In the 70s they could open Facebook by pressing the Meta key and there were Like and Dislike buttons right on the keyboard.
Remote
Dmitry Chestnykh ☮️
@dchest@mastodon.social
mastodon 4.8.0-nightly.2026-10-06Founder of Coding Robots. Created Mémoires, I Write Like, BlogJet (acquired) and Calcish. Author of Password Authentication for Web & Mobile Apps (http://dchest.com/authbook/).
537 Followers
562 Following
32 Posts
Joined April 03, 2017
Website:
I Write Like:
Location:
Montenegro
Don't do drugs and OpenSSL
#define avoid [[deprecated]] void
avoid func() { ... }
Most software development best practices and tools are designed for corporate programmers/teams to ensure predictable results. This makes programming boring.
Software doesn't have to be written the way they write it.
For inspiration, study Arthur Whitney, Chuck Moore, Niklaus Wirth, Stephen Bourne, Jeremy Howard, D. Richard Hipp, Dan Bernstein, Terry Davis.
TIL about SQLite .www mode:
$ sqlite3 my.db
sqlite> .www
sqlite> SELECT * from mytable;
Opens the result of select in a browser and shows the table!
Wow:
~~~
Missing MAC validation in wg(4) packet decryption
After dispatching a decrypt operation to OCF and receiving the result, the
wg(4) driver failed to check whether the MAC verification step succeeded.
The driver thus silently accepted packets with an invalid Poly1305
authentication tag.
~~~
https://www.freebsd.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc
Wasn't WireGuard rewritten after the first failed attempt in FreeBSD?
Looks like it was caused by result confusion: crypto_dispatch returns errors in two different ways.
This is so true: https://justsitandgrin.im/posts/native-all-the-way-until-you-need-text/ There's still no competitive "native" replacement for web-based tech. This is one of the reasons we have Electron everywhere.
Fun fact: the original iPhone text fields were backed by WebKit.
Pretty sure death is just a new challenge for Alex Zanardi. He'll be fine.
https://news.sky.com/story/ex-f1-driver-and-paralympic-champion-alex-zanardi-dies-suddenly-13539086
Replying to
@mwl@io.mwl.io @encthenet@flyovercountry.social KeePassXC shows private keys for passkeys, so you can print them out 😀 It basically turns into ssh key management for websites. The keys are even in —BEGIN STUFF— format!
Good point, I don't know why web servers allow arbitrary query strings by default https://chrismorgan.info/no-query-strings
Replying to
@atoponce@fosstodon.org yes, LLM entropy is limited by the random generator used in the sampling process. Usually, it's some fast non-CSPRNG.
Replying to
9RQAJAlright, it kinda works! This toot is compressed with LZ48hwAAor, which is then encoded in ASCII and can be deZlgAand dek2IA. Not goo8AAA&short strings though.
--
orig: 173, lz4: 157, lzasc: 164
I like this carrot disclosure thing.
Hmm, I use Cloudflare Pages for the Calcish website, and it shows up with a strange port number (which works) in DuckDuckGo/Bing.
Added rel=canonical, maybe this will fix it.
Replying to
@iwritelike WHAT? CAN'T HEAR YOU OVER THE SOUND OF MY SONY WALKMAN WM-FX123 https://walkman.land/sony/wm-fx123
Replying to
@atoponce@fosstodon.org Here's a 14-line inference -- I highlighted where randomness is used https://gist.github.com/karpathy/8627fe009c40f57531cb18360106ce95#file-microgpt-py-L196
Replying to
@atoponce@fosstodon.org or maybe it saw some Usenet post in the training data that recommended this pattern and considered it important for some reason; or there was some leaked passwords database with tons of password examples like this; or post-training humans steered it to reply to "generate password" this specific way. Nobody knows, not even its creators! :)
Replying to
@atoponce@fosstodon.org pure LLMs generate probabilities for the next token deterministically, and then select from them with some randomness from a simple seeded RNG (sampling usually depends on temperature parameter). This is not required, as they can just select the top probability and be completely deterministic. However, most of the available LLMs can call external tools, e.g. Python's secrets and print the output from it.
Why do we call them Unix-like or *nix instead of “I can’t believe it’s not Unix!”?
I wanted JavaScript documentation without paragraphs of bla-bla, like in Turbo Pascal/Delphi. Made this manually before LLMs, now published online.
Wrote XAES-256-GCM (+ KC-) implementation in C backed by a choice of CryptoKit+CommonCrypto/OpenSSL/LibreSSL/BoringSSL. I needed it for a project that could be put on the App Store without troubles and decided to extend to other backends.
https://github.com/dchest/libxaes256gcm
I hope they had an ad blocker in 1887
Replying to
@cynicalsecurity@bsd.network nice! Did you use 9 and 0 keys as a backup after the dedicated parentheses stopped working?
Replying to
@atoponce@fosstodon.org I guess they learned these specific patterns from training data, so, e.g. after top probabilities are for , then after it's . Differently trained, so different patterns.