Evan Kirshenbaum 's avatar

Evan Kirshenbaum

@evankirshenbaum.bsky.social

34 followers 404 following 193 posts

Software researcher, inventor, erstwhile linguist, book lover, bad bassist, former youth soccer ref and baseball coach, Stanford grad, proud dad, and devoted husband. @evanKirshenbaum at Twitter


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

📌

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Baseball umpire signals are also believed to be due to deaf players, though which nineteenth century player is responsible is disputed. (Some of the signals, especially "safe" and "out" are transparently taken from ASL.)

1 replies 10 reposts 30 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Emma, I'm so sorry. 🫂

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Feel free to DM if there's anything else you might want to know. (Or not, of course.)

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Apologies and feel free to disregard if this isn't the kind of help you were looking for.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Ugh. You're describing me starting the Friday before Memorial Day (of course), but I could only sit for about 30sec, too, before unbearable pain. 5-day course of steroids and daily gabapentin are working well for me. OTC Lidocaine patches on the lower back are a miracle. PT is probably helping, too.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Apparently Shinola was originally "Shinol'a" (ca. 1880, before it was the name of the company). It wouldn't surprise me if it was originally thought of by the manufacturer as "shine-all-a", but was mispronounced by the public, and the apostrophe was dropped from the packaging to match that.

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

My native Chicago dialect uses singular "they" to the point where I had trouble understanding what people were objecting to when it became an issue later, and I think I've always used "themself".

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I loved the anagram reveal. "Yes, viewer, you caught that. You're so so smart. It's not going to be that simple."

1 replies 0 reposts 3 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I think that, to me, if it would seem wrong to refer to Cousin Bob as simply "Bob", the "Cousin" should be capitalized. It's more of an honorific than an appositive.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

But donate *more* because it's deductible.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Introspecting, I think I'm mostly the former except in careful speech, with possibly a bit of labialization on the vowel. I grew up in Chicago in the ’70s.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

It's not called B-Ark, by any chance, is it?

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Thank you so much. That was one of my top wants. Checking somebody out to see if they're worth following us easier when their first hundred followers aren't all people you've never heard of. To extend this, could you also add followers you've blocked?

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Sure, but nobody acts like you're unable to just because of your age.

3 replies 0 reposts 6 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

That many younger people ignore the fact that much of the technology that they believe we're incapable of dealing with was actually invented by us Boomers (and earlier generations).

2 replies 0 reposts 12 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Jane's Strong Desire George Thorogood & The Damagers Reasonably Strong Bosstones Maybe

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

The Tap-les Bob Seger and the Orange Nerf Ball Band

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

"Where's the toilet?" "… In the restroom?"

0 replies 0 reposts 2 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Was the author (or character) Jewish? I tend to say it that way, and I believe it's a Yiddish calque. I can definitely see wanting a narrator or character to sound like that and resisting changing it.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

The heart rate is the one that gets me about half the time. I can often get it down just enough if I sit for a while, but they're only allowed to test twice, so I had to come back this last time. (Beta blockers fix that, but they fuck with my memory, so we don't do that anymore.)

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

It was so weird when I discovered (in the last few years) that this is actually true…after believing the reverse was true for over fifty years.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Holds for a lot of linguistics. My roommate used to laugh about the weird noises coming from my side of the room when I was taking phonology and trying to get my mouth to figure out how to produce implosive stops between vowels.

1 replies 0 reposts 18 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Looking at Google Books, it seems to mostly be initials referring to people, variables in equations, and OCR errors, but I also see a reference to "General Patton's … Western Task Force" abbreviated that way in a1959 book on chemical warfare.

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I thought you had missed one, but it turns out BATMAN FAMILY stopped the month before.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

And I read the prompt as "should have been canonical", as in "was, of course, but we couldn't say so".

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Just having fun, of course. But I don't see her as a beard so much as I see them having an open relationship, with Waldorf the pivot of a poly vee.

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I just meant that seeing them as an old (would've been) married (if allowed) couple is a little harder when one of them is canonically married at the time. But they certainly have the vibe.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Unfortunately, Waldorf is canonically married. His wife's name is Astoria. Not that he and Statler couldn't be a couple as well, of course.

1 replies 0 reposts 3 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Would you believe late 18th century and the original smallpox vaccine?

1 replies 1 reposts 5 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Real Genius came out the year I scheduled two classes at the same time and took one of them by watching the videotape in the library.

0 replies 0 reposts 2 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

A good friend of mine went to Cal Tech around that time, and he always said it was surprisingly accurate.

0 replies 0 reposts 3 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I can't see that title without thinking about those records. (They were records when I was taking lessons. I don't know what they are now, probably streaming.)

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I really wish somebody would post the actual requirements we're talking about. I find it hard to believe that they wouldn't have some notion of parental consent, but I guess I could be wrong. And I find it harder to believe that that wouldn't transfer the liability from the site to the parent.

1 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I assume you mean "without their assistance". If we're using a TPM, Android's key store appears to be able to require that biometric authentication be passed before a key can be used. I'd presume other devices do as well. (This has the downside that you lose the key if you add a new fingerprint.)

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Remembering that this we're talking at the It-doesn't-look-impossible level of a project proposal, not a worked-out and tested protocol … I'd think that you could require the use of a TPM to ensure that the private keys are locked to the device, but we're getting farther from my actual experience.

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Interestingly, as detailed as it is, it doesn't seem to answer that question. You can get to "child's spouse", but not "child's spouse's parent".

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

The only person who has the information linking me to my certificate is me. The CA knows they signed (a blinded version of) it and they know I asked for one, the web site knows I used it, but not who I am. The two colluding can't, I don't believe, link the two without knowing the blinding factor.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

More than that. They know that I passed the age check, but they don't know the information they're signing that I will use to demonstrate that fact, just that I presented it and I pass the age check. So they don't have to delete anything.

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

That would be a bad way to do it. I agree w/ 1 but I'm not sold on 2. Say: The DMV knows I'm over 18. I give them a blinded (new) public key that they sign. I unblind the cert to get a signed cert with the actual public key, which they never saw and so can't link to me. Or something like that.

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I'm not begging the question. I'm saying that it's not clear to me that it's true. I can honestly see arguments on both sides, but I tend to come down on the side of it being least objectionable to have to prove your identity to get a card that says "The anonymous bearer of this card is over 18."

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

That's why I like the third approach, as it doesn't require anybody but you and the DMV, and the DMV can't recognize the signatures it signs, but I *really* don't know enough about partially blinded signatures to be confident that that approach would work.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I'd hope that that would be unconstitutional. What's not as clear to me is whether requiring a person to present (and prove ownership of) a capability token detached from their identity is similarly unconstitutional just because they needed to identify themselves in the past to get the token.

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

"Nifty intellectual problems" is what I spent my career on (and what got me all those patent plaques) 😀. But I take your point, and I (honestly) would appreciate a pointer to what you consider the actual requirements to be so we're not further talking past one another.

0 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

The only real problem I see here is making the certs non-transferable, which can probably be done by locking the certs to hardware using a TPM, but again I'm waving my hands. Without that, I could prove my identity to the DMV and hand out the certificates it signs to my underage friends.

0 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

And probably different ones for different devices.

2 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

Only if you use the same cert for both. I was assuming you'd get a pile of certs and use a different one for each website/account pair.

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I admit that this would need *way* more than the sort of hand-waving I'm doing here to be trusted, and if I were still doing such protocol design, I'd work on it (and expect others to review). There are almost certainly vulnerabilities I'm not seeing here. But I'm not sold on "it's impossible" yet.

2 replies 0 reposts 1 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I'm assuming that the actual regulation would be something like "You have to use one of the verification methods we (the gov.) trust", which will likely be satisfied by certificates issued/signed by the states and at least some countries. The key is the CA knowing the ID but not the (full) cert.

1 replies 0 reposts 0 likes


Evan Kirshenbaum 's avatar Evan Kirshenbaum @evankirshenbaum.bsky.social
[ View ]

I'll buy 2 (which doesn't directly imply getting identity). I disagree on 1, since the issuer doesn't actually know the cert they signed, and 4 wouldn't seem hard for anybody who has a driver's license. (Not sure what you mean by 3) But I'll admit that none of my work was directly in this area.

1 replies 0 reposts 0 likes