dave_universetf

6 ms·

1.
by dave_universetf 4mo ago
The readme has strong LLM smells. Was the code written by an LLM as well? What is your experience with cryptographic engineering, in particular avoiding common implementation pitfalls that bite first-time implementers of cryptographic primi
2.
by dave_universetf 4mo ago
It's vibe coded, so not surprising that it replicates the patterns of existing systems.
3.
by dave_universetf 6mo ago
+1, the information content is nice, but the AI telltales and writing patterns were annoyingly distracting.
4.
by dave_universetf 6mo ago
This is probably just a difference in how your brain and the author's work. A variety of home organizers have told me that people mean different things when they say they want an organized space. Some people want everything precisely l
5.
by dave_universetf 7mo ago
Strictly speaking: no. The "forward pass" terminology does not imply that there exists a "reverse pass" that does the same kind of computation. Rather, it's describing two different kinds of computation, and the dir
6.
by dave_universetf 7mo ago
Both, with caveats. The attention computation is fundamentally quadratic: for every token in the sequence, you're doing a computation that has to compute over every other token in the sequence. So it's O(N) per token, O(N^2) for t
7.
by dave_universetf 9mo ago
I don't know about all hyperscalers, but I have knowledge of one of them that has a large enough fleet of atomic frequency standards to warrant dedicated engineering. Several dozen frequency standards at least, possibly low hundreds. D
8.
by dave_universetf 1y ago
I wrote MetalLB, a bare metal load-balancer for Kubernetes, because I needed one for myself. It gained some popularity because for a couple years, it was the only way to get working L4 LB outside of clouds. These days I believe a couple of
9.
by dave_universetf 1y ago
Does the orange light specifically mean no RF link at all? Or does it include anything that prevents the modem from getting an IP address and route configuration? If the latter, BGP could still be at fault if it took out access to the contr
10.
by dave_universetf 1y ago
BGP is the canonical way to take your entire global network offline within seconds. Glancing at BGP looking glasses, Starlink's prefixes seem to still be announced, but there could still be an accidental blackhole or routing loop withi
11.
by dave_universetf 2y ago
They are/were scanning random public projects and creating unsolicited bugs in those projects to chide them about profanity in their source code. The linked thread is just a bunch of the victims of that spam having some fun with the fo
12.
by dave_universetf 2y ago
In the case of this attack, somewhere between 40s and 30min of physical access, depending on how the card was set up. In the case of a hotel, the spicy card to clone would be the cleaning staff's, which conveniently also admits a reaso
13.
by dave_universetf 2y ago
Indeed. Alas (or fortunately depending which colour team you work on), fully broken Mifare Classic is still all over the place, and likewise the "hardened" variant broken in this paper :(
14.
by dave_universetf 2y ago
Possibly so. It just means that based on the report's findings, even if you'd decided to play it safe and buy exclusively from NXP directly (the creators of this ecosystem and owners of the MIFARE trademark), it looks like you cou
15.
by dave_universetf 2y ago
The paper reports that the same backdoor seems to be present in some NXP and Infineon SKUs as well, including some manufactured in Europe.
16.
MIFARE Classic: exposing the static encrypted nonce variant [pdf](eprint.iacr.org)
250 points by dave_universetf 2y ago|95 comments
17.
by dave_universetf 2y ago
Yeah, admittedly it's confusing terminology generally, because it's still natural to say you're swapping the page tables out when you do a context switch on current systems. I probably do at some point in the post! The distin
18.
by dave_universetf 2y ago
Please, name these academic Unixes! I would love to go see what they do. Down-thread there's a mention of minix, which does the normal thing: demand paging, context switches only the page table directory pointer, and process memory ima
19.
by dave_universetf 2y ago
Also no. It was rolled back hours ago, and cache.nixos.org keeps all past builds so it didn't even need rebuilding. Orthogonal to that, the backdoor was irrelevant to nix in at least three different ways: the malicious build logic targ
20.
by dave_universetf 2y ago
It's not a problem, never has been. Nix mirrors all source bundles it pulls from third parties and caches them. cache.nixos.org has a copy of all the sources needed to build not just current HEAD, but also past commits (although deep h
21.
by dave_universetf 3y ago
Worth noting that, like many immediate mode UIs, it seems to not integrate with OS accessibility infrastructure at all. That means any UI built with it will be a black box to anyone who needs accessibility tools like VoiceOver, text magnifi
22.
by dave_universetf 3y ago
Worth noting this is an expired draft. Anyone can publish drafts with no vetting. This particular author is also a frequent flyer of nonsensical IETF drafts that make no sense to anyone with a shred of understanding of how the Internet work
23.
by dave_universetf 3y ago
Yeah I was imprecise in the description here, because I started trying to describe how a mechanical movement works and it went into the weeds really quickly :) More accurately, the balance nudges the pallet fork just enough to allow the esc
24.
by dave_universetf 3y ago
There's a sibling thread making the same point, and: yeah, I overgeneralized on that bit. The instance I had in mind was the M.A.S.H. TV show, which has a couple exchanges involving "hack" for time synchronization (unsurprisi
25.
by dave_universetf 3y ago
It does seem a bit silly to me as well, given the stresses that watch movements are subjected to day to day, and that the hack's mechanical design barely touches the balance at all. It doesn't take very much friction at all to hal
26.
by dave_universetf 3y ago
Could well be! I have no specialist knowledge, I just got curious about the origin of the fairly random feature name, and went digging. The two well substantiated facts are: Hacking movements gained popularity between WW1 and WW2 due to arm
27.
by dave_universetf 3y ago
There is also a feeling by some horologists and watch fans that the hack interacting with the balance oscillator and suddenly halting its motion is detrimental to the movement's health and precision. I haven't found any data to su
28.
by dave_universetf 3y ago
We do. This is also not our own insight/invention, to be clear. We're implementing the spiritual core (but not the SIP clothing) of the ICE protocol ( https://datatracker.ietf.org/doc/html/rfc8445 ), which
29.
by dave_universetf 3y ago
That is not accurate to our experience. Mobile devices on cell networks see about the same amount of success with p2p connections as other devices. Mobile networks differ vastly in their behaviors when it comes to NAT traversal, and you can
30.
by dave_universetf 3y ago
Not yet. That needs more machinery than we currently have to enable tailscale clients to do automatic TLS cert issuance for custom domains.

More ›