HNHacker News
TopNewBestAskShowJobs

shim__

84 karma · joined February 13, 2020

submissionscomments
shim__··on Rusty thoughts on "Parse, don't validate"
DerefMut would allow you to call `clear()` on `v` violating the invariant

I'd be great is there were a way to shadow methods but even then guarantees would be poor since Vec might add a new method in the future which isn't covered by invariant checks

shim__··on Dutch governments builds alternative for Microsoft based on NixOS
Arch is easier to start of with, NixOS is easier to maintain, especially at scale
shim__··on Dutch governments builds alternative for Microsoft based on NixOS
There needs to be another repository with less stringent standards, nixpkgs should be for core libs and system applications
shim__··on AI chatbots give wrong answers to financial queries 'most of the time'
Lots of bad(internal) code isn't accessible, the good open source stuff is quite the contrary is true in finance, lots of amateurs are sharing their thoughts where as actual deep analysis is kept to internal presentations.
shim__··on Apple M6 Pro Achieves the Highest Single-Core CPU Score in Geekbench 7
How does Geekbench even verify what CPU I'm using? Couldnt you inject forged data and add a even faster M100?
shim__··on Astra for Law
I reckon law and medicine are really premier use case for llms since those areas are all about having vast knowledge(knowing all about obsure cases in law or about an very rare disease the average doctor wouldn't have heard about)
shim__··on Astra for Law
> Meanwhile, any half-decent employment attorney would probably laugh at me if I asked them to redline an employment offer from the State Department.

That might not be due to the contents but rather due to the fact that they won't negotiate I'd presume

shim__··on Principles for Fast Tokio Applications
Reaching source control is fine as long as there is a compile time flag to disable the whole thing, which tokio-tracing does
shim__··on Registration without a phone number on Signal will use zero-knowledge proofs
No need to enable the google backup
shim__··on Registration without a phone number on Signal will use zero-knowledge proofs
Google is a bad as a phone number since it also has strong ties to your real identity
shim__··on Registration without a phone number on Signal will use zero-knowledge proofs
> If I remember correctly all they stored was an account ID and a UNIX timestamp such as the last login.

How do they perform address book matching without an phone number? It just being accessible by SGX does not really count as not storing it.

Problem with phone numbers is they are to short to store as a hash, since you can brute force the sha256 of an phone number in a trivial amount of time on a single consumer device

shim__··on Your AGENTS.md file doesn't do anything
It does, it makes it obvious that I'm looking at a vibe slopped project
shim__··on Phones should have a 'guest lock' feature
The wrench attack is already illegal under the law
shim__··on Phones should have a 'guest lock' feature
Technical protection >> Law, the law is too easliy broken
shim__··on Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub
Why wasnt that key in an HSM?
shim__··on Chrome adopts what may be the best protection yet against account takeovers
How is that any different from an TPM backed passkey?
shim__··on Stinkpot: SQLite-backed shell history
Of course but my question was more in the direction of if the data is suitable to be transferred to another host without becoming useless. The native cloud integration could be attaching an origin field to each history field whereas the db itself might only be intended for local only use.
shim__··on Stinkpot: SQLite-backed shell history
Does it support just synching the db via nextcloud or similar? I'd prefer to stick to the Unix philosophy of one tool for one job instead of native cloud integration
shim__··on Croc: Securely transfer files and folders between two computers
Yes 32 bit is enough because in PAKE its used for authenticstion not encryption. Which means you get exactly one attempt to brute force after which the procedere will fail
shim__··on Croc: Securely transfer files and folders between two computers
The transfer is end2end encrypted using a PAKE key change which is aithenticated using the 3 words you enter in the reveiving end
shim__··on Decoding the obfuscated bash script on a Uniqlo t-shirt
Could have saved 50% with 'base64 -d | gzip -d'
shim__··on Paying without Google: New consortium wants to remove custom ROM hurdles
The virtual PayPal Card works on GrapheOS
shim__··on Hardware Touch, Stronger SSH
That's the neat part, it doesn't
shim__··on Upcoming Changes to Let's Encrypt Certificates
Could have just kept using OSCP stapling
shim__··on Migrating the main Zig repository from GitHub to Codeberg
Gitlab CI is leagues better
shim__··on Why is Zig so cool?
Not even close, that's still imperative package management
shim__··on Titan submersible’s $62 SanDisk memory card found undamaged at wreckage site
Encryption does not make bit flips obivous, authenticated encryption would.
shim__··on LineageOS 23
> No "Find My Device" support.

I don't have any issues with it

shim__··on Download responsibly
That's why I build project specific images in CI to be used in CI. Running apt-get every single time takes too damn long.
shim__··on Samsung 870 QVO 4TB SATA SSD-s: how are they doing after 4 years of use?
lvm
Page 1 of 3Next →