Viewing profile — gsu2

> All of a sudden you have operations on billions of tiny files that are amplified by AI usage. And object graphs are so fragmented by nature that it's hard to e.g. prefetch a page…

[flagged]

Skimming the comments it is a shocker to see people attacking Jordan Lasker (Cremieux) without even some sort of link to more context.

https://www.astralcodexten.com/p/highlights-from-the-comment...

https://www.astralcodexten.com/p/come-on-obviously-the-purpo...

Moore Tool Company -- manufacturer of some of the machines that NIST uses to measure stuff[1] -- published a book called Foundations of Mechanical Accuracy that's pretty good: http…

I might be mistaken, but wouldn't a git signature already be signing trusted things (i.e. the person making the original signature is trusted), making any attack enabled by the inp…

This seems bad? - SSH3 is a bad name: this isn't a successor to SSHv2 and will only cause confusion - The authors don't seem to understand that SSHv2 predates all of their chosen t…

> First - if git really didn't care about collision resistance, there wouldn't have been a need to switch to SHA1DC as the hash function. They switched because they care enough tha…

> You review the code in the PR, and perhaps even prove it correct. Later on, the malicious actor can do the swapping trick. (Eg by running a mirroring service for your repository.…

I'm not 100% sure I understand your point, but it sounds like you're concerned about signing something using a weak hash function (i.e. where the hash of something is what actually…

Git isn't relying on collision-resistance, it's relying on second-preimage[0] resistance, which is to say: in order to sneak a hash collision in to a git repository, you have to sn…

Launched ten years ago: https://www.dpreview.com/products/nikon/slrs/nikon_d800 Currently available for ~$600: https://www.ebay.com/sch/i.html?&_nkw=nikon+d800&LH_Sold=1&L...

For anybody running into a similar problem: most git hosting services set up a subdomain that will allow SSH traffic over port 443, e.g. ssh.github.com, altssh.bitbucket.org, altss…

This question reminded me of Project Wonderful[1], which I used on several tiny projects in an attempt to cover hosting costs: $5 per month. I never had enough traffic to make anyt…

https://en.wikipedia.org/wiki/The_Rise_of_Theodore_Roosevelt

Why not force memcached clients to use the binary protocol instead of the ASCII protocol? The length check would still be necessary, but spaces (and other arbitrary bytes) would no…