imcotton

5 ms·

1.
Ongoing: Cloudflare customers seeing incorrect invoice payments for 2.5 days(cloudflarestatus.com)
2 points by imcotton 3mo ago|0 comments
2.
by imcotton 4mo ago
How many AI agent running on your system right now?
3.
My –/.ssh folder has NO private keys(blog.imcotton.xyz)
2 points by imcotton 4mo ago|2 comments
4.
The Nginx default page hides 5 clues that lead to same 24-word BIP39 mnemonic(bip39-recast.pages.dev)
4 points by imcotton 6mo ago|0 comments
5.
by imcotton 8mo ago
The first thing I need to do after creating a repo on GitHub, disable Project in repo settings.
6.
Cloudflare is using timingSafeEqual incorrectly in its own example docs(github.com)
3 points by imcotton 9mo ago|0 comments
7.
Blending crypto wallet seed into an AI slop essay(blog.imcotton.xyz)
1 points by imcotton 10mo ago|0 comments
8.
Show HN: Use color strips to wrap your crypto wallet(bip39-recast.js.org)
1 points by imcotton 1y ago|0 comments
9.
Show HN: Constant Entropy Mixtape Vol.01(jsr.io)
1 points by imcotton 1y ago|0 comments
10.
by imcotton 1y ago
xkcd/538 never gets old.
11.
by imcotton 1y ago
I did this in console: $('#container').style = 'display: unset'
12.
by imcotton 1y ago
Does anyone have the courage to perform a similar inspection on the Cloudflare homepage like the author did? On my M4 Mac mini, Safari lagged with single-digit frames per second (FPS), which scared me so much that I had to close the page as
13.
by imcotton 1y ago
Thanks, I have being putting medium domain into dns blocklist for years.
14.
by imcotton 1y ago
now try this: cat Makefile.md | npx offmark
15.
Show HN: Client side rendered static site without JavaScript(cornerlation.xyz)
4 points by imcotton 1y ago|0 comments
16.
by imcotton 1y ago
It's good to have a client side that does not send data to remote, improvements: - CSP and security headers, currently this site scores D on https://securityheaders.com - no SRI check on CSS or JavaScript files. - by loadin
17.
by imcotton 1y ago
I have previously written a blog post on this very topic, tl;dr: deleting your keys. https://blog.imcotton.xyz/my-ssh-folder-has-no-private-keys
18.
Show HN: Generate Subresource Integrity (SRI)(sri-shasum.js.org)
2 points by imcotton 1y ago|0 comments
19.
Ask HN: Why Cloudflare kept sending email on Invoice Amount: $0.00?
1 points by imcotton 1y ago|1 comments
20.
Show HN: Cutting 100k Pi digits offline (PWA)(accdoo.app)
1 points by imcotton 1y ago|0 comments
21.
You can not lose your key, if you drop it first(blog.imcotton.xyz)
2 points by imcotton 2y ago|0 comments
22.
Accessible settings to disable all hovercards on GitHub(github.blog)
2 points by imcotton 2y ago|0 comments
23.
by imcotton 2y ago
I also think OAuth could be used to better serve AX in the age of agent, but before the whole industry find the PMF, shall we not leave the humans (us) behind? Thus I made one for breaking the grip of big IdPs and offer a more secure and ea
24.
Port a URL Shortener Web App from Deno Deploy to Cloudflare(blog.imcotton.xyz)
2 points by imcotton 2y ago|0 comments
25.
Show HN: Personal URL Shortener Web App (Via Hono and Deno KV)
2 points by imcotton 2y ago|0 comments
26.
Spots Around Hyrule (TotK)(totk-loci.mataroa.blog)
1 points by imcotton 2y ago|0 comments
27.
by imcotton 2y ago
In case one not digging into the source code, the key stretching here is PBKDF2-HMAC-SHA512 with 400,000 iterations (OWASP recommended 210,000). The reason for not using Argon2 or scrypt is because PBKDF2 is native provide by Webcrypto yet
28.
by imcotton 2y ago
Now, brute-force my private key and post new blog entry with your wallet address, I will send you rewards.
29.
You can not lose your private key, if you drop it first(blog.imcotton.xyz)
2 points by imcotton 2y ago|4 comments
30.
My –/.ssh folder has NO private keys(blog.imcotton.xyz)
2 points by imcotton 2y ago|0 comments

More ›