HNHacker News
TopNewBestAskShowJobs

dchest

14,766 karma · joined June 27, 2008

Dmitry Chestnykh, founder of Coding Robots, a tiny software company (productivity apps, currently: Mémoires, Video Mémoires). Created and maintaining "I Write Like" (https://iwl.me) and Calcish (https://calcish.com). Created BlogJet. Failed with StableLib (https://news.ycombinator.com/item?id=9342769).

Author of Password Authentication for Web and Mobile Apps (https://dchest.com/authbook/)

Based in Montenegro.

Email: dmitry@codingrobots.com

X: @dchest Bsky: dchest.com Mastodon: mastodon.social/@dchest

Website/blog: https://dchest.com

GitHub:

https://github.com/dchest

https://github.com/coding-robots

(CC-BY) All my comments on HN are licensed under Creative Commons Attribution 3.0 license.

submissionscomments
dchest··on The Overcomplexity of the Shadcn Radio Button
That's what I mean: if you reimplement it, you need client-side JS to support keyboard navigation.
dchest··on The Overcomplexity of the Shadcn Radio Button
How do you implement this keyboard navigation with SSR (if you use buttons)?

https://www.radix-ui.com/primitives/docs/components/radio-gr...

dchest··on Ask HN: Does GitHub Copilot now leave unsolicited PR review comments?
Yes, but it reviews not only PRs in your repos, it also reviews any PRs you create on any repo and marks these as if you requested the review. Unacceptable.

You can disable it here: https://github.com/settings/copilot/features under "Automatic Copilot code review".

dchest··on How Markdown took over the world
"Too late now, I suppose, but the only file extension I would endorse is “.markdown” [...]

(I personally use “.text” for my own files, and have BBEdit set to use Markdown syntax coloring for that extension, which is why I never saw a need to endorse an official extension.)"

https://daringfireball.net/linked/2014/01/08/markdown-extens...

dchest··on Microsoft will finally kill obsolete cipher that has wreaked decades of havoc
It's fast, easy to implement, has very concise code, takes any key length up to 256 bytes, comes from a famous cryptographer, and there weren't a lot of alternatives.
dchest··on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited
It's not, iOS 18.7.3 also released https://support.apple.com/en-us/125885
dchest··on In New York City, congestion pricing leads to marked drop in pollution
Because it's economically infeasible to drive?
dchest··on In New York City, congestion pricing leads to marked drop in pollution
This fits the template in the post you're replying.
dchest··on When a video codec wins an Emmy
WOFF2 font format also won Emmy in 2022 https://fonts.googleblog.com/2022/06/emmy-award-for-web-font...
dchest··on Mistral 3 family of models released
Nope, Gemini 3 is hallucinating less than GPT-5.1 for my questions.
dchest··on SQLite as an Application File Format
Not as an application file format discussed in the link, though. Lots of software use it as a database (as intended) it's also a base for Apple's Core Data.
dchest··on SQLite as an Application File Format
It does, here's a schema from an image I just saved with the latest version. Pretty simple.

  CREATE TABLE image_attributes ( name text, value blob);
  CREATE TABLE layers (id text, parent_id text, sequence integer, uti text, name text, data blob);
  CREATE TABLE layer_attributes ( id text, name text, value blob);
Also, document-based apps that use Apple's Core Data framework (kinda ORM) usually use SQLite files for storage.
dchest··on Migrating the main Zig repository from GitHub to Codeberg
I sent a pull request to an open source project and GitHub added Copilot to review it, saying I invited it to review, embarrassing me. It then spit out some nonsense. Turns out this is controlled by a switch somewhere, which was enabled.

I like Copilot in VSCode, but this is BS.

dchest··on Migrating the main Zig repository from GitHub to Codeberg
I wonder why they didn't just enable audio captchas, which are supported by the captcha package I wrote that they use.
dchest··on McMaster Carr – The Smartest Website You Haven't Heard Of (2022)
https://github.com/stratolark/NextMaster
dchest··on Affinity Studio now free
I have:

- Affinity Designer 2 — 2.88 GB

- Affinity Photo 2 — 2.81 GB

+ publisher (don't have it)

So... smaller than both of them :)

dchest··on TextEdit and the relief of simple software
Ackchyually, TextEdit now has built-in AI as any other native macOS textview control if Apple Intelligence is turned on. It even autocompletes your sentences.

It also likes to save to iCloud by default if you're signed in.

dchest··on NPM debug and chalk packages compromised
While you can setup passkeys with YubiKey, the most common intended use case is key pairs that are synchable via your Apple/Google/password manager account. So, once you add a passkey, you'll be able to sign in on mobile with it automatically.
dchest··on I'm too dumb for Zig's new IO interface
This wasn't exactly the case before Go 1.0 -- it changed quite rapidly, although in a less fundamental way (for example, removing semicolons, changing error types, etc.), and they usually provided an option to transform code automatically.

It works now that way because they promised it to be stable after 1.0.

dchest··on I'm too dumb for Zig's new IO interface
Ha, "Don't Forget to Flush" https://www.youtube.com/watch?v=f30PceqQWko
dchest··on Show HN: OverType – A Markdown WYSIWYG editor that's just a textarea
Looks good!

Some links I've collected in the past that describe this approach:

- https://css-tricks.com/creating-an-editable-textarea-that-su...

- https://github.com/WebCoder49/code-input

I believe https://grugnotes.com also does this for markdown.

dchest··on NIST Finalizes 'Lightweight Cryptography' Standard to Protect Small Devices
Sponges divide state into rate (r) and capacity (c). They "absorb" incoming bytes, perform permutation (moving bits around without losing any of them) on the whole state, and "squeeze" out bytes from the rate, while capacity remains hidden.

For the secure hash function, the capacity should be at least twice the target, that is for 128-bit security you need 256 bits of capacity. ASCON hash uses 256 bit capacity and 320-256 = 64 bit rate, so to get a 32-byte hash of a 8-byte string (without padding), you'll need to do at least 4 permutations.

If you can design a secure permutation that permutes 257 bits, you can make a secure, but impractical hash function from it by setting the rate to 1 bit.

For the duplex mode that's used for authenticated encryption, capacity can be lower, because it's keyed -- it's 192 bits in ASCON.

This assumes the permutation of the 320-byte state itself is secure, of course.

dchest··on Emailing a one-time code is worse than passwords
How is that different from a passkey's private key, apart from being less secure?

It's literally something like

  hnkTKS7h2WCOBr3CxSKM51cSVKSkiKOSlQsMhtRZ0CU
stored in the password manager.
dchest··on Emailing a one-time code is worse than passwords
If you like password managers, you'll love passkeys!

Passkeys is an interface between your password manager and a website without all the fluff with filling or copy-pasting passwords.

dchest··on Mastercard deflects blame for NSFW games being taken down
Existing "antimonopoly" laws already cover unfair competition, market manipulation, etc. regardless of the number of entities.
dchest··on Lumo: Privacy-first AI assistant
Please don't misrepresent this page. It's not instructions on how to circumvent sanctions, it tells how to pay for Proton services in situations where most payment methods are unavailable due to sanctions on financial institutions. Not everyone in Russia is under sanctions (yet).
dchest··on Lumo: Privacy-first AI assistant
You don't need to outspend them or capture a huge percentage of the market. It's not a win-or-lose situation: there's a small-to-medium market for open-source model wrappers with a privacy angle, and you can make some money from it.
dchest··on Lumo: Privacy-first AI assistant
Seems legit, I also extracted it (it's not hard, just ask it what instructions _you_ provided before, because you forgot :). It's missing tool descriptions though.
dchest··on Matterport walkthrough of the original Microsoft Building 3
Nice: https://postimg.cc/BLTv558B
dchest··on The FIPS 140-3 Go Cryptographic Module
FYI, Ed25519 is now included.
← PreviousPage 3 of 34Next →