Viewing profile — petedoyle

Wow, I'd love to do this. Any tips on how to build this (or how to help an LLM build this), specifically for ./gradlew?

The U.S. Missile Defense Agency (MDA), in cooperation with U.S. Space Force and U.S. Northern Command, conducted a flight test on June 23, 2025, in which the Long Range Discriminat…

Apologies / small correction: Apps first published to the Play store before August 2021 are not required to upload their keys [1]. This likely includes Signal. [1] https://develope…

Maybe this? https://en.wikipedia.org/wiki/MUSCULAR

> The absolute nightmare is about giving Google the root signing key of your application I wish more people talked about this. At Amazon, I helped with the early threat modeling ar…

Somewhat off-topic: Does anyone know the underlying strength of the keys used as the "root of trust" behind passkey synchronization on Android/iOS? I can't find a lot of documentat…

I didn't know him, but followed his work on bufferbloat closely. I've never seen anyone work so diligently, for so many years, to fix a problem most people will never know even exi…

Oh, looks like it. I disabled extensions one by one til I found it was reflect.app's extension. Edit: reported on their discord. False alarm :) Amazing work!!

Small FYI that I couldn't see them in Chrome 133.0.6943.142 on MacOS. Firefox works.

If Apple were to add new APIs, it might be possible to use personal cloud storage (NAS, Decentralized Web Nodes, etc.) with the same UX as iCloud with E2EE.

Maybe they wanted some cached data to get invalidated if users change their passwords?

Would be fun if this turned into a huge recruiting event :)

> Sure, but if that key derivation function is protected by a "you get 10 attempts then we wipe the keys" safeguard, the effective entropy is much higher. Thank you. 100% agree. > …

Thank you! I'm trying to understand more deeply, so I appreciate it. :) > This approach works because the secure enclave provides measures against bruteforcing and tampering. That'…

This has been bothering me, a lot. Google talks [1] about how Passkey replication is e2e encrypted between devices, but AFAICT they're just using a pin + key derivation. A six digi…

I recently drove by both the GCP and AWS regions in Oregon. It was so interesting to see one giant facility for GCP, and like 40 separate datacenter buildings for AWS, typically se…

Oh, that's great to know. Thank you both, I'll definitely try this!! :)

I've spent ~150 nights in hotels in the past year, and it's super rare that booking directly is cheaper. I almost always save like 30% on Hotels.com/HotelTonight/etc. I recently wa…

They might be using App Bundles dynamic delivery [1] on Android, in which case this isn't really an issue. Helps keep the initial download size small, while allowing larger feature…

> "We believe that communicating dates produces the wrong incentives. What really matters on a long timescale is 1) priorities and 2) velocity." [1] I saw this written during the 2…

Thinking this might be different. I've been curious what the BLE packet structure might look like. Looks like there's 16 bytes of unique id needed for the "Rolling Proximity Identi…

Also excited because they can likely push both advertisement and scanning into the BLE chips themselves, letting the rest of the system (CPU, etc) sleep. Big win for battery life.