Viewing profile — d-z-m

Looks cool! a bit of crypto hygiene though, I'd recommend passing the ECDH output through a KDF before using it in xsalsa20-poly1305. Also, if you're using xsalsa20 anyway, why go …

I recently heard about a feature of WebKit, ITP(Intelligent Tracking Prevention)[0] and I'm curious as to how it works. Specifically, I'm curious whether other browsers that use We…

I run Firefox with "strict" selected in the "enhanced tracking protection" section of the Firefox settings. To my knowledge, this section is meant to prevent known tracking domains…

I would recommend Derek Lin's translation[0]. [0]: https://taoism.net/wp-content/plugins/wonderplugin-pdf-embed...

If you're going to stand behind your product, I'm not sure posting with a throwaway sends the strongest message.

also an unfortunate acronym

> 0¹²⁰10000111 for those of you(like me) wondering where this apparently spooky constant is coming from, it is a bitstring of the coefficients of the lexically first irreducible po…

QUIC still runs over UDP. Are you referring to MASQUE?

> No it does not. If the packet is at your door it is too late already. Too late for what? Again, it only makes sense to talk about "security" in the context of a threat model. You…

use a vpn that does not advertise its presence, like wireguard.

"security" is a term that has to be defined in relation to a threat model. If your threat model is an attacker with a static IP hammering your server, fail2ban does provide some se…

Link appears to be broken.

In context, I believe interpretation number 1 stands on firmer ground than yours. In the previous paragraph: > Unlike his wife, Hemingway never went ashore at Normandy. On June 6, …

> using a model from a place like Huggingface means the author of the model can execute any code on your machine To my knowledge this is only a problem if the model is serialized/d…

I'm saying that when I import something, "foo/bar" "bar/baz" etc, The way I access the exposed functions and types in that package usually corresponds to the basename. e.g. bar.* f…

Happiness arises spontaneously when our desires are sated, whether they be sexual or otherwise. It arises also when our aversions are fended off. "Desireless-ness is wisdom. The tw…

"if you see the illusion, you are enlightened. but if you think that you are enlightened, you are in the illusion."

The original quotes are deeply profound. They point to something that is beyond understanding. I also found the attempt to invert them to be off-putting. "Do not belabor wisdom to …

it means: this is normally how imports in Go work, is it not?

This is normally how it works, no?

For those with whom this resonated, you may also like the writings of Jacques Lusseyran. Some selections from his works can be heard here[0]. [0]: https://www.youtube.com/watch?v=B…

In the linked video, is there a timestamp for when the TLS+DNS blocker is discussed?

> There are tons of things that linters warn about (today), that should have been errors too by their logic. Can you give a couple examples?

> "Unused vars are warnings" is not a possible opinion for go, period. It's also not a possible opinion for go tooling like 3rd party linters. Right, but that doesn't mean that Go …