Yawning Angel @yawning.bsky.social · 12/11/2024Also why is it that, the Keyboard Setup Tool periodically asks me to setup my trackball as a keyboard? 000
Yawning Angel @yawning.bsky.social · 12/11/2024Why is it that MacOS detects my keyboard as a JIS layout one, but refuses to apply the layout so all the punctuation is in the wrong places, and the only solution is to install a `.keylayout` file? Even Windows lets me select my keyboard layout manually. msyk.net/macos/winkey... 100
Yawning Angel @yawning.bsky.social · 08/10/2024How do you fuck up AF_UNIX to the point where you can kernel panic from userland, when you steal your OS code from 30+ years of prior work (Not a Rust Bug, but an Apple bug). github.com/rust-lang/ru... 000
Yawning Angel @yawning.bsky.social · 20/09/2024In a further sign of Japan's descent into the grim dark cyberpunk future, the Tokyo Govt is now running an AI powered matchmaking service/dating app. Signing up requires photo ID, proof of income, govt. issued proof of being single, and money. www.futari-story.metro.tokyo.lg.jp/ai-matching/futari-story.metro.tokyo.lg.jpAIマッチングシステム｜TOKYOふたりSTORY｜TOKYO縁結び東京都が提供するAIマッチングシステムです。婚活を始める「最初の一歩」としてご利用ください。 100
Yawning Angel @yawning.bsky.social · 19/08/2024Real life has been "interesting" for the last month in a not amazing way, apologies in advance if responses from me are going to be somewhat slower than usual. 020
Yawning Angel @yawning.bsky.social · 19/08/2024If the TV loicense people are hurting so much for money as the news says, how can they afford to send me junk mail asking me to get a TV loicense. I do not own a TV or any device capable of receiving broadcast TV. NHK can Fuck Off. 000
Yawning Angel @yawning.bsky.social · 19/08/2024In my defense, I wrote that design and code over 10 years ago. 110
Reposted by Yawning AngelePrint Updates @eprint.ing.bot · 10/07/2024Switching Off your Device Does Not Protect Against Fault Attacks (Paul Grandamme, Pierre-Antoine Tissot, Lilian Bossuet, Jean-Max Dutertre, Brice Colombier, Vincent Grosso) ia.cr/2024/1123 043
Yawning Angel @yawning.bsky.social · 10/07/2024It's kind of impressive that the only package I need to implement Dual_EC_DRBG in Go "securely" is @filippo.abyssdomain.expert 's bigmod package, since the `crypto/ecdh` package exposes just enough for the rest. nb: I do use `crypto/elliptic` for the scalar-field order, but that can be removed. 010
Yawning Angel @yawning.bsky.social · 10/07/2024github.com/seanmonstar/...github.comIs there a way to use a unix socket? · Issue #39 · seanmonstar/reqwestI would like to do the equivalent of: curl --unix-socket /var/run/docker.sock http://localhost/containers/json There's the unix_socket crate but I'm not sure if I can use it with reqwest. 010
Yawning Angel @yawning.bsky.social · 10/07/2024I just spent my afternoon trying to figure out how to use HTTP over AF_UNIX in Rust, and ran into a giant tire fire. My brain lacks wrinkles for Rust and it's ecosystem. ps: Thanks to comments in a still-open bug in reqwest from 2017, I think I figured it out at least. 110
Yawning Angel @yawning.bsky.social · 08/07/2024Time to find out how much MS uses Github repos for training Copilot, and how many people blindly copy-paste code for things that they shouldn't. 020
Yawning Angel @yawning.bsky.social · 03/07/2024Bonus points for "the upstream project in question is pointing at a rather old commit", and I updated the dependency import approximately 11 months ago, so there is nothing for me to fix. 000
Yawning Angel @yawning.bsky.social · 03/07/2024Sending me a profanity laced tirade about how your software broke because a downstream dependency of something I maintain moved it's repo, is not an effective way to motivate me to help you. 200
Yawning Angel @yawning.bsky.social · 18/06/2024www.bbc.com/news/article... 10k -> 13k SHU is enough to prompt a Govt. initiated recall? WTF.bbc.comSamyang: Denmark recalls Korean ramen for being too spicyThe food authorities said the instant ramen contained such high capsaicin levels consumers could be poisoned. 000
Reposted by Yawning AngelFilippo Valsorda @filippo.abyssdomain.expert · 03/06/2024Well damn, the era of compiler-introduced timing side-channels is here. In the Kyber reference implementation, Clang notices a bitmask is just selecting between zero and a constant and turns it into an if. Very happy the Go compiler is not that smart right now. groups.google.com/a/list.nist....groups.google.comCompiler-introduced timing leak in Kyber reference implementation 68916
Yawning Angel @yawning.bsky.social · 27/05/2024An old friend noted that there is a distinct feeling of "I just lost a SAN point". Not only is that true, but lately I'm experiencing that a lot more than I should. 000
Yawning Angel @yawning.bsky.social · 22/05/2024As an addendum, as far as personal (non-employer) projects go, Rust has been the safest language I have used because I rage-quit and delete everything due to friction before my code gets far enough to have bugs. 010
Reposted by Yawning AngelDaniel Martí @handle.invalid · 22/05/2024I feel like writing Go full-time for a decade has made me less capable of using difficult languages, but I like it this way - I can focus on what I'm trying to achieve instead. 192
Yawning Angel @yawning.bsky.social · 22/05/2024I'm spoiled by the Go stdlib, the concurrency model, and errors just being `error` rather than something that each crate defines. Oddly I don't have nearly as many issues with C99/C++11. 030
Yawning Angel @yawning.bsky.social · 22/05/2024Also, is there a pragma or something in crab-lang that does the equivalent of wrapping the entire file in an unsafe block? Asking for a friend. 000
Yawning Angel @yawning.bsky.social · 22/05/2024After using Go for things that require concurrency and networking, dealing with async, tokio and hyper makes me seriously question my life decisions, and want to consume various mind altering substances in large quantities. 230
Yawning Angel @yawning.bsky.social · 02/05/2024A ha. forums.developer.apple.com/forums/threa...forums.developer.apple.comDTrace freezes M1 MacOS Ventura 13… | Apple Developer Forums 000
Yawning Angel @yawning.bsky.social · 02/05/2024If I ever design a programming language, my benchmark for success will be "pervasive enough that my terrible design decisions lead to dedicated silicon workarounds for performance reasons". developer.arm.com/documentatio...developer.arm.comDocumentation – Arm Developer 010
Yawning Angel @yawning.bsky.social · 02/05/2024I like how trying to use dtruss has a reasonable chance of making my system unusable till I power-cycle the thing. 000
Yawning Angel @yawning.bsky.social · 01/05/2024> My investigator's motto is not "99% Mythos Lore, 1% Sanity- don't push me" Has become an increasingly accurate description of my professional career over the years. 000
Yawning Angel @yawning.bsky.social · 01/05/2024Alas not everything is on the caliber of: > There was the time Blueshell had a humor fit at Pham’s faith in public key encryption, and Ravna knew some stories of her own to illustrate the Rider’s opinion. 000
Reposted by Yawning AngelFilippo Valsorda @filippo.abyssdomain.expert · 22/04/2024youtube.comGopherCon 2023: Filippo Valsorda - High-Assurance Go CryptographyThe cryptography standard library is arguably some of the most critical code written in Go. How do we ensure it’s safe and bug-free? In this presentation, we... 0207
Yawning Angel @yawning.bsky.social · 22/04/2024And to be pedantic, I know that RSA verification is faster, however the paper is comparing `PowerMod[m, k, n]` vs `MultiPoint[k, P]`. 010
Yawning Angel @yawning.bsky.social · 22/04/2024Funnily enough, that line of thought has graced me with about a decade of "having to patch and recompile gpg when I want to refresh my subkeys". One day I may bother to fix this and use a more sensible offline master key. 000
Yawning Angel @yawning.bsky.social · 22/04/2024I meant secp256k1, but my mind is still spinning from seeing the affine formulas used in anger. 100
Yawning Angel @yawning.bsky.social · 22/04/2024Comparing performance of RSA-2048 and secp256kr1 when: - Both are implemented in Mathematica - secp256k1: affine coordinate add/double - secp256k1: add then double scalar multiply Only shows that ECC is really fast, despite the best efforts to the contrary. 320
Yawning Angel @yawning.bsky.social · 22/04/2024One of these years, I seriously should just give up on hosting my own e-mail. I just don't want to deal with the headache of migrating my mailserver state. :/ 110
Yawning Angel @yawning.bsky.social · 22/04/2024Oh. It's this crap. www.spamhaus.com/resource-cen... Thanks, it's fixed now. 010
Reposted by Yawning AngelePrint Updates @eprint.ing.bot · 16/04/2024A Note on Quantum Algorithms for Lattice Problems (Omri Shmueli) ia.cr/2024/583 021
Yawning Angel @yawning.bsky.social · 13/04/2024The Bandai HG ATM-09-ST kit was pretty fun to build, and VOTMS (and the spinoffs) are in my top 3 giant robot animes of all time. 100
Reposted by Yawning Angelspooky Deirdre Connolly¹ ² at a distance @durumcrustulum.com · 11/04/2024re: eprint.iacr.org/2024/555.pdf, a quick tl;dr: non-fancy crypto fine (Kyber, Dilithium); (efficient) fancy crypto (besides ZKP's) may be boned ~forever (if this attack holds) (based on lattices / LWE specifically, when your q vs n has a sufficient gap) 31711
Yawning Angel @yawning.bsky.social · 11/04/2024Despite the automatic 2 month extension and using the "throw money at the problem and have an accountant do it" approach, having to file taxes twice every year fills me with immeasurable rage and hatred. 000
Reposted by Yawning AngelePrint Updates @eprint.ing.bot · 10/04/2024Share with Care: Breaking E2EE in Nextcloud (Martin R. Albrecht, Matilda Backendal, Daniele Coppola, Kenneth G. Paterson) ia.cr/2024/546 041
Yawning Angel @yawning.bsky.social · 10/04/2024I have a soft spot for hobbyist projects. github.com/SerenityOS/s... 010
Yawning Angel @yawning.bsky.social · 10/04/2024Meanwhile in Japan. Someone got arrested for selling altered pokemon savefiles. Not sure this is a great place to be based out of for conducting certain kinds of research. www.nikkei.com/article/DGXZ... 010
