mcpherrinm

5 ms·

1.
by mcpherrinm 12d ago
This exists in Firefox at least, but I don’t think it’s easily exposed in the UI
2.
by mcpherrinm 16d ago
Yeah. Vitess does have some options for atomic cross-shard commits using an additional database to track two-phase commits, but that's expensive so you probably want to avoid that. https://vitess.io/docs/25.0&#x2F
3.
by mcpherrinm 16d ago
Assuming it works the same way as their MySQL product, Vitess: The usual way to run it is that you partition your db based on something like a user, so that single user gets a consistent DB, but anything cross-shard may not be. I know when
4.
by mcpherrinm 16d ago
I think "very straightforward" is vastly overselling how easy editing OSM is. It feels like editing a database, without any affordances for easily making common updates. If the hours of a store are wrong on Google Maps, I just upl
5.
by mcpherrinm 18d ago
I don't know how fast my CPU cores are in MIPS, but it's 4.5 Ghz and some random googling indicates that might be about 10 MIPS per Mhz, so 45,000 Dhrystone MIPS. And assuming about ((32x32 core-hours) / 8766 (hours/year
6.
by mcpherrinm 18d ago
That's a good point. I've added to the post. It's simple enough I'd expect anyone who wants to do it can follow the docs from CADO-NFS, which are very good, but I can write it down explicitly. Install CADO-NFS per upstre
7.
by mcpherrinm 18d ago
Netscape of this era predates the Subject Alternative Name :)
8.
by mcpherrinm 18d ago
Fascinating! My involvement in this space starts much later, so it’s always interesting to hear from folks involved at the time. The rumours about monetizing the root program is one I’ve heard repeated but never anything concrete. These day
9.
by mcpherrinm 18d ago
I didn't use any GPUs, but Steve Weis (who factored the final key at the bottom of the post) did. He's posted about that factoring setup over on https://x.com/sweis/status/2095570645505700165
10.
by mcpherrinm 18d ago
I agree to some degree, but it's not essential for what I wanted to do (which is find a 512-bit RSA key). The biggest thing I'm afraid of is that the generated scripts missed some entries, or otherwise mis-classified them, in part
11.
by mcpherrinm 18d ago
(As the author of the post) I've written and worked on a few TLS implementations, so it wasn't terribly interesting to me. And I have to go to work tomorrow and solve real, modern CA problems :) But in short, I wanted to use Go, a
12.
by mcpherrinm 18d ago
It's hard to extrapolate that far, but maybe hundreds of thousands or millions of years. Naively looking at scaling factors is going to be tricky, because computation of this scale is going to involve things like "how do I hijack
13.
by mcpherrinm 18d ago
It’s not quite a doubling per bit, which is why RSA keys are relatively large compared to similar-strength ECDSA keys, for example. Steve Weis, who has been doing RSA factoring on some large GPU clusters, estimates factoring 1024-bit RSA wo
14.
by mcpherrinm 23d ago
The linked actual research article did look at multiple GNSS systems. GPS is presumably being reported out of familiarity https://doi.org/10.1029/2026GL124645
15.
by mcpherrinm 2mo ago
This shouldn’t be too much of a surprise, as TLS 1.3 has been out for many years and is widely adopted. I haven’t paid too much attention to the TLS WG lately (for obvious reasons if you look at their mailing list), but I assume this is mos
16.
by mcpherrinm 2mo ago
While I didn't work on AWS, I did intern on the retail side of Amazon, and there's definitely this sort of monitoring in place. Surely somebody was paged. And even if not, this is "just" the cost explorer estimations, no
17.
by mcpherrinm 3mo ago
She posted a video of her food loadout on instagram. It looked like a lot of dehydrated meals, and also a lot of peanut butter and tortillas. Here's a video of a day's food: https://www.instagram.com/reel/DZd8
18.
by mcpherrinm 3mo ago
She's got a lot of content posted on Instagram and TikTok, which includes packing food, videos of the boat inside and out, etc. https://www.instagram.com/yourowkelsey/reels/ https://www.tiktok.com&
19.
by mcpherrinm 3mo ago
So, in this case it wasn't correct to do so, but there is actually a current algorithm which uses floating point: Falcon (aka FN-DSA). https://keymaterial.net/2026/05/13/so-you-want-to-deploy-fn-... talk
20.
by mcpherrinm 3mo ago
The underlying context is the US government only wants to buy systems which support pure post-quantum cryptography for use on top-secret networks, as part of the requirements of (via its Commercial National Security Algorithm Suite 2.0 stan
21.
by mcpherrinm 3mo ago
If a key is breached, the certificate can be revoked, but that revocation goes away once the certificate is expired. Expiry is a pretty fundamental part of the security model of certificates.
22.
by mcpherrinm 4mo ago
It's the list here: https://docs.adyen.com/plugins#built-by-adyen
23.
by mcpherrinm 4mo ago
The best introduction to verifiable indexes I know of offhand is https://www.youtube.com/watch?v=gfrXTgmbS1s and https://github.com/transparency-dev/incubator/tree/main/vind...
24.
by mcpherrinm 4mo ago
Yes, many of the problems from CT are fixed. I wouldn't call it a "broken mess" though, as it has been relatively effective at detecting various problems, and to my knowledge hasn't been compromised. There are no SCTs, w
25.
by mcpherrinm 4mo ago
On Linux and similar systems, I'm hoping github.com/rustls/upki will handle landmark distribution, and that non-browser clients can use that. Of course Rustls will support their own project, but I'm hopeful other TLS sta
26.
by mcpherrinm 4mo ago
Great question! Of course, we'll continue to provide more information as we firm up more details. This is an area that's not locked down yet, but I can give a sneak preview of what it might look like. We expect batches to be produ
27.
by mcpherrinm 4mo ago
OpenSSH's Damien Miller has https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e... defining ssh-mldsa44-ed25519@openssh.com which seems more likely given the authorship.
28.
by mcpherrinm 4mo ago
Even without DNSSEC, the CAA record approach can help, as it requires MITMing between the CA and the DNS server, which may be harder in some cases than just MITMing a target site. There’s some upcoming attempts at transport security for aut
29.
by mcpherrinm 4mo ago
CAA checking is mandatory, so you can always restrict to a given CA. To get complete control with DNSSEC, you also need the accounturi and validationmethod extensions (which you need to guarantee only your account can issue, and only with t
30.
by mcpherrinm 4mo ago
The post seems to be down so I am not quite sure what it says, but Co-Authored-By trailer is what Claude does. I'm not quite clear what you're suggested that's different from what Claude does - just default to off instead of

More ›