lvh

13 ms·

91.
by lvh 5y ago
Huh, good point; I wonder if my mind mixed up the org chem with the numbers (likely) or if that's some kind of unique Belgian affectation.
92.
by lvh 5y ago
This makes no sense. Sure: you can generate an X.509 certificate that says whatever you want, but the point is that you can validate the signature and see that it's a forgery. In the case of a hash-addressed system like git, the proble
93.
by lvh 5y ago
It's just a subdivision; it might as well have said 1a, 1b... -- but "bis" and "cis/tris" (and possibly tetrakis) tend to emphasize that they're addenda, not equal points.
94.
by lvh 5y ago
The part about the 2nd pre-image chances being effectively zero may be true, but the nasty cases described upthread don't need a 2nd pre-image. (You could do a lot worse with one, granted!)
95.
by lvh 5y ago
> SHA-1 will still work fine for the purpose of git. It is just no longer considered secure for cryptographic operations, such as digital signature, that doesn't mean that you can't use it for other purposes, like git does. Usi
96.
by lvh 5y ago
1) People systematically underestimate the possibility of creating collisions that still do something "interesting", like being polyglots (files that can be interpreted in multiple formats, executable or otherwise). See PoC||GTFO,
97.
by lvh 5y ago
Teleport is kinda magic. Unified remote access is a super tricky problem, and nothing I know of solves it quite as neatly as Teleport does. Latacora clients either solve a simplified problem (because they don't have the hard mode vers
98.
by lvh 5y ago
Latacora | corpsec engineer | Remote | Full-time | https://www.latacora.com If working on security at a startup is appealing, here's an opportunity to work with a whole group of startups --- in health care, in financial ser
99.
by lvh 5y ago
That sounds like the last-mile the GP is talking about?
100.
by lvh 5y ago
From the tail end of the presentation I'd expect UFS2 isn't a potential bottleneck (I'd naively expect it to be good at huge files, and the kernel to be good at sendfile(2).) Is that your opinion as well, or are there efficie
101.
by lvh 5y ago
I don't see why it's "absolute overkill" or even "for now"? It seems reasonable for Netflix to want to optimize that pipeline and minimize the amount of hardware they need to deploy, especially for dense areas?
102.
by lvh 5y ago
My understanding (from someone who would know but said this in a Chatham House rules space) is that NCMEC is already incredibly underfunded, understaffed, and backlogged. Similar incentives apply to them. They're a nonprofit: a private
103.
by lvh 5y ago
Minor point of order about the atoms: they're not defined with @ nor derefd with . If you're referring to earmuffs* that's convention not syntax (specifically for dynamically scoped variables, which could be atoms or anythi
104.
by lvh 5y ago
The two are not mutually exclusive. Clojure has namespaced keywords and specs[0] to cover that. (There is also the third-party malli, which takes a slightly different appproach.) The advantage is that maps are extensible. So, you can have m
105.
by lvh 5y ago
I get the rationale for using a separate domain for user-generated content, I sort-of get the rationale for an internal corp domain, but seeing material facts disclosed on paypal-corp.com reminds me how limited URL bars are for teaching peo
106.
by lvh 5y ago
I recommend the following post, by the author of the proof, for deeper context. Especially near the end, they talk about some of the things they're trying to accomplish with it in plain(ish) English. https://xenaproject.word
107.
by lvh 5y ago
A very different number for a 51% attack against a completely different consensus mechanism does not seem like it should provoke skepticism. Especially since resistance against 51% attacks is a specific benefit of that new mechanism. Are yo
108.
by lvh 5y ago
Surely we can agree that every security in existence does not solely rely on inflows from new investors in order to pay out old ones. You keep saying "this isn't a Ponzi scheme" but I haven't seen you elucidate your obje
109.
by lvh 5y ago
Would you agree that "outflows are only possible because the inflows are big enough so that the new investors can cover the payouts for the old investors until eventually the bubble gets big enough" is a hallmark of a Ponzi scheme
110.
by lvh 5y ago
The US debt clock does not say that the US does not pay its debts.
111.
by lvh 5y ago
Do you believe that shares give you certain rights besides just existing? Like, say, a right to future shares of profits, or voting rights?
112.
by lvh 5y ago
You can't think of a reason why it matters that a financial firm was lying about whether or not it had literal billions of dollars when they issue a coupon that allegedly can be redeemed for actual dollars?
113.
by lvh 5y ago
Thanks, I've edited my comment.
114.
by lvh 5y ago
Correct: there is one other person (a production assistant) and two cats. [0] [0]: https://winterbloom.com/about
115.
by lvh 5y ago
How did Apple kill IRC or play into this announcement?
116.
by lvh 5y ago
The Java SDKs are bigger, and what's IMO worse: in Lambda the Python and JavaScript SDKs are automatically installed but the Java SDK is not automagically available on the classpath. Since Lambda is an environment where both artifact s
117.
by lvh 5y ago
Eh? That's precisely what that section is about, and it uses "purity" in the specific programming sense.
118.
by lvh 5y ago
There are a few such things. The most comparison is core.typed, which literally just adds static (gradual) typing to Clojure. That said, I think that's a misleading comparison, and less useful than it is for TypeScript. If you're
119.
by lvh 5y ago
I am incredibly glad someone not-me is wrapping OpenCASCADE. It's an incredibly powerful tool, but it's also kind of a beast of an ancient C++ library with all of the trappings that comes with, like its own version of smart pointe
120.
by lvh 6y ago
Hey! This looks super cool. The desktop app seems fairly explicitly single-user (looks like 1 big transit file). Do you have any opinions on using these tools in general and Athens in specific to do knowledge sharing among teams? (I would i

More ›