Viewing profile — garrettr_

EVs are heavier than similar ICE vehicles, but they also have regenerative braking, which greatly reduces wear on the brake pads. I suspect EVs produce much less particulate pollut…

Go to the left sidebar, open the dropdown menu labeled with your account email at the bottom, click Feature Preview, enable LaTeX Rendering.

w.r.t SQLite, the only horrifying revelation I’ve had is that it allows NULLs in composite primary keys, which I’ve seen lead to some nasty bugs in practice.

Exporting is purposefully made impossible in many implementations of Passkeys (aka Webauthn authenticators) other than Apple's. For example, Yubikeys are designed so private keys c…

Paste ( https://pasteapp.io/ ) has this feature too.

There's a striking similarity between the author's mockups from Feb 15 and the redesigned System Settings announced in the beta of macOS Ventura and last week's WWDC [0]. I guess t…

Regenerative braking

There are numerous Firefox add-ons that provide this feature, e.g. https://addons.mozilla.org/en-US/firefox/addon/leechblock-ng... . IMHO, the main benefit of using Safari/Screen T…

> I don't know what you mean by "Firefox doesn't enforce [CT]". They mean Firefox, unlike Chrome and Safari, doesn't require proof of inclusion in a CT log for recently issued TLS …

The jobs.apple.com link appears to be broken :) It doesn't link to a specific job description, just an empty search form with 100s of results.

Project Zero also regularly publishes on flaws in Google's own products. Check out https://googleprojectzero.blogspot.com : they do a fair amount of reports on Chrome, ChromeOS, An…

I was recently asked by a friend who teaches 5th graders to do something similar for their school's "career month." I tried a few different things, and found the most successful wa…

> It's a video with no transcript While Apple only started posting transcripts of WWDC presentations last year, https://asciiwwdc.com has been around for a while and is a great sea…

“What this does is free your co-worker to be 100% honest. They don't know which parts of the interview were really you trying to perform well.” Since there was no mention of it in …

It's fiddly, but you can get good results in a consumer grade oven if you: 1. Use a preheated pizza stone or similar (e.g. cast iron pan) to get as much radiant heat into the crust…

Good point. I'm pretty sure this component of resistFingerprinting is derived from Project Fusion, which uplifts privacy/anonymity-related changes from Tor Browser into Firefox. In…

Windows’ OS keychain API is pretty weak, accessing secrets does not require user authorization. macOS and some Linux desktops environments do it slightly better, but there’s only s…

This a nice practical technique for extracting Chrome cookies, and is slightly less work than the alternative of writing a cookie db decyptor based on Chromium’s publicly available…

As pronoiac has already said, libssh != OpenSSH, which is far more widely used. According to the footer on https://www.libssh.org/ , projects using LibSSH include KDE's sftp implem…

For the love of god, please stop calling all cryptocurrencies and cryptocurrency-related projects "crypto."

> I'm aware it's only 190 bits of keyspace. I mentioned this in my blog post[0], and would in fact be more likely to decrease it than increase it, in order to make the URLs shorter…

A quick look at the source code shows the generate_key() function [0] to be insecure. It generates 32 random bytes (good, that's what you need for an AES-256 key), but then it uses…

Cryptography Engineering [0] is a great book that covers key topics in cryptography with a focus on best practices for implementors and system/protocol designers. Matthew Green's b…

I think it's a mistake to interpret the wave of stories about Uber's misbehavior as indicative of a "hit job" or "media bias" against Uber. Courage is contagious, and as people hav…

Zeroing on malloc and/or free would not have prevented this type of error, since the information disclosure was due to an overflow into an adjacent allocated buffer. However, zeroi…