twiss

7 ms·

31.
by twiss 2y ago
For a more authoritative reference, the WebIDL spec explains: ( https://webidl.spec.whatwg.org/#idl-objects ) > the browser-implemented DOM objects (implementing interfaces such as Node and Document) that provide access to
32.
by twiss 2y ago
I think it's interesting to consider how humans would go about this task ("Generate an SVG of a pelican riding a bicycle"), and how well they would do if they had to output the SVG into a text box without any other tools. Con
33.
by twiss 2y ago
https://www.forbes.com/sites/kristinakillgrove/2018/10/16/ne... says: > it is not known whether the Oct 17 graffito referred to that day, or a day in the past or the future The last option would
34.
by twiss 2y ago
Having lived in both the Netherlands and Switzerland, I don't quite understand how NS scores that much worse than SBB. Sure, NS is expensive, but not more so than SBB (especially now that you can book in advance and get discounts, al
35.
by twiss 2y ago
I'm guessing they're talking about https://www.complexsql.com/rowid-rownum/ , i.e. the row numbers defined by the database, rather than the value of the ID column you typically create in each table. I.e., it s
36.
by twiss 2y ago
There is a middle ground possible as mentioned in the paper, e.g. SipHash is a non-cryptographic hash function that provides security against DoS against attacks.
37.
by twiss 2y ago
Better performance. For a hash table, a cryptographic hash function is overkill (i.e. spends a lot of time to provide security properties that are not needed).
38.
by twiss 2y ago
Companion blog post: https://kyju.org/blog/piccolo-a-stackless-lua-interpreter/
39.
by twiss 2y ago
Do you think Lua (for example, or any other GC'd language) has valid use cases? If so, it needs an implementation. This blog post shows (part of) one way to do that.
40.
by twiss 2y ago
Amsterdam has banned most diesel vehicles [1], so at least this is not universally true (anymore). [1]: https://www.amsterdam.nl/en/traffic-transport/low-emission-z...
41.
by twiss 2y ago
Interestingly it also seems to work fine on 16.5. Browserstack doesn't have 17.1, perhaps it was broken temporarily? Unless there's some other difference with the version of Browserstack somehow..
42.
by twiss 2y ago
The demo seems to work in Safari 17.3 on Browserstack even without the rule, what version are you using?
43.
by twiss 2y ago
There seems to be a bug in Chromium-based browsers where, if you type e.g. `color: blue` in the textarea, it only highlights the r before the colon, rather than the whole property name. If you copy+paste the text instead, it works properly.
44.
by twiss 2y ago
Beyond the punctuation, it's also arguably the wrong number: it's the maximum payload weight, not the weight of the aircraft itself, that's 144,379 kg for the 777 Freighter (according to the linked page), and e.g. 159,570 kg
45.
by twiss 2y ago
> a lot of tools are made primarily for Linux. Surprisingly this even includes very popular ones like Git A bit off-topic but this particular example becomes less surprising if you look up who created git :)
46.
by twiss 2y ago
> China has a decreasing population Not in the period shown in the chart, which seems to end in 2021.
47.
by twiss 2y ago
For China, you'd expect that to skew the data in the other direction, though. Since China has over 4x the population of the US, the number of metro lines is apparently over 4x higher (since China has more metro lines per capita than th
48.
by twiss 2y ago
It seems like the biggest counterargument to this would be the one made in https://www.brendangregg.com/blog/2024-07-22/no-more-blue-fr... ( https://news.ycombinator.com/item?id=41033579 ), i.e. it
49.
by twiss 2y ago
There is also https://hypem.com/ , which focuses on music posted by blogs but is otherwise fairly similar. It helped me discover a lot of cool music back in the day :) Nowadays Spotify's music discovery algorithm is oft
50.
by twiss 2y ago
I expect the author would mostly agree with you, but see the "motivation" header under https://htmx.org/
51.
by twiss 2y ago
For the first one, I think it's linked to the next point of "No Build Tools". Using `var` instead of `let` and `const` `let`s them support (very) old browsers without a build step (which in turn leads to other benefits: http
52.
by twiss 2y ago
> Is this password-derived key the "account key" which I see in the Proton Mail settings interface? No, the account key is an OpenPGP key which is encrypted with a key derived from your password. The "key encryption key&qu
53.
by twiss 2y ago
Indeed filling the private key with zeros or random data wouldn't work, but we do support GNU Dummy keys as exported by `gpg --export-secret-subkeys` nowadays.
54.
by twiss 2y ago
FWIW, OpenPGP doesn't only offer ElGamal, and we never use that algorithm. We use Curve25519 by default since quite a while, before which we used RSA. We've never used ElGamal and also don't allow importing ElGamal keys, sinc
55.
by twiss 2y ago
We do fetch keys from WKD, as announced almost 5 years ago: https://proton.me/blog/security-updates-2019 :)
56.
by twiss 2y ago
Hi! Crypto team lead here. 1. We don't generate OpenPGP keys on the server, we generate them in the client, and then encrypt them with a key derived from your password (which we never send to the server), and store the encrypted key on
57.
by twiss 2y ago
We can't easily ask them that. KOO could ask, though, since that's what the user's interacting with when they're uploading the key. And, I do agree that the signalling could be improved, there, so I'll discuss it wi
58.
by twiss 2y ago
keys.openpgp.org is the semi-canonical key server for OpenPGP. Certainly there are other key servers, but it makes more sense for us to look up keys on a keyserver hosted under openpgp.org than one hosted by Ubuntu or any other single entit
59.
by twiss 2y ago
KOO is opt-in for each recipient. The recipient has to upload a key to KOO. Obviously, OpenPGP works differently from TLS, and TLS does not have a concept of key servers - but key servers are absolutely not a new invention for OpenPGP, and
60.
by twiss 2y ago
No, Proton didn't assume WKD was activated, and WKD doesn't have much to do with what's going on. What happened is: - The user, or their software, uploaded a public key to keys.openpgp.org - Proton looked up their email addre

More ›