Replying to
@lindsey@recurse.social Wait until you see what the Japanese do in the name of cute desserts.
Remote
Paul Hoffman
@paulehoffman@infosec.exchange
mastodon 4.8.0-alpha.3+glitchOld Skool Internet geek, particularly DNS. I have worked at ICANN since 2015. Pronouns: us/y’all.
372 Followers
240 Following
50 Posts
Joined July 24, 2024
Replying to
@mjg59@nondeterministic.computer See? You don't need to be a woman to be mansplained at!
I'm happy to announce another RFC publication, but this time I didn't write it. https://www.rfc-editor.org/info/rfc9955 "Hybrid Signature Spectrums", describes the rather messy security considerations when you try to create signature schemes using two algorithms. Even if you don't want to read the whole thing, just reading the beginning of the introduction through the terminology section will give you an idea of how difficult this is to describe and analyze. I'm happy to be the chair of the WG that made this happen.
(And, not to get all gendery about it, but this might be the first RFC with four authors where all are female. More like this, please!)
https://pastcatalogs.com/
I saw this, saw the 1967 Heathkit catalog, and immediately started badly missing my father. We built one of the shortwave receiver kits from this. And big props to my mother for letting us commandeer a table for few weeks while we nerded out for something that she knew I would ignore soon after it was finished.
Replying to
@sophieschmieg@infosec.exchange I gingerly looked at this thread expecting to see some of the aforementioned minions, but instead learned some linguistics. My day is better for it.
Replying to
@NanoRaptor@bitbang.social
🎶I even kept all the permissions and dates
So in the future I can keep it all straight
(Sorry for using "straight" during Pride Month...)
Replying to
Replying to on westergaard.social
@kasperd@westergaard.social Thanks, that last bit is quite useful information. So, at this point, operationally, we're stuck with publc key only for SSH. This is a bummer for my use case (allowing a novice to log in in emergencies), but I guess I can painfully get them a public key I have generated, and explain how to use it.
Replying to
@cmconseils The cost of a cheap inkjet printer and some no-name inks is probably less than your menu service.
Replying to
Mamdani talking about Bibi -- this is actually great
Replying to
@alexr@tilde.zone There are still many ex-SCO people around town, possibly including some of the women who won the sexual harassment lawsuit against the management.
RE: https://discuss.systems/@thalia/116463753392956545
Some other people: "We found a church registry from a small town outside Boston from 1805, so we copied all the entries into a database you can browse."
My people:
Replying to
@jwz@mastodon.social I'm so sorry to hear this. I'm also so sorry in advance for all the advice you are about to get about backup connectivity from people who did it once a decade ago (or never).
If I wanted to learn a bit about wireless stuff and bought a Flipper Zero, are there good beginner learning guides with examples? #FlipperZero ers
Replying to
Replying to
@jtk@infosec.exchange Finishing a draft that has a dumb idea with a tombstone is an excellent use of the Internet Drafts directory. I wish more authors who have realized they need to abandon an idea would do this.
Replying to
@rk@mastodon.well.com There is a ball, but it is round only an infinitesimally short period of time. And you can’t know when.
Replying to
@alexr@tilde.zone The length of the list is stunning in a bad way. Ditto for mayor in Santa Cruz.
Replying to
@beeware@fosstodon.org Thanks. I have a vibe feeling that a contributor who uses AI to create code is much more likely to be "drive-by" than a contributor who hand-codes, but I have no evidence to back that up. For your sake, I hope I'm wrong, given the diversity of your code base.
Replying to
@jerry@infosec.exchange Nice hat, but maybe you wearing it will detract from the wedding.
Replying to
@dangoodin @filippo Some people think that quantum computers can decrypt messages encrypted with AES-128. They think this because there is a thing called Grover's Algorithm that appears to make searching for 128-bit things doable in 64-bit time. However, that's not the case for AES-128 messages, and Filippo explains why.
Replying to
@0x00string I recognize zero of those references, so thanks! I was starting with the popular one…
My middle-sized suitcase has a big blotch on it where I removed a sticker that was put there by a tour company. The only sticker of appropriate size that I have that would cover the blotch says "This machine kills fascists". I would be tempted to use it but don't feel safe with that either in the US where I'm originating or Türkiye where I'm flying through. So it will remain a blotch.
The kids are alright! And now the river is as well.
https://www.youtube.com/watch?v=4FuGuWeAra4
First Descent: Kayaking the Klamath River after the largest dam removal in U.S. history
Replying to
@beeware@fosstodon.org Recently history shows that working AI-generated code is difficult to read or maintain. Is this what you want for the project?
Replying to
@veronica@explains.social Please say more! If this works, I would be thrilled, but why would plugging that in help prevent The Badness?
Replying to
Replying to
A final follow-up based on what @kasperd@westergaard.social pointed me to: I'm giving up on passwords for the novice user. I'll create a keypair for them, I'll wrap it in a password (the same one I was going to have them use to SSH in), and then I have to explain how/where to store it on their computer and how to use it when logging in.
Once I stop weeping about "the way things are today", I'll probably write up a guide for people who have to get novice users to use SSH and SFTP.
Replying to
@lcamtuf@infosec.exchange If you have questions like this, be sure to ask them on a list about unrelated post-quantum cryptography.
Honest government ads and #palantir : https://www.youtube.com/watch?v=mBW9QCVDSjY
Honest Government Ad | Palantir
The kids are alright! And now the river is as well.
https://www.youtube.com/watch?v=nlxAGvDV6zY
- YouTube
I am never sure how to feel about a major WordPress hoster who badly screws up the site I manage at least yearly, but their tech support is excellent and thoughtful and explains the problem they created.
Replying to
@rk@mastodon.well.com I liked the pre-editing idea of you taking your younger kid to a movie about "maters" and having him ask if it would be stupid.
Replying to
@mnot Is the choice of JSON instead of XML because "everyone does JSON these days"? I would have thought XML because "the consumer of this information already knows how to parse XML".
Otherwise: good idea, I agree with the other posters about language, and I'll certainly support the idea when it is DISPATCHed.
Replying to
@bagder@mastodon.social At least in the US, janitors only clean up, not fix and create. Maybe “tinkerer”?
Replying to
@lindsey@recurse.social As a late tip, “git difftool” if you have a good differ is great.
Replying to
@b0rk@social.jvns.ca hat parts of Kagi have not been great for you? I'm quite smitten with it, and feel it's easily worth the monthly cost.
Replying to
@rk@mastodon.well.com Does this same problem appear in iTerm2? I ask because the developer there is quite responsive to bug reports.
Here's a wonderful technical and financial analysis of SpaceX's valuation:
https://ispcol.potaroo.net/2026-06/spacex.html
"So how could a satellite-first radio-based service become the preferred access service in the densely populated locales of suburbs and cities? The more mundane world of the intersection of utility economics and radio physics says "it can't"."
Replying to
@beeware@fosstodon.org I did, of course. I am not a BeeWare maintainer, so I don't know how strict the code reviewers are, and whether they are then assumed themselves to understand the contributed code long-term.
My concern is that allowing code from a source that is known to be harder to maintain is quite different than accepting it from humans who have a much higher likelihood of becoming long-term maintainers themselves.
Replying to
@heliographe_studio@mastodon.social I just got (and paid for) 2.1 but am not seeing the "Goodies menu", and yet I so much want this plugin!
Replying to