Viewing profile — ryanisnan

As the creator of mediaden.ca[1] I’ve thought about this. Client side scanning is maybe marginally better than server side scanning, but both paths lead to privacy rot. Governments…

Fun, but I don't like trivia.

Uh, I don't think people typically associate downloading a repository, and viewing the source, as being synonymous with activating a malicious payload. That is the bit that's conce…

Kubernetes is really powerful, but IMHO, it is the wrong tool here. It might be the thing you use to power this system, but the benefits of Heroku were precisely that it didn't nee…

Amazing, do you have some example images of what the product looks like?

I made Media Den, a privacy-by-design iOS photo and video vault. I launched in April, and I've been steadily updating it as time allows. Really happy with how far it's come. Here a…

This is pretty nice. How often are your PRs held back by these checks failing? Nice work.

Same, Firefox. Curious.

How does this differ from just, say, giving someone an HTML dump of a static site? I don't quite understand what this protocol offers. How exactly is it peer-to-peer if it's essent…

As a former SAR technician, connectivity is a massive, massive game changer.

I'll bite, because this is HN and I think there's more space for genuine discussion here, not because I desire to be right. First, addressing my first point about how this is "the …

That makes sense. Thanks for responding! Someone elsewhere in the thread mentioned downgrade attacks. I presume if you wanted, on either the client or the server, you could disallo…

What a reductive take - attack the argument or move on.

Is that what he's trying to do? I am no cryptographer, but when I read his post, his arguments about ECC+PQ make intuitive sense. I'm out of fresh tin-foil hats as well, but it wou…

The modern equivalent of an ad hominem attack. Do better.

What would you say about his critique that simply ditching double-encryption is a bad idea? That seems like a fair point embodying a belt and suspenders approach.

This is weird but, help me understand how this meaningfully impacts our exposure. I'm authenticated to Claude, so they already have the whole attribution thing solved.

Spot on, in my experience.

That this got 4 comments in 24hrs on HN is telling, what is going on with Mozilla :(

Neat, how do you verify as a user that this lib or this source is in fact what's used in the app?

This post title misses the big point here, which is that the physical copy will not include a physical disk, only a digital download code. This effectively eliminates buying and re…

This feels deeply problematic. I would much prefer, where asked via appropriate legal processes, Anthropic serve over user data to government officials, and potentially suspend acc…

Interesting. Do you have a uniform data set? E.g. documents of a specific type that you know consistently have similar formats, or is this training something you need to do per-doc…

How do you know where to slice an image? What if you slice an image mid-word?

Early Heroku was fabulous. Thank you for your effort!