snowstormsun

10 ms·

91.
by snowstormsun 3y ago
> I tend to think that the one click flow serves users and respects their time more, even if it comes at the cost of having confusion about the difference between "Confirm my choices" and "Reject all". That's a f
92.
by snowstormsun 3y ago
If there were some checkbox still checked (perhaps in some submenu that needs to be expanded), then "confirm my choices" might obviously have a different consequence. That might not apply here, but I am pretty sure I have seen tha
93.
by snowstormsun 3y ago
What's the difference between "Reject All" and "Confirm My Choices" (with nothing ticked)? Could be a subtle dark pattern...
94.
by snowstormsun 3y ago
I think their Github "About" text is quite clear imho. An open source identity service that can be an alternative to similar commercial ones like Okta, Auth0.
95.
by snowstormsun 3y ago
That would impact r/w performance heavily.
96.
by snowstormsun 3y ago
Yeah there's a salt used
97.
by snowstormsun 3y ago
The limit of 8 slots is only true for the older LUKS1 version
98.
by snowstormsun 4y ago
See also: https://github.com/Yomguithereal/mnemonist
99.
by snowstormsun 4y ago
I agree with that sentiment, but think you should still give them credit for making whisper open source.
100.
by snowstormsun 4y ago
This is a good explanation by Niels Reimers (who created SBERT): https://www.youtube.com/watch?v=ukIYZw3uRX0
101.
by snowstormsun 4y ago
It's a bit frustrating how difficult it is to find out the old value of a dependency of a React useEffect hook: https://stackoverflow.com/questions/73399384/how-to-get-and-... Back with components, it was tri
102.
by snowstormsun 4y ago
I think "Explainable AI" is a related research direction, but perhaps not popular for language models.
103.
by snowstormsun 4y ago
> Lol. Friend of mine works in real estate... losing keys is very common. Ok, fair point. That's why it'd be good to have a second key somewhere safe. The FIDO token also is just one key that can be used for multiple websites.
104.
by snowstormsun 4y ago
> The thing is, anything but passwords is extremely challenging for non-tech users. People usually manage to not loose/destroy the keys to their houses/cars very often. A FIDO token is very similar. You just need to understand
105.
by snowstormsun 4y ago
A strong password can still be phished. Hardware keys are not vulnerable to phishing.
106.
by snowstormsun 4y ago
Something similar has been posted before some time ago: https://news.ycombinator.com/item?id=34083366
107.
by snowstormsun 4y ago
The website is missing a link to a privacy policy. That's really important since you're processing personal information, especially if your visitors are located in the EU. I wouldn't share any information about myself in the
108.
by snowstormsun 4y ago
The importing of public keys via github/gitlab is a neat thing! Can that be used to also encrypt messages using SSH public keys? Generally, I it's unclear to me how secure the code is written/audited and don't see any be
109.
by snowstormsun 4y ago
Better late than never.
110.
by snowstormsun 4y ago
Perhaps you could avoid some pitfalls, which only become obvious when the practical application of the protocol is scaled. I have not dived deep into either nntp or nostr, but existing standards might offer useful considerations that could
111.
by snowstormsun 4y ago
Another idea would be to use https://redbean.dev/ . For mobile it'd not work, though.
112.
by snowstormsun 4y ago
What's wrong with CBC? I think the bigger problem is the symmetric keys are not using a key derivation function and are therefore not uniformly random: https://github.com/nostr-protocol/nips/issues/72
113.
by snowstormsun 4y ago
Does somebody know whether the same or something similar could be achieved by using the "Network News Transfer Protocol" (nntp), without designing a whole new protocol?
114.
by snowstormsun 4y ago
But you're right. Just tried it and it told me: "Uncaught (in promise) DOMException: Public-key credentials are only available to HTTPS origin or HTTP origins that fall under 'localhost'. See https://crbug.com
115.
by snowstormsun 4y ago
Yeah, also thought so, but here it says "and file:// URLs are also considered to have been delivered securely." ( https://developer.mozilla.org/en-US/docs/Web/Security/Secure... ). Am I
116.
by snowstormsun 4y ago
You could create a local HTML file without a server for it.
117.
by snowstormsun 4y ago
Very cool!
118.
by snowstormsun 4y ago
assuming the process actually includes proper specification of work
119.
by snowstormsun 4y ago
Thanks for the pointers!
120.
by snowstormsun 4y ago
Ah okay, thanks for the information.

More ›