str4d's avatar

str4d

@str4d.xyz

9804 followers 287 following 1871 posts

Cryptography, privacy, zero knowledge, Rust, gaming, hardware hackery, consumer of art. He/him.

str4d.xyz
abyssdomain.expert/@str4d
twitter.com/str4d
age18f63qx4gk8x7p4lfuwwglqcan7snvp406q5vmk26g9fmpe9c799qqzzr3w


str4d's avatar str4d @str4d.xyz
[ View ]

āœØ the classics āœØ

0 replies 0 reposts 2 likes


str4d's avatar str4d @str4d.xyz
[ View ]

50% of cryptography is signed ints

1 replies 0 reposts 2 likes


Reposted by str4d

Filippo Valsorda's avatar Filippo Valsorda @filippo.abyssdomain.expert
[ View ]

In 2022, I left Google in search of a sustainable approach to open source maintenance. A year later, I was a full-time independent maintainer. Today Iā€™m announcing the natural progression of that experiment: Geomys, a small firm of professional maintainers with a portfolio of critical Go projects.

3 replies 48 reposts 177 likes


str4d's avatar str4d @str4d.xyz
[ View ]

How has it already been a week

0 replies 0 reposts 0 likes


Reposted by str4d

Chelsea Komlo's avatar Chelsea Komlo @chelseakomlo.bsky.social
[ View ]

After 3 years & 12 drafts, the RFC for FROST is complete! We hope this makes implementing FROST easier with fewer bugs šŸ›

Thank you to everyone who helped by reviewing FROST security, submitting comments, and implementing the draft, this was a team effort šŸ™ŒšŸ’Ŗ

www.rfc-editor.org/rfc/rfc9591....

0 replies 5 reposts 7 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Accept

1 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Labour holds the first declared constituency, but that swing to Reform is *bleh* #ukpol

0 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Happy Bindependence Day!

0 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Just rediscovered a partially-complete spec I threw together 2.5 years ago for what I was code-naming "Guerilla Secret Storage". I should probably hack on it some more! And also add these things to my task list so I don't forget they exist!

0 replies 0 reposts 2 likes


str4d's avatar str4d @str4d.xyz
[ View ]

An analogy I literally just came up with, so take it with an appropriately large grain of salt: The earth's atmosphere filter out harmful solar radiation and cosmic rays. You can wear your choice(s) of sunglasses, sunblock, etc. to get additional protection or change your view.

2 replies 0 reposts 8 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Working now šŸ¤·

0 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

For some reason the service backing @eprint.bsky.social stopped shortly after I last deployed it. I did wonder why it was a bit quiet in here!

Re-deploying now, let's see what happens...

1 replies 0 reposts 4 likes


str4d's avatar str4d @str4d.xyz
[ View ]

The internet gremlins are definitely pulling shenanigans; CloudFlare is only partially working

1 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Wait, 1.1.1.1 is now resolving it again for me.

1 replies 0 reposts 0 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Interesting; I also see that with 1.1.1.1 and 4.4.4.4, but not with 9.9.9.9. Weird thing was that the app settings showed it as validating correctly:

1 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

@jaz.bsky.social, is this the same issue as the handle cache invalidation you've fixed recently, or a different problem?

1 replies 0 reposts 0 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Approximately yes. What Bluesky has currently deployed for DMs is a central server entity that hosts unencrypted DMs (exactly what Twitter does), and it has the same issue: works as long as Bluesky PBC exists and cooperates. Signal protocol would add E2EE but keep limitations the devs want to avoid.

1 replies 0 reposts 3 likes


str4d's avatar str4d @str4d.xyz
[ View ]

There are ways you could make it work, but the main limitation is around group messaging. Here the cryptographic ecosystem movement is generally towards MLS, and the Bluesky devs are keeping an eye on that:

1 replies 0 reposts 5 likes


str4d's avatar str4d @str4d.xyz
[ View ]

The Signal protocol design presumes a central server entity (for Signal messenger it is the Signal foundation; for WhatsApp it is Meta). This central entity is not easily replaced. ATProto's current public protocols are designed specifically around enabling replacement of the central server entity.

3 replies 0 reposts 6 likes


str4d's avatar str4d @str4d.xyz
[ View ]

For email encryption, the decision guide is usually "don't", because in most cases it gives a false sense of security. In particular, email encryption can never be end-to-end encryption (E2EE) due to how email works.

0 replies 2 reposts 9 likes


str4d's avatar str4d @str4d.xyz
[ View ]

To their credit, there are excellent cryptographic engineers working on WhatsApp, doing good work designing new features with E2EE in mind (for example, their backup protocol). But keep in mind there's only so much individual engineers and managers can do to push back against top-down directives.

1 replies 1 reposts 9 likes


str4d's avatar str4d @str4d.xyz
[ View ]

WhatsApp is much better than SMS or Telegram, as it uses the Signal protocol. This is one of the biggest wins of the Signal team TBH: getting E2EE deployed to Billions of people. But the client app is controlled by Meta, so it's fair to assume your data there may end up linked to the Meta datapool.

1 replies 1 reposts 11 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Do/Have you used a CD/DVD/Bluray in a while?

What about burning a disk?

@benjojo.bsky.social is surveying modern day awareness/usage of optical media, mostly to confirm some demographic theories. If you know what a CD/DVD is, please help them (and maybe others) out by answering ~10 questions here:

1 replies 1 reposts 4 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Good to know, thanks. I can't parse meeting minutes etc yet, gonna need persistence to cache the results so rendering is not horribly slow. As long as the current graph is close enough to the Go ecosystem's expectation, it will do for now.

0 replies 0 reposts 2 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Okay, first pass is up: go.rfc.observer

"Implemented" is any issue closed while labeled Proposal-Accepted, other closures are "Closed".

Did the Go Proposal workflow change in late 2015? There's very little label data prior to then.

Also, y'all have a lot of proposals! Data fetch takes a minute.

1 replies 1 reposts 11 likes


str4d's avatar str4d @str4d.xyz
[ View ]

1 replies 0 reposts 2 likes


str4d's avatar str4d @str4d.xyz
[ View ]

I can totally set up go.rfc.observer. Where do Go proposals live and what is their evolution process?

1 replies 0 reposts 5 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Bleh *socially distanced hugz*

1 replies 0 reposts 1 likes


str4d's avatar str4d @str4d.xyz
[ View ]

And to cap off the snipe, a barebones website to host and render the Rust RFC tracking issues graph:

1 replies 0 reposts 6 likes


str4d's avatar str4d @str4d.xyz
[ View ]

(which tells me I have an off-by-one somewhere in my extraction logic, because I count 96 issues not closed, and no open issues without either label šŸ« )

0 replies 0 reposts 4 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Close! In the above graph, 74 issues currently have B-RFC-approved and not B-RFC-implemented. 23 issues have B-RFC-implemented (and may or may not have B-RFC-approved).

1 replies 0 reposts 3 likes


str4d's avatar str4d @str4d.xyz
[ View ]

After being thoroughly nerd-sniped šŸ˜… here's what the Rust RFC tracking issues look like over their history. Caveats: there exist multiple tracking issues for some RFCs due to subtasks being split out, and there are 9 tracking issues with RFC labels but no obvious associated RFC that I've omitted.

2 replies 2 reposts 14 likes


str4d's avatar str4d @str4d.xyz
[ View ]

I do be sniped:

0 replies 0 reposts 3 likes


str4d's avatar str4d @str4d.xyz
[ View ]

The comment was commited on July 25th 2005. It was authored by Jan Hubicka from SUSE and Hong Jiu Lu from Intel, while updating the ELF linker script with large section support.

github.com/bminor/binut...

1 replies 0 reposts 6 likes


str4d's avatar str4d @str4d.xyz
[ View ]

The vibes will be indistinguishable from random

1 replies 0 reposts 4 likes


str4d's avatar str4d @str4d.xyz
[ View ]

If the rng output is indistinguishable from a uniform distribution, then due to you using XOR (which means the random bit acts as a blinding factor), the output will also be indistinguishable from a uniform distribution.

1 replies 0 reposts 3 likes


Reposted by str4d

str4d's avatar str4d @str4d.xyz
[ View ]

DM or ping me! It's a manually-vetted list embedded into the bot code, so I'm the one doing updates.

0 replies 1 reposts 0 likes


Reposted by str4d

Alec Stapp's avatar Alec Stapp @alecstapp.bsky.social
[ View ]

Contender for favorite chart of all time: Predictions vs. Reality for solar energy.

58 replies 756 reposts 2302 likes


str4d's avatar str4d @str4d.xyz
[ View ]

After noticing that @annalysyanskaya.bsky.social is here, I've made another round of updates to the author linkifier map for @eprint.bsky.social. My list of "Bluesky accounts visibly connected to people who upload to the Cryptology ePrint Archive" is up to 69!

1 replies 0 reposts 3 likes


str4d's avatar str4d @str4d.xyz
[ View ]

You vs The Guy She Told You Not To Worry About

2 replies 5 reposts 28 likes


str4d's avatar str4d @str4d.xyz
[ View ]

I'm very happy that @tailscale.com figured out Linux DNS for me so I don't have to care.

3 replies 2 reposts 24 likes


str4d's avatar str4d @str4d.xyz
[ View ]

yeah atproto has scammers. they run LexiCons

0 replies 0 reposts 4 likes


Reposted by str4d

David Buchanan's avatar David Buchanan @retr0.id
[ View ]

Planning a trip to The Internet? Learn this handy phrase before you go: "I do not have the required background to form opinions on this topic"

15 replies 151 reposts 652 likes


Reposted by str4d

rahaeli 's avatar rahaeli @rahaeli.bsky.social
[ View ]

Okay. I am probably going to regret wading into this again, but The Discourse about child protection issues on Bluesky has escalated to the point where people are making extremely serious accusations against the head of Bluesky T&S, and y'all need to stop. It is unhinged QAnon batshittery.

21 replies 182 reposts 758 likes


str4d's avatar str4d @str4d.xyz
[ View ]

Why did my latest system backup fail? *checks logs* Oops, I had someone send me a copy of the xz backdoor over Signal to analyze, and now its attachments folder is tripping Windows Defender šŸ˜…

1 replies 0 reposts 19 likes