codysc

5 ms·

1.
by codysc 3y ago
They defeat/bypass smog control systems to either boost power, or literally, just blow clouds of diesel exhaust on demand.
2.
by codysc 5y ago
So by that logic, if a tv station chooses to broadcast content that propagates racist misinformation and calls for violence, but the station only does it because that's what they algorithmically determine gives them the most viewership
3.
by codysc 6y ago
While I agree with your points about the clear indication of covid deaths, unfortunately this will have no impact on the debate. Facts aren't super relevant anymore.
4.
by codysc 6y ago
Agreed. In my case, daydreams regardless, I'm not expecting to build a multi-billion $ exit. It's more about building something useful for people, that I can control the direction of, and guide to some kind of "success".
5.
by codysc 6y ago
I just watched this last night. A lot of the content will already be well known to the HN audience. There was one big light-bulb moment for me. One of the speakers was clarifying the "If you're not paying then you are the product&
6.
by codysc 6y ago
Very true and covid has made this so much worse. Distance learning is manageable for my kids as they're a little older and I can work from home. But families with younger kids where both parents have to go out to work and can't po
7.
by codysc 6y ago
I don't think I exactly understand your points. Using an example of IV reuse in AES-GCM: The weaknesses resulting from this wouldn't be discoverable with a test like corrupting the password from the first example. If the developer
8.
by codysc 6y ago
Yes, the goal was/is to start with a very high level example then get more into crypto specific concerns. The audience is for devs without any real experience/knowledge of using crypto that might go into it too casually.
9.
by codysc 6y ago
>Perhaps surprisingly, implementing cryptographic primitives & protocols requires little cryptographic knowledge. That's a dangerous statement on it's own. Making proper use of primitives is not at all a simple concept. Dev
10.
by codysc 6y ago
You're not alone. This has always felt scammy. It's a little more gray-area than some of the traditional vapor-ware which was more about driving competition out of business by large players, but still something I try to avoid.
11.
by codysc 6y ago
I don't see PBKDF2 as a full footgun, but maybe as the minimally still-acceptable method. When I was building my system for E2E messaging (pritact.com) I started out with PBKDF2 but kept mentally revisiting the iteration count before b
12.
by codysc 6y ago
Free is a big part of the problem. The existence of free tools in a space, that are paid for with data gathering, crowds out the market for paid competitors that operate in a more privacy friendly manner.
13.
by codysc 6y ago
Re: Terms I read through a good amount and I think they make sense. The short version helps, but that always worries me from a legal standpoint. If we summarize something in a legally ambiguous way have we undermined the original intent? Th
14.
by codysc 6y ago
This makes a lot of sense. Providing some kind of categorized/easily digestible format for the policy to fit into. When I was writing mine I tried to be very clear, but my startup is specifically focused on privacy, so I didn't re
15.
by codysc 6y ago
Yes, that kinda HSMish model of non-extractable keys is a very nice touch. I really wish they would add Argon2 though. PBKDF2 is still a valid choice but there are a lot of HW optimized solvers out there for it.
16.
by codysc 6y ago
I agree that Web Crypto has a lot to offer. I use it in my latest project. In terms of it being easy to misuse, I think that applies to cryptography in general, but there are some gotchas lingering in javascript. Self blog promoting. I just
17.
How to ruin a cryptographic system with one type-error(pritact.com)
2 points by codysc 6y ago|0 comments
18.
by codysc 6y ago
I've been following your activity because of your strong stance on privacy and very much agree with this post. In fact SimpleAnalytics is my only 3rd party call from my SaaS site (pritact.com) What I take from this post is the importan
19.
by codysc 6y ago
I'm in the same boat with my communication based startup. I'm being very cautious about any third-party interaction and the heavy activity from the stripe JS wasn't compatible with that. I had to take some goofy steps to ens
20.
by codysc 6y ago
I've noticed this in myself and others. There is so much novel (no pun intended) stuff happening to everyone now that, I think, there isn't the downtime needed to effectively pay attention/think the way we're used to. At
21.
by codysc 6y ago
I carry this thought process over into my current life. When I start with a new technology/language/etc. I try to start barebones command line, text editor. I transition quickly into more visual / abstracting tools, but that
22.
by codysc 6y ago
I think any sufficiently complex system is hostile to reform just through its natural inertia, which in a huge system is a complex and fascinating topic itself. But when you have truly enormous amounts of money and power at stake and a syst
23.
by codysc 6y ago
I think that's mostly to build familiarity with the tracks. Many games have done excellent jobs of mapping the tracks to high precision including the backgrounds. So, all the visual cues will translate well to real life. I've done
24.
by codysc 7y ago
The bit about the lack of a mobile app, and the over-compensating for it was a great illustration of guessing at the importance of features to users. Something I'm dealing with a lot right now as I strip out incomplete features to get
25.
by codysc 7y ago
"Azure Dev Ops" is up there too. It turns out searching "Dev Ops" gives a lot of responses not relating to the product. Who could have possibly anticipated that? Side note, I like ADO. I just hate the name.
26.
by codysc 7y ago
I agree with the sentiment entirely, but reflecting on what you wrote it's so strange that we have to call this out as a slightly novel way to do business.
27.
by codysc 7y ago
Thanks for posting this. I'm getting close to needing this for a new offering I'm building and have collected a few in my own notes. This is much more comprehensive than what I would have gotten on my own.
28.
by codysc 7y ago
Couldn't agree more. I'm continually disappointed in the way enterprise focused vendors deal with their customers. The big shops have managed to find the optimal way to influence decision makers enough to overcome the damage done
29.
by codysc 7y ago
As long as the proper extractable=false options are set. I'm doing a project utilizing subtle crypto and I'm, right now, doing an audit to ensure I've got that setup correctly everywhere.
30.
by codysc 7y ago
I recommend watching The Search for General Tso. It's a documentary following the Chinese in America with the lens being on the the General Tso dish, in a very similar line to the article.

More ›