HNHacker News
TopNewBestAskShowJobs

bootsmann

1,503 karma · joined July 12, 2022

Research Engineer
submissionscomments
bootsmann··on EU Age Control: The trojan horse for digital IDs
Can you model the flow of the attack you want to mount here?

Is it the following:

Issuer revokes the wallet of Alice and then publicly says “This ID is Alice btw” and then verifiers can check their lists to see whether any of their received signatures are revoked (in which case they must be Alice)

bootsmann··on EU Age Control: The trojan horse for digital IDs
What surveillance capacity? In what way does the spec build surveillance capacity?
bootsmann··on EU Age Control: The trojan horse for digital IDs
> for example disallowing blocking/removing someone’s id

If I lose my passport I am obliged to call the police so that they revoke it, if I lose my phone with my digital ID on it they also need to be able to revoke that ID.

bootsmann··on EU Age Control: The trojan horse for digital IDs
> Real cryptographic unlinkability schemes like BBS+ or CL signatures would produce uncorrelated proofs even on reuse. This is not that.

This discussion was already led ad nauseam with the Swiss eID proposal (which is supposed to be EUID compatible) and the reason why the system relies on rotating signatures instead of ZKPs is that the cryptography hardware modules in most phones don't support algorithms such as BBS+. This creates a tradeoff where the states would have to essentially roll their own crypto storage and bank on this being safer than simply rotating through batches of signatures generated by the hardware cryptography modules (which is largely unproblematic in the grand scheme of things). The major advantage of using the hardware module is that it makes it much harder for attackers to extract the actual secret should the device ever fall into someone else's hands, something that happens to phones from time to time.

Overall, as with every digital ID thread, it would help if some of the fearmon gering commentators would read the actually EUDI specs for once in their lives as it already addresses most of the concerns copy-pasted into these threads https://eudi.dev/1.6.0/architecture-and-reference-framework-....

bootsmann··on EU Age Control: The trojan horse for digital IDs
Yes, obviously, the Romanian supreme court having to overturn and annul a presidential election due to Russian social media inference is entirely made up propaganda.
bootsmann··on An AI Vibe Coding Horror Story
“You’re just holding it wrong”
bootsmann··on The tech jobs bust is real. Don't blame AI (yet)
Maybe if you’re at the point where you dismiss three datapoints that all disagree with your thesis without any real argument you should rethink your thesis.
bootsmann··on France's government is ditching Windows for Linux, says US tech a strategic risk
The other two are ok-ish (though notably Reform is not in government and the elections are 4 years away) but yeah leading with a source from the 15th century really doesn’t support the argument.
bootsmann··on Tech job relocation market is recovering. The competition is growing faster
Times of plenty like the 6 years of unmatched growth the US had since covid? Where are these down times you’re talking about?
bootsmann··on Tech job relocation market is recovering. The competition is growing faster
The price that has to be paid for robust domestic employment got Trump 2 elected. You can’t have a tight labour market and expect to only pay pennies on the dollar for your burrito taxi.
bootsmann··on Tech job relocation market is recovering. The competition is growing faster
Its really quite impressive how massively ingrained fixed-pie thinking has become in the American public discourse and your comments show this very well. The idea that these jobs would still exist if companies were only allowed to hire Americans is delusional frankly.
bootsmann··on France to ditch Windows for Linux to reduce reliance on US tech
Not everything makes US news but the decision by Microsoft to shut down ICC accounts after a Trump EO on sanctions really spooked a lot of EU governments.
bootsmann··on We've raised $17M to build what comes after Git
Didn’t dvc try to fill this niche and absolutely fail at it?
bootsmann··on Anthropic expands partnership with Google and Broadcom for next-gen compute
I’m not sure your numbers are accurate, they raised $13bn in funding in September last year. Also do note that a lot of the money is cross-subsidized by Google who is funding the TPUs as an investment, so I wouldn’t be so confident that they are returning money quite yet (though it does seem that Anthropic might make it).
bootsmann··on The threat is comfortable drift toward not understanding what you're doing
We notably teach people how to do arithmetics by hand before we hand them calculators.
bootsmann··on OpenClaw privilege escalation vulnerability
The problem is that a lot of users of OpenClaw use a chatbot to set it up for them so it has a habit of killing safety features if it runs into roadblocks due to user requests. This makes installations super heterogeneous.
bootsmann··on Proton Meet isn't what they told you it was
Yeah this same site did an article on some minor ubuntu bootloader drama some weeks ago and when I recognized the design I just stopped reading. If you have something to say don’t go out of your way to make it hard to parse.
bootsmann··on Slop is not necessarily the future
Amazon holds engineering meeting following AI-related outages - Financial Times https://www.ft.com/content/7cab4ec7-4712-4137-b602-119a44f77...
bootsmann··on Astral to Join OpenAI
Most popular product on the planet acquires a random python packaging org for mindshare? What am I not seeing here?
bootsmann··on Reddit User Uncovers Who Is Behind Meta's $2B Lobbying for Age Verification Tech
The Swiss eID is designed the way it is to comply with the EUs digital ID proposal so I wouldn't doom this early.

(this one: https://digital-strategy.ec.europa.eu/en/policies/eudi-regul...)

bootsmann··on Polymarket gamblers threaten to kill me over Iran missile story
There is a clip embedded within the article that corroborates what the journalist wrote.
bootsmann··on US- and Greek-owned tankers ablaze after Iran claims 'underwater drone' strike
Ukraine has been sinking Russian warships in their harbor using underwater drones for at least a year now.
bootsmann··on US- and Greek-owned tankers ablaze after Iran claims 'underwater drone' strike
Yes but as one of the other commenters pointed out, its a charged term when it comes to Ukraine so its worth mentioning to people that use it accidentally.
bootsmann··on US- and Greek-owned tankers ablaze after Iran claims 'underwater drone' strike
It’s Ukraine, no “the”.
bootsmann··on US- and Greek-owned tankers ablaze after Iran claims 'underwater drone' strike
Oil markets are global, you cannot hike prices for China while enjoying cheap oil yourself.
bootsmann··on US- and Greek-owned tankers ablaze after Iran claims 'underwater drone' strike
Noone could’ve seen this coming, how were they supposed to know that the strait of hormuz is so important!
bootsmann··on How we hacked McKinsey's AI platform
Idk how big your team is of course but imo try to hire a technical writer (they’re really cheap now), it pays dividends for a long time as consistent style and keywords build up SEO reputation. This article is making the rounds, some bigger papers picked it up, it is very valuable to land it well.
bootsmann··on Amazon holds engineering meeting following AI-related outages
This wouldn't happen if they used my CLAUDE.md of course!
bootsmann··on Ask HN: Would you use a job board where every listing is verified?
Imo it might be worthwhile creating a job board that solves the “company-side” issue with the current recruitment process where 200 people will spam AI generated slop CV to every post that opens up. Some kind of account coupled with a ratelimit and you should already deliver some value to people recruiting.
bootsmann··on UUID package coming to Go standard library
Really? Doesn’t v4 locally make the inserts into the B-Tree pretty messy? I was taught to use v7 because it allows writes to be a lot faster due to memory efficient paging by the kernel (something you lose with v4 because the page of a subsequent write is entirely random).
← PreviousPage 2 of 16Next →