Aaron Toponce ⚛️:debian:

MSCSIA, cryptography, security, locksport, Linux, programming, mathematics, amateur radio, Buddhism, running, anime, and bibliophilia.

Public Key

npub14dfr55yyvfw0leduur7e4af7fnkeegww6e2n64laxkkdyn4sufrqhs5uyy

NIP-05 Address

atoponce@fosstodon-org.mostr.pub

Profile Code

nprofile1qqs2k5362zzxyh8luk7wplv675lyemvu588dv4fa2l7nttxjf6cwy3spz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qzynhwden5te0danxvcmgv95kutnsw43q92uwfn

Publishing to

relay.ditto.pub

offchain.pub

relay.snort.social

Author Public Key

npub14dfr55yyvfw0leduur7e4af7fnkeegww6e2n64laxkkdyn4sufrqhs5uyy

Show more details

Last Notes

2026-10-26 05:42:50 UTC

Windows XP SP 2 was the first rock-solid Windows version from Microsoft, coming from the constant crashes of Windows 98 and ME. It was a standout in operating system design.
It was also the last Windows version that was my daily driver. In 2004, I dropped it for Debian as my main OS and haven't missed it. I did need a Windows 10 VM for grad school but that was it.
Still, XP will always be nostalgic for me.
https://www.tomshardware.com/software/windows/windows-xp-debuted-25-years-ago-today-microsofts-biggest-launch-since-95-was-its-first-consumer-os-to-remove-the-dos-underpinnings

2026-10-22 23:04:04 UTC

<rant>It's really frustrating how laggy modern software is these days. What happened to responsive, snappy, and feature-filled software?</rant>

2026-10-18 12:08:17 UTC

#MacOS disappeared from the #UNIX certification registry.
https://news.ycombinator.com/item?id=50031653
Of course, the whole thing has always been a lie.
https://www.osnews.com/story/141633/apples-macos-unix-certification-is-a-lie/

2026-10-14 19:38:34 UTC

Friends don't let friends use PGP. In no particular order, the criticisms against PGP:
- https://secushare.org/PGP
- https://www.schneier.com/blog/archives/2016/12/giving_up_on_pg.html#c6740847
- https://www.latacora.com/blog/2019/07/16/the-pgp-problem/
- https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/
- https://cs-people.bu.edu/tromer/handsoff/
- https://archive.ph/lEGcZ
- https://words.filippo.io/openpgp-is-broken/
- https://www.eff.org/deeplinks/2018/05/not-so-pretty-what-you-need-know-about-e-fail-and-pgp-flaw-0
- https://www.wired.com/story/efail-pgp-vulnerability-outlook-thunderbird-smime/
- https://blog.yossarian.net/2023/05/21/PGP-signatures-on-PyPI-worse-than-useless
#FreeSoftware #surveillance #FSF #encryption #crypto #cryptography
#nevent1q…mrut

2026-10-12 22:06:09 UTC

Linus Torvalds Working On A Hefty Linux Kernel Improvement With Claude Code
A new branch named "noref-filemap-read-with-llm" contains kernel improvements he's been working on with the help of AI / LLMs, Claude Code specifically
"The code, the test programs, the review behind the list above and the first draft of this text were done with an LLM coding assistant (Claude Code) under my direction. The measurements were run on my machine."
https://www.phoronix.com/news/Linus-Torvalds-Claude-Code
#linux #ai

2026-10-07 02:18:24 UTC

Oh boy. Just discovered a POP3 server that negotiates over TLS 1.0.
Probably not worth holding on to that protocol for your one Eudora user on Windows 98.

2026-09-29 18:47:36 UTC

America is an AI bot now.
https://america.gov/about
https://cdn.fosstodon.org/media_attachments/files/117/355/814/807/004/949/original/4693256397e2d228.png
https://cdn.fosstodon.org/media_attachments/files/117/355/816/247/722/423/original/0d10126e6d626f6b.png

2026-08-26 02:39:26 UTC

Nitter instances go offline due to a cease and desist from X/Twitter.
https://cdn.fosstodon.org/media_attachments/files/117/159/489/332/499/797/original/113216756bacaaa0.png

2026-08-17 21:46:14 UTC

The #Wikimedia Foundation (the charity that runs #Wikipedia) have hired the largest union busting law firm in the US to try to stop their staff unionising
https://en.wikipedia.org/wiki/Wikipedia:Wiki_Workers_United_solidarity - English Wikipedia petition to show solidarity, only 40 signatures until its the largest ever proposal or petition on English Wikipedia
https://meta.wikimedia.org/wiki/Wiki_Workers_United - A global solidarity petition
https://meta.wikimedia.org/wiki/2026_recognize_Wiki_Workers_United_petition - A petition to ask the board of trustees to reverse their decision

2026-08-04 15:49:05 UTC

- reply

@nprofile…z6pq Hah. I did sleep well actually. It's more the bullshit I'm going to have to put up with today. There isn't enough coffee for it honestly.

2026-08-04 15:44:18 UTC

Today is going to be a 6-cup coffee day.

2026-07-28 19:41:57 UTC

I believe this is the correct overview of the #Linux RNG as defined in drivers/char/random.c. Probably have some minor quibbles that needs addressing though.
#cryptography #crypto
https://cdn.fosstodon.org/media_attachments/files/116/999/299/966/936/890/original/968201a4a07eb142.png

2026-07-21 22:36:18 UTC

I guess I shouldn't be surprised, but "ForwardX11Trusted yes" in ~/.ssh/config doesn't apply to Wayland.
A workaround is to install waypipe:
$ waypipe ssh user@host.example.com
#linux

2026-07-21 16:47:40 UTC

Their post announcing being back on Twitter has since been deleted.
I guessing they learned that engagement on a platform that officially developed an AI bot generating CSAM isn't good for marketing.
#nevent1q…3ytr

2026-07-14 18:21:32 UTC

Prophetic.
#AI
https://cdn.fosstodon.org/media_attachments/files/116/919/706/688/282/084/original/2177bf4a55265f51.png

2026-07-06 23:41:43 UTC

#sony
https://cdn.fosstodon.org/media_attachments/files/116/875/674/829/444/042/original/e5c3e607e6f96248.png

2026-06-09 05:46:33 UTC

I think I've mentioned this before, but I'm toying around with adding keyboard patterns in my password generator.
The algorithm:
1. Pick a random key.
2. Identify adjacent keys horizontally and vertically.
3. Pick a random adjacent key.
4. Repeat until entropy target is reached.
72-bit examples:
Colemak: 098(){]|}+}[{]\\]|}|}[{{:YU8u
Dvorak: 5$#$p>EJkXKJkUpyp>#2#>pYF
QWERTY: XZxcxzxZXSXsde3>?.?:?>?:"[}+
Workman: _+-0["['I"['iO>oEnFuENfNyn
#passwords #security

2026-05-18 23:01:12 UTC

We've had it with Mattermost.
Testing Zulip is a breath of fresh air. It's responsive, doesn't have stupid scrolling bugs, and overall just has a better workflow.
Granted, it's got some quirks I'm not immediately a fan of, such as its threads. But those are vastly out-weighed by how responsive snappy the whole experience is.
Curious how snappy it'll be after migrating over all the data.

2026-05-11 16:38:21 UTC

- reply

@nprofile…4lqc High resolution screenshot instead of a photo of a monitor:
https://cdn.fosstodon.org/media_attachments/files/116/556/920/995/661/995/original/4b60235d49ecf4e7.png

2026-05-05 13:00:05 UTC

Google Chrome is silently installing a local LLM on your computer that is 4 gigabytes in size. It's done without consent, it's not visible in the settings, and removing it will reinstall it later.
https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/

2026-04-23 15:16:22 UTC

#Bitwarden CLI 2026.4.0 compromised in a supply chain attack.
https://socket.dev/blog/bitwarden-cli-compromised
Looks like the window was incredibly small and the impact minimal. A CVE is still being issued.
https://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127
> "The issue affected the npm distribution mechanism for the CLI during that limited window, not the integrity of the legitimate Bitwarden CLI codebase or stored vault data."
No need to panic, but I have a feeling we'll see a lot more of this. Recall XZ and SSH?
#security #cybersecurity

2026-03-19 12:34:50 UTC

Systemd merged age verification to comply with California state law.
If you want to enter a birth date, I recommend "Friday, 13 December 1901 20:45:52".
I like this for a few reasons:
1. This is the earliest date possible for a 32 bit datetime integer in C.
2. It's malicious compliance.
3. It's obviously faked.
https://github.com/systemd/systemd/pull/40954
#linux

2026-03-10 17:08:13 UTC

Looks like #SUSE #Linux is up for sale. Again.
- 2003: Acquired by Novell
- 2010: Attachmate Group takeover
- 2014: Micro Focus merger
- 2018: Sold to EQT AB
(Ignoring all the asset sales and transfers)
https://www.reuters.com/business/eqt-eyes-potential-6-billion-sale-linux-pioneer-suse-sources-say-2026-03-09/

2026-02-23 18:52:13 UTC

>“But it also takes a lot of energy to train a human,” Altman said. “It takes like 20 years of life and all of the food you eat during that time before you get smart."
Human consumption of ~2000-2500 kcal/day is roughly 97-121 Wh. If that human lives to be 80 years old and keeps a constant energy consumption of ~100 Wh, then their total energy consumption is ~56 MWh.
GPT-3 consumed approximately 1.287 GWh during its training.
GPT-4 consumed 50-60 GWh.
Swing and miss.
https://techcrunch.com/2026/02/21/sam-altman-would-like-remind-you-that-humans-use-a-lot-of-energy-too/

2026-01-29 22:42:01 UTC

I try to shop local when I can, so I've had a local #coffee subscription for a few years.
I just found out recently that a running friend of mine has his own coffee roasting side business, so I ordered some coffee from him.
Turns out, he's also a #Linux nerd and software developer. He has his own Matrix server running in his house bridging a number of different texting services.
Definitely going to have more to talk about at future club runs.
#running #runnersOfMastodon

2026-01-10 05:01:23 UTC

I have advocated for bcrypt many time specifically for this. If you can't deploy bcrypt, enforce an upper limit in your authentication form. 100 characters is stupidly more than enough, even for long passphrases.
https://instatunnel.my/blog/the-1mb-password-crashing-backends-via-hashing-exhaustion
#passwords

2026-01-06 15:41:54 UTC

What mail clients honestly still require POP3? I thought it was dead back in like 2010.
https://www.theregister.com/2026/01/05/gmail_dropping_pop3/

2025-12-31 18:44:39 UTC

4th Edition #UNIX in your browser.
https://unixv4.dev/

2025-12-28 23:19:41 UTC

TIL that HP-UX reaches end of life in 3 days on 2025-12-31.
When I worked as a contractor for a U.S. government department back in 2010/2011, the team I was on had all HP-UX on PA-RISC, with a few on Itanium.
We had speculated whether or not HP was pulling development on HP-UX given that 11i v3 was released in 2007 and there didn't seem to by any movement towards 11i v4 or 12.0.
This in addition to Tru64 on Alpha that HP ended earlier.
How the mighty have fallen.
#unix #linux

2025-12-28 14:24:01 UTC

- reply

@nprofile…dql2 While dating my wife in 1999, Pine was the only email client available at my local university. I still remember it fondly, and wish I had an archive of those emails.

2025-12-26 17:19:24 UTC

Do you want a CVE? Because this is how you get a CVE.
https://cdn.fosstodon.org/media_attachments/files/115/787/007/133/452/534/original/1e2951e9330ad183.png

2025-12-19 22:46:22 UTC

https://cdn.fosstodon.org/media_attachments/files/115/748/659/134/253/931/original/77ca5df34ff3b563.png

2025-12-15 21:08:33 UTC

In May of 2018, ISC replaced using system RNG with xoroshiro** for all random functions in Bind9, claiming the system calls were too slow.
https://github.com/isc-projects/bind9/commit/99ba29bc52f640ec9c2cbb331ffdeceff2f0f26f
Fast forward 7 years, and we have a cache poisoning attack due to weak PRNG with a CVE score of 8.6.
Reminder: all code is security related.
https://www.cve.org/CVERecord?id=CVE-2025-40780
#crypto #cryptogarphy

2025-12-14 18:31:46 UTC

It's been a long time since I've played with any of my HWRNG devices. Dug those back out and getting them working again.
I used to have a Raspberry Pi providing "Entropy As A Service" from my home years and years ago. I should do that again.
#crypto #cryptography
https://cdn.fosstodon.org/media_attachments/files/115/719/341/054/079/096/original/53e0430d878669b1.jpg

2025-12-12 05:03:43 UTC

This is a "paceometer". On the inner dial, you see the standard speedometer in "miles per hour", but on the outer dial, you see the units in "minutes per 10 miles".
Notice that when you're driving very slowly, increasing your speed by 10 miles per hour make a big difference on your ETA.
But if you're already going quite fast, say 70 mph, increasing your speed barely makes a difference on your duration.
While also increasing risk of accidents, braking distance, energy consumption, etc.
https://cdn.fosstodon.org/media_attachments/files/115/704/826/605/685/001/original/5e89056910ae334e.png

2025-12-10 13:25:02 UTC

Private Reddit profiles aren't actually private. With the profile pulled up, search for " " (space) and all their posts and comments will be visible.

2025-12-09 13:13:37 UTC

Signal and WhatsApp side channel attack.
Using basically just a silent ping, this proof of concept can extract behavioral information about how you use WhatsApp and Signal.
The adversary can flood the target with RTT requests every 50 ms without them ever getting any hype of UI alert, while also simultaneously draining the battery and consuming bandwidth.
The target phone responds differently if unlocked vs locked, and WiFi vs carrier.
https://github.com/gommzystudio/device-activity-tracker

2025-12-07 20:20:20 UTC

Random observation, but it is fascinating to me that Japan doesn't "text message". It's never really taken off. Instead, their phones have been designed around email. Each phone has its own unique email assigned by the carrier. SMS is basically extinct.
Contrast that to the US where SMS/MMS is prevalent and Google is trying to force RCS. Interoperability between Android and iOS is still obnoxious.
Meanwhile, everyone in Europe is on WhatsApp.

2025-12-06 12:52:44 UTC

- reply

@nprofile…f95k Code will expire in 1 minute. We'll send you the email shortly.
Please keep refreshing your inbox.
We promise it's coming.
It's almost there.
Just a little longer.
Thank you for your patience.

2025-12-05 22:40:34 UTC

https://cdn.fosstodon.org/media_attachments/files/115/669/358/609/750/682/original/c1c07fa0220c2f42.png

2025-11-20 23:52:35 UTC

A play in two acts.
https://cdn.fosstodon.org/media_attachments/files/115/584/712/026/088/028/original/79fd7927013621c2.png
https://cdn.fosstodon.org/media_attachments/files/115/584/712/689/882/050/original/040d37207a6927a2.png

2025-11-18 12:39:58 UTC

Remember the AWS outage from just a couple weeks ago and how much of the Internet it took with it.
Cloudflare's turn.
The original decentralized Internet is looking awfully good right now.
https://www.independent.co.uk/tech/cloudflare-down-twitter-not-working-outage-b2867367.html

2025-11-17 21:31:51 UTC

McDonald's advertising Debian GNU/Linux
#debian #gnu #linux
https://cdn.fosstodon.org/media_attachments/files/115/567/170/422/030/588/original/75b93d82f6889cf9.png

2025-11-13 17:54:15 UTC

Great write-up on the reverse engineering of Twitter's E2EE protocol. It comes with significant drawbacks that compromise the promise of E2EE for Twitter users.
It's not:
- forward secure
- post-compromise secure
- MITM resistant
It's trivial to get snarky and claim "of course Elon is reading your DMs", but it's another to actually dig into a black box protocol and put the claims to the test.
https://david.nepozitek.cz/blog/can-elon-musk-read-your-x-chat-messages

2025-11-06 00:32:02 UTC

- reply

@nprofile…43jh Give me slack!

2025-11-05 18:56:49 UTC

I've been holding on to the same OpenSSH known hosts file since I started with my current employer, 13 years. I wonder how much of this is old cruft:
% wc -l ~/.ssh/known_hosts
1803 ~/.ssh/known_hosts
#linux

2025-11-03 19:01:40 UTC

#LinkedIn will use your data to train its #AI models unless you opt out.
https://www.techradar.com/pro/linkedin-set-to-expand-ai-training-on-user-profiles-heres-how-to-stop-it-using-your-personal-data
In addition to changing that setting in your profile settings, here is also the direct link for opting out:
https://www.linkedin.com/help/linkedin/ask/TS-DPRO

2025-10-23 16:30:35 UTC

- reply

@nprofile…52vl It only happens with internal Intranet domains that require the VPN to display and it's off-and-on. Sometimes, the page pulls up without issue, sometimes I get a cert domain mismatch error. I never have the problem with any external domain and other staffers cannot reproduce the problem.

2025-10-12 02:22:23 UTC

Running the #ChicagoMarathon tomorrow. Here's the spread.
#Running #RunnersOfMastodon
https://cdn.fosstodon.org/media_attachments/files/115/358/800/495/308/757/original/97ca1141281d4559.jpg

2025-10-05 14:04:54 UTC

Moron billionaires.
Millions of people will be living in space in the next couple of decades? Let's do the math.
Assume 2 million people in 20 years. That's moving 274 people per day, every day, for 20 years starting today.
Ignoring the fact that we don't have anywhere to put them when we start launching, we don't have the infrastructure to move that many people that often. Not the cargo space, the fuel, the rockets, the launch pads, nor the launch team.
https://techcrunch.com/2025/10/03/bezos-predicts-that-millions-will-live-in-space-kind-of-soon/

2025-06-11 17:34:50 UTC

You know what's a dead giveaway for ChatGPT generated text? The emdash —.

2025-06-03 16:55:31 UTC

Friend: What's your password?
Me: 342760575891993352
Friend: WTF, why this password?
Me: "Second Breackfaste"
#Passwords
https://cdn.fosstodon.org/media_attachments/files/114/620/475/886/447/026/original/bbd58060541e12d4.png

2025-06-01 21:59:17 UTC

Why was the statement scared while the comment was not?
Statements are executed.
#Programming #joke

2025-05-28 21:24:58 UTC

I'm adding "slopsquat" to my vocabulary.
https://www.theregister.com/2025/04/12/ai_code_suggestions_sabotage_supply_chain/
#ai #openai #genAI

2025-05-21 02:11:37 UTC

Red Hat announces RHEL 10.
However, they should fire the AI that's writing their press releases. That post reads like nothing but a bunch of buzzwords.
> "Durable foundation for IT innovation fuels more intelligent hybrid cloud operations with AI-powered Linux management"
WTF does that even mean?
https://www.redhat.com/en/about/press-releases/red-hat-introduces-rhel-10
#RedHat #linux

2025-05-20 04:40:19 UTC

#Password generation isn't your strong suit "Is It Down Or Just Me", is it?
See if you can spot the problem.
#passwords
https://cdn.fosstodon.org/media_attachments/files/114/538/315/003/356/272/original/fa0f583fe10ac9aa.png
https://cdn.fosstodon.org/media_attachments/files/114/538/314/991/540/783/original/93f863a4d5bf6eff.png
https://cdn.fosstodon.org/media_attachments/files/114/538/314/989/361/980/original/3e7d9d3c5b12b41d.png

2025-05-01 18:23:44 UTC

#Redis is #OpenSource again. Probably too late though. Everyone I know switched to Valkey.
#FreeSoftware
https://antirez.com/news/151

2025-04-16 02:36:47 UTC

Despite the claims made otherwise, #Strongbox is not #OpenSource software.
https://github.com/strongbox-password-safe/Strongbox/issues/784

2025-04-08 17:00:17 UTC

This is Internet Gold.
> "... it is important to note that the compression algorithm used by lzip only discards the unimportant data. And if it was unimportant before, what makes it so important now? Huh? In fact, many users may find that compressing their entire file system and then restoring it will be a good way to learn what is truly important."
https://web.archive.org/web/20010608045914/http://lzip.sourceforge.net/faq.html
#compression #AprilFools #opensource #lzip

2025-04-06 16:55:29 UTC

This was a surprisingly good read. Definitely bookmarked.
https://medium.com/@sebastiancarlos/how-to-become-a-hacker-a-step-by-step-guide-94902dc425b0

2025-04-04 20:29:01 UTC

- reply

@nprofile…vdjy I'd love to read it, but Lobsters blocks the Brave browser.

2025-04-04 02:15:10 UTC

On March 31, I ran the Grand Canyon R2R2R with a coworker.
We started at the South Kaibab trailhead at ~6:30 AM, made our way north to the Colorado River, crossed the bridge to Phantom Ranch, headed north through Cottonwood towards Manzanita, then made the eastward turn towards North Kaibab. Once we reached the north rim, we retraced our route back to the south rim, finishing ~9:00 PM.
44 miles, 12,000 feet elevation gain, 14.5 hours.
#running #RunnersOfMastodon
https://cdn.fosstodon.org/media_attachments/files/114/277/271/575/729/071/original/d3b5154363331d2a.png
https://cdn.fosstodon.org/media_attachments/files/114/277/273/188/309/589/original/c23cdaf863ca5fbe.png
https://cdn.fosstodon.org/media_attachments/files/114/277/274/015/172/045/original/208d91f797e6f95c.png
https://cdn.fosstodon.org/media_attachments/files/114/277/275/344/322/797/original/dee4b2c10e564c07.png

2025-04-02 21:10:52 UTC

- reply

@nprofile…t4qe Hmm. Good question. I don't know that BSD sed(1) supports escape sequences like \x00 for null characters. How about a work around?
$ sed 's/$/\xff/g' input.txt | tr '\xff' '\0' > output.txt

2025-03-25 15:31:32 UTC

- reply

@nprofile…yh6f I can do that.

2025-03-24 17:02:51 UTC

I discovered a madening issue with @nprofile…yh6f spreadsheets: you cannot easily export only the current sheet in your workbook to CSV.
The sheet that got the last data save is the one to get exported. There is no way around this, aside from saving some data in the other sheet(s) you need to export.
Looks like this has been a long-standing bug.
https://github.com/flathub/org.onlyoffice.desktopeditors/issues/92
#opensource

2025-03-16 00:34:15 UTC

#Ubuntu is moving away from GNU coreutils to Rust-based uutils coreutils with Ubuntu 25.10. There are two big differences with this move:
1. uutils coreutils is MIT licensed, not GPL.
2. Obviously, it's written in Rust, a memory-safe compiled language, unlike C.
IMO, this is a good move.
https://discourse.ubuntu.com/t/carefully-but-purposefully-oxidising-ubuntu/56995
#gnu #rust #linux

2025-03-14 22:57:06 UTC

Happy #PiDay
https://cdn.fosstodon.org/media_attachments/files/114/163/254/538/358/737/original/bd53cb998c593556.mp4

2025-03-14 22:56:39 UTC

If USA is so great, why do we have USB?
#gnu #linux #bash
https://cdn.fosstodon.org/media_attachments/files/114/163/252/616/412/620/original/5c3e8888c5d3053c.png

2025-02-27 16:46:17 UTC

Google in 1999.
"Google (www.google.com) is a pure search engine - no weather, no news feed, no links to sponsors, no ads, no distractions, no portal litter. Nothing but a fast-loading search site. Reward them with a visit."
https://cdn.fosstodon.org/media_attachments/files/114/076/857/285/129/888/original/24c068001926bac6.png

2025-02-13 13:52:40 UTC

Aaron Swartz lost his life over a small information leak attempt making academic documents that were public domain, taxpayer funded, but locked behind obscene paywalls, accessible.
Meanwhile, FAANG et. al use copyleft, Free Software libraries to torrent petabytes of data abusing owner copyright to train their LLMs.
Laws only apply to you and me, not for the rich and powerful.
https://sfstandard.com/2025/02/08/aaron-swartz-marble-statue-unveiled-internet-archive/

2025-02-06 17:43:03 UTC

Developer applies at @nprofile…lfze, goes through extensive hiring filters and many interviews, gets an offer in hand, accepts the offer, quits their job, only for Canonical to retract the offer.
Don't work for Canonical.
#Ubuntu #Linux
https://www.reddit.com/r/linux/comments/1ij4itg/canonical_what_a_shame/

2025-01-29 22:11:02 UTC

This slipped past my radar: LetsEncrypt is ending support for TLS cert expiration notification emails.
https://letsencrypt.org/2025/01/22/ending-expiration-emails/

2025-01-29 13:33:29 UTC

"AI stole our jobs".
https://www.ft.com/content/a0dfedd1-5255-4fa9-8ccc-1fe01de87ea6

2025-01-16 18:15:23 UTC

- reply

@nprofile…k39d I'm enjoying it so far. It's a bit juvenile, but still fun and engaging.

2025-01-16 14:24:22 UTC

30 One Piece episodes down.
1,092 episodes to go.
#anime

2025-01-16 10:51:58 UTC

Hard pass. I will not use #passkeys and will tell my friends and family to do the same.
So long as attestation part of the WebAuthn spec, it allows companies to lock consumers into using specific passkey managers.
It's exactly like streaming subscriptions. Attestation sets up the dystopia of a paid 1Password account for your email passkey, a paid LastPass account for your utility account passkey, a paid Bitwarden account for your health insurance, etc.
#passwords
https://www.ncsc.gov.uk/blog-post/passkeys-not-perfect-getting-better

2025-01-08 23:43:26 UTC

Yup. You guessed it. #AI.
#OpenAI #Gemini #ChatGPT
https://cdn.fosstodon.org/media_attachments/files/113/795/385/501/549/558/original/8618ab2446c0a6e6.png

2025-01-06 19:43:22 UTC

SP 800-38D Rev. 1, Pre-Draft Call for Comments: GCM and GMAC Block Cipher Modes of Operation
1. Adapt GCM to the eventual approval of a block cipher with 256-bit blocks and
2. Explicitly endorse a suitable nonce-key generation method.
https://csrc.nist.gov/pubs/sp/800/38/d/r1/iprd
#crypto #cryptography

2025-01-02 21:09:14 UTC

Whelp, here we go. Net neutrality is dead. Say hello to tiered Internet and prioritized traffic in the United States.
What an embarrassing turn of events to start off 2025.
#NetNeutrality
https://www.nytimes.com/2025/01/02/technology/net-neutrality-rules-fcc.html?unlocked_article_code=1.mE4.yhzk.e6AXCTkPtpva

2025-01-01 00:01:58 UTC

I can't be the only one who passes "--verbose" to xz(1) to watch and cheer for the compression percentage:
# WOO HOO!
1,451.3 MiB / 7,872.6 MiB = 0.184
# C'mon! You can do it!
2,223.2 MiB / 4,560.6 MiB = 0.487
# No no no. Wrong direction!
4,675.0 MiB / 4,757.1 MiB = 0.983
#gnu #linux

2024-12-28 04:14:25 UTC

NIST is proposing a 256-bit block variant of AES with a static 256-bit key size. Public comments are open until January 25, 2025.
#crypto #cryptography
https://www.nist.gov/news-events/news/2024/12/nist-proposes-standardize-wider-variant-aes

2024-12-26 21:00:52 UTC

Hopeful, but skeptical. I guess we'll never know.
#chatgpt #ai
https://cdn.fosstodon.org/media_attachments/files/113/721/136/636/484/608/original/f9ae8e0ef53bcb87.png

2024-12-11 13:28:19 UTC

There are 01 types of #AI in the world. Those that understand binary and those that 🍓.
#ChatGPT
https://cdn.fosstodon.org/media_attachments/files/113/634/408/082/626/855/original/c034ae7fa39cb5a4.png

2024-12-01 10:37:19 UTC

Example #521 #AI isn't taking our jobs.
Here, the prompt was asking #ChatGPT to draw a logic diagram for F=xy'z+x'y'z+xyz.
Good times.
https://redd.it/1h3vt1j/
https://cdn.fosstodon.org/media_attachments/files/113/577/111/994/241/875/original/90691fa479a0c52a.png

2024-08-23 13:58:11 UTC

I'm volunteer tutoring some high school students in #math at the local library.
I want to make it engaging for them, so I'm thinking about gamifying it. Any ideas? I'd prefer not to do individual rankings.
I was thinking maybe something TTRPG-like, where a character's success on beating the enemy depends on how many kids show up, what questions they bring to the tutoring session, and how well they engage. Struggling to work out the details though.
Thoughts?

2024-08-16 12:16:19 UTC

Machine learning.
https://cdn.fosstodon.org/media_attachments/files/112/971/649/990/846/614/original/1f2ad7aafa80f86f.webp

2024-07-16 12:29:31 UTC

Generative AI is garbage, exhibit 99:
#ai #math
https://cdn.fosstodon.org/media_attachments/files/112/796/157/528/868/994/original/20f2235235698a72.png

2024-07-04 22:03:46 UTC

Wikipedia now has dark mode.
https://cdn.fosstodon.org/media_attachments/files/112/730/479/653/278/680/original/cfc2b14168f24598.png

2024-06-27 20:41:10 UTC

#Linux chaos from bad to worse:
# sort /dev/urandom
# :(){ :|:& };:
# chmod -x $(command -v chmod)
# [ $[ $RANDOM % 6 ] == 0 ] && rm -rf /* || echo "click"

2024-06-21 13:14:33 UTC

You guys don't understand.
If Google pays taxes in a random country, to cheat the system and save money, that's clever because "Globalism".
If you do it, you get banned though.
Its like work, employers can out source any job, but if you do it you get fired.
Or you know, CEOs can work for multiple companies. If you do it it’s time theft.
https://techcrunch.com/2024/06/20/youtube-confirms-crackdown-on-vpn-users-accessing-cheaper-premium-plans/

2024-06-06 21:27:22 UTC

Geordi La Forge weighs in on the "tabs versus spaces" debate.
#programming
https://cdn.fosstodon.org/media_attachments/files/112/571/788/316/904/649/original/2a3f6510489883ef.png

2024-06-02 00:37:11 UTC

3/2 🍓 = 6 → 🍓 = 12/3
3/2 🍊 = 2 → 🍊 = 4/3
3 🍅 = 10 → 🍅 = 10/3
🍓 × 🍊 × 🍅 =
12/3 × 4/3 × 10/3 =
480/27 =
160/9
Who designs #math puzzles where the fruit emoji are not whole numbers?
https://cdn.fosstodon.org/media_attachments/files/112/544/205/614/692/784/original/b36087cc76eef124.jpg

2024-05-16 12:41:07 UTC

Given the recent misinformation campaign by Pavel Durov and others surrounding #Teleglam and #Signal, it's worth reading how Telegram actually works by Moxie Marlinspike.
https://threadreaderapp.com/thread/1474067549574688768.html

2024-05-02 20:44:14 UTC

I know a joke about #vim. jk

2024-04-26 21:32:23 UTC

Passkeys are indeed a shattered dream. Everything in this post is spot on with my experience using them.
In theory, I love the idea. In practice, it's a horrible, horrible, horrible UX.
I'll stick with #passwords + security keys/TOTP until this mess gets cleaned up.
https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

2024-04-21 04:12:49 UTC

Writing good code > your choice of IDE
#programming

2024-04-19 20:38:06 UTC

Friends don't let friends use Discord.
Message History of 600 Million Discord Users Can be Accessed For $5
#privacy #security
https://80.lv/articles/message-history-of-600-million-discord-users-can-be-accessed-for-usd5/

2023-05-19 22:23:50 UTC

- reply

@npub178r…qekt @npub1aq2…4nfw I heard the next election will have full self-driving.

2023-05-19 16:16:25 UTC

I knew about reversing a file with tac(1), but I did not know about reversing lines with rev(1).
#gnu #linux #bsd #unix