twiss

27 ms·

121.
by twiss 3y ago
> So are you doing both? If you implement the crypto refresh and GnuPG doesn't then you lose compatibility, right? If you don't lose compatibility and are somehow doing both, then what's the point? OpenPGP keys can signal
122.
by twiss 3y ago
Not to be pedantic but that's not how the history went. First there was PGP (the product), then that was turned into a standard (RFC2440, "OpenPGP Message Format"), and GnuPG implemented that. Then, some (backwards-compatible
123.
by twiss 3y ago
Even if you don't know them, (and pardon my arrogance,) OpenPGP.js and GopenPGP probably have many more end users than GnuPG, due to them being used by Proton Mail (among other products). However, that shouldn't actually matter, b
124.
by twiss 3y ago
Multiple OpenPGP implementations were involved in the crypto refresh, including Sequoia-PGP, OpenPGP.js, GopenPGP, and - at one point - RNP and even GnuPG itself, though those two stopped being involved at some point. GnuPG is now unhappy w
125.
by twiss 3y ago
The IETF aims for rough consensus [1][2], rather than full consensus. The OpenPGP Working Group chairs have deemed that GnuPG is "in the rough" of the rough consensus [3], and that there is sufficient consensus on the crypto refre
126.
by twiss 3y ago
Probably someone went browsing the Lenovo website after https://news.ycombinator.com/item?id=38474319 was (briefly) on the front page.
127.
by twiss 3y ago
> People smoke _everywhere_. According to [1], smoking is relatively uncommon in NL compared to most EU countries (which matches my experience), and at the same level as the UK. However, I think it might depend on where you are within th
128.
by twiss 3y ago
The results are from 2023, not 1966. The fact that ELIZA (indeed surprisingly) did better than GPT-3.5 at fooling people into thinking it's human is discussed in Section 4.4, "The ELIZA effect". If you look at the examples in
129.
by twiss 3y ago
For those who didn't click the link, it should be noted that they're suggesting this because it would be easier to deploy (in places that have a SHA-2 implementation but not SHA-3), not for reasons related to security or anything
130.
by twiss 3y ago
I'm not aware of anything, but I'm also personally not that familiar with Maven, apologies.
131.
by twiss 3y ago
We do look up keys automatically using WKD. However, if the non-Proton user's provider doesn't support that, they'll indeed have to attach it or you'd have to import it manually. We have plans to also look up keys on key
132.
by twiss 3y ago
Proton does not have the private key material. When you sign up to Proton Mail, the client generates a key pair for you, encrypts the private key with your password, and sends it to the server, along with the public key (which we publish).
133.
by twiss 3y ago
It's possible to solve both the friction to start and stop using PGP by looking up keys automatically on the target domain, for example using WKD [1]. We (Proton) host a key for every user, which can be used to automatically end-to-end
134.
by twiss 3y ago
Seems like it, though he mentions in the post that you can call pledge (without "unveil") after unveil to prevent further changes (and it'll handle committing the changes on Linux, which isn't necessary on OpenBSD), to a
135.
by twiss 3y ago
This post is also by Daniel J. Bernstein, so DJB seems to be the only person with suspicions of NIST. Dual_EC_DRBG was created by the NSA, not NIST (who merely standardized it). NIST also merely standardises Kyber, they didn't create i
136.
by twiss 3y ago
Jakt [1] shares your design philosophy, and has implemented syntax like this: [2] guard foo is Bar(x) else { println("not matched") return -1 as! c_int } println("hello there: {}", x) [1]
137.
by twiss 3y ago
> The 'rendered text' and the whole message may be HTML, but I don't think very many mail clients will carefully construct a version that still has the images attached and so on [when forwarding it]. I'm surprised the
138.
by twiss 3y ago
On some IETF mailing lists (and similar communities, like LKML), bottom-posting and plain text messages are still the norm. But, this requires more careful editing of the email (e.g. to trim irrelevant quoted text), in order to remain easy
139.
by twiss 3y ago
Fairphone offers a "Fairphone Easy" plan (in the Netherlands only, for now) for €14 per month for the 60 months plan (€19 per month for the 36 months plan), which includes repairs etc. So if you're planning to keep it longer
140.
by twiss 3y ago
Here's a link to the crypto refresh draft itself, for those interested: https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-cry...
141.
by twiss 3y ago
OK, but the question remains, does it make sense for `Maybe` to implement `Foldable`? The second link says: > The Foldable class generalises some common "Data.List" functions to structures that can be reduced to a summary value
142.
by twiss 3y ago
> The signature "length :: Foldable f => f a -> Int" is pretty specific. That may be, but it isn't the best way to describe the type of `length Maybe`, which behaves more like `f a -> Bool`, since it can only retu
143.
by twiss 3y ago
I think part (but not all) of the blame in this case should fall to `length` and `.iter().count()` doing something rather different for a list and an Option/Maybe type. Does taking the length/iter of the latter really make sense?
144.
by twiss 3y ago
If I select the Netherlands, it says 100% of the population will be living below sea level in 2100, but it says the same thing for the present, which is not quite accurate, the actual statistic is 70% [1]. Even if it does rise to 100%, it d
145.
Define Define [video](youtube.com)
4 points by twiss 3y ago|1 comments
146.
by twiss 3y ago
I did read your article and did look at the other PR, but to be perfectly honest it looked a bit low-effort; the justification is simply "It just makes more sense that way", and the change looks very minor. (Which, of course I don
147.
by twiss 3y ago
As someone who maintains a couple of open source projects and tries to welcome external contributions, I can understand your frustration but I think complaining about getting no response after less than a week is also a bit premature. Yes,
148.
by twiss 3y ago
Dupe of https://news.ycombinator.com/item?id=37076968 . Also, as the article mentions this was clearly not written by Dynomight but their evil twin Tyromight ;)
149.
by twiss 3y ago
I typically open both the article and comments in tabs, and then read the article first (promise! :)), but I did see the banner.
150.
by twiss 3y ago
There is indeed a proposal to partition :visited links: https://github.com/kyraseevers/Partitioning-visited-links-hi...

More ›