bag. The executives sa

More ›