kbolino

20 ms·

331.
by kbolino 1y ago
Bcrypt alone is unfit for purpose. Argon2 does not need its input to be predigested. It's easy for somebody who knows this to fix bcrypt, but silently truncating the input was an unforced error. The fact that it looks like and was of
332.
by kbolino 1y ago
AFAIK, there is no requirement for websites to support multiple passkeys nor, if they do, to support them in a sensible way. Some sites do this well, most don't.
333.
by kbolino 1y ago
Even if they provide you with a dump of their database records on you, you will not be able to recover your password from the salted iterated hash, PBKDF2, bcrypt, Argon2, or whatever else irreversible function they used to store it.
334.
by kbolino 1y ago
Passkeys have several advantages over passwords but not all of them rely on UX controls. They are, after all, public-private keypairs and the private part is never shared during authentication. The wider web never adopted PAKEs so passwords
335.
by kbolino 1y ago
The other thing, which is also a double-edged sword, is that "system dependencies" on Linux (generally) have only one version installed at a time and that version is expected to be suitable for all dependents. Distro managers&#x2F
336.
by kbolino 1y ago
> I assume this implies that common processor architectures (x86_64, aarch64) lack trap-on-overflow variants of their integer arithmetic instructions? Yes*. But all modern instruction sets have condition flags and conditional instruction
337.
by kbolino 1y ago
Yeah, it's kind of niche to find someone who has an nVidia card, uses it for gaming/compute, has some reason to run Linux, and is afraid to dig into config files etc. But Microsoft's behavior of late is creating some demand h
338.
by kbolino 1y ago
Probably fine for most people, but not a good choice for low-hassle setup with "recent" nVidia cards (last ~10 years). That's almost all nVidia's fault, and I can't say any distro handles their cards flawlessly, but
339.
by kbolino 1y ago
An IP is about as much of an identity as a domain is. There are two main reasons IP certificates were not widely used in the past: - Before the SAN extension, there was just the CN, and there's only one CN per certificate. It would gen
340.
by kbolino 1y ago
Goroutines are preemptive only to the runtime scheduler. You, the application developer merely using the language, cannot directly preempt a goroutine. This makes goroutines effectively cooperative still from the perspective of the develope
341.
by kbolino 1y ago
A hash function cannot create entropy. Let's be clear about that. A good hash function will preserve entropy, up to the length of its output. If the input X has K bits of entropy and H is an N-bit cryptographic hash function, then
342.
by kbolino 1y ago
But once you've made a function that "cannot be used to produce the material described by the hash", you've also made a very good pseudo-randomizer. In fact, if a cryptographic hash function cannot be trusted for its abi
343.
by kbolino 1y ago
Ironically, Intel's GPU business seems to be entirely in-house. Though maybe it too will get spun off in whole or in part. As far as nVidia is concerned, they lost the privilege to be treated like a small fabless startup. They are regu
344.
by kbolino 1y ago
Maybe, but that's not a great analogy. The standardized, user-accessible sockets mean many different CPUs can be paired with many different motherboards. There's also a wide variety of sizes and features in motherboards, plus they
345.
by kbolino 1y ago
Ok, this seems to be based entirely on speculation. It could very well be accurate but there's no statements I can find from either nVidia or EVGA corroborating it. Since it's done by the manufacturer themselves, it's more li
346.
by kbolino 1y ago
The big bombshell IMO is that, according to EVGA at least, nVidia just comes up with the MSRP for each card all on its own, and doesn't even tell its partners what that number will be before announcing it to the public. I elaborate on
347.
by kbolino 1y ago
I've never seen this accusation before. I want to give the benefit of the doubt but I suspect it's confusing scalping with MSRP-baiting. It's important to note that nVidia mostly doesn't sell or even make finished consum
348.
by kbolino 1y ago
No, I mean high pixel densities all the way to the display. SSAA is an even older technique than MSAA but the results are not visually the same as just having a really high-DPI screen with no AA.
349.
by kbolino 1y ago
But the thing is that Steam didn't cause the death of physical media. I absolutely do remember PC gaming before Steam, and between the era when it was awesome (StarCraft, Age of Empires, Unreal Tournament, Tribes, etc.) and the moder
350.
by kbolino 1y ago
Scalping and MSRP-baiting have been around for far too many years for nVidia to claim innocence. The death of EVGA's GPU line also revealed that nVidia holds most of the cards in the relationship with its "partners". Sure, Mi
351.
by kbolino 1y ago
The video game industry has been through cycles like this before. One of them (the 1983 crash) was so bad it killed most American companies and caused the momentum to shift to Japan for a generation. Another one I can recall is the "de
352.
by kbolino 1y ago
There's another path, which is to raise the pixel densities so high we don't need AA (as much) anymore, but I'm going to guess it's a) even more expensive and b) not going to fix all the problems anyway.
353.
by kbolino 1y ago
A lot of this is going to come down to taste so de gustibus and all that, but this feels like building on a foundation of sand. If the artifacts can be removed (or at least mitigated), then by all means let's keep going with cool new
354.
by kbolino 1y ago
Every kind of TAA that I've seen creates artifacts around fast-moving objects. This may sound like a niche problem only found in fast-twitch games but it's cropped up in turn-based RPGs and factory/city builders. I personally
355.
by kbolino 1y ago
There's another problem that's affecting more than just Python too: grapheme clusters. It turns out that even a sequence of scalars (code points excluding surrogates) isn't always a safe abstraction anymore.
356.
by kbolino 1y ago
Assignment is = which is too close to equality == and thus has been the source of bugs in the past, especially since C treats assignment as an expression and coerces lots of non-boolean values to true/false wherever a condition is expe
357.
by kbolino 1y ago
I appreciate looking at things from a different perspective! I can see your line of argument now. I should clarify. I don't think JS killed frames, that's not what I meant. If anything, I think JS could have saved frames. But th
358.
by kbolino 1y ago
By "classic frames", I mean <frameset> not <iframe>. Though iframes have some of the same problems, they don't have all of the same problems. They also tend to be used differently, though you can certainly cre
359.
by kbolino 1y ago
I feel like we're mostly in violent agreement. The key point about frames in the original context of this thread as I understood it was that they allowed a site to only load the content that actually changes. So accounting for the tabl
360.
by kbolino 1y ago
Directionally correct but badly done can poison an idea. Frames sucked and never got better. Along with other issues, this gave rise to AJAX and SPAs and JS frameworks. A big part of how we got where we are today is because the people makin

More ›