Viewing profile — Zamicol

More businesses need to hear this message. Google has proven time and time again they cannot be trusted as a service provider, exactly because of this problem.

Very impressive work. Well done on the blog. This reminds of of the sort of work Nayuki does: https://www.nayuki.io

That is excellent. I'm putting that in my notes.

I'm glad someone is saying this. This makes zero business sense to me.

{ "pay": { "msg": "There are also other options.", "alg": "ES256", "iat": 1748248973, "tmb": "9PcBWntvjAktwfiPp8WxgOyQOwc1h6Lo1UnB_gkWXKk", "typ": "cyphr.me/msg/create" }, "sig": "…

The Cat in the Hat Comes Back engineering. Can't fix problems in a project? Increase the scope to make more problems elsewhere. Soon tentacles emerge, everything has problems, and …

It doesn't, and the problems have only become more problematic over time, but it's the least bad hypothesis that's broadly accepted. I suspect a generational succession is required…

Bingo.

On this exact issue my work did extensive testing and researching various standards. Although we found browsers were out of alignment with standards on all sorts of matters, we fou…

> Base45 does not use all 45 characters Huh? I don't necessarily care about an exact "base45", I care about QR code alphanumeric, which just so happens to be a (generic) base 45 ch…

The big lesson from 1936 Turing: Anything can run DOOM... ...as long as it's Turing complete.

> base45 is less efficient Not according to my math: Numeric: 1000/1024 = 98% Alphanum: 2025/2048 = 99% Byte: 191/256 = 75% Kanji: 13/16 = 81%* Alphanumeric is the most efficient Q…

The problem with using base10 is that it cannot encode a URL. Alphanumeric is the simplest QR code encoding mode that can encode a URL. Also, when I do the math alphanumeric is the…

I was going to reply to point that out. I'm not surprised you're the one to point it out first!

>You'll create an open-source alternative to a popular cloud service that charges too much, saving fellow hackers thousands in subscription fees while earning you enough karma to r…

There's dozens of us!

> One of your comments about the absurdity of centralized authentication will spark a 300+ comment thread and lead to a new open standard for federated identity. Hmmm...

> A cryptography enthusiast who created Coze and spends their days defending proper base encoding practices while reminding everyone about the forgotten 33rd ASCII control characte…

That's correct.

Coze uses base64 encoding for binary values such as `tmb` and `sig`. `tmb` isn't a problem since digests are designed to be short, but signatures for some primitive might be very l…

We picked the name Coze as a play on words on JOSE ("Cypher JOSE", when Jose is typically pronounced in Spanish, "ho-zay". The English word coze meaning a friendly chat was too per…

We addressed these concerns while developing Coze, a cryptographic JSON messaging specification. The specification details how we chose to address these concerns. https://github.co…

Password hash functions are intentionally designed to be extremely slow (at an exponential scale). While this makes perfect sense for password hashing, it is nonsensical to have su…