mcpherrinm

5 ms·

1.
by mcpherrinm 6d ago
Yeah. Vitess does have some options for atomic cross-shard commits using an additional database to track two-phase commits, but that's expensive so you probably want to avoid that. https://vitess.io/docs/25.0&#x2F
2.
by mcpherrinm 6d ago
Assuming it works the same way as their MySQL product, Vitess: The usual way to run it is that you partition your db based on something like a user, so that single user gets a consistent DB, but anything cross-shard may not be. I know when
3.
by mcpherrinm 7d ago
I think "very straightforward" is vastly overselling how easy editing OSM is. It feels like editing a database, without any affordances for easily making common updates. If the hours of a store are wrong on Google Maps, I just upl
4.
by mcpherrinm 8d ago
I don't know how fast my CPU cores are in MIPS, but it's 4.5 Ghz and some random googling indicates that might be about 10 MIPS per Mhz, so 45,000 Dhrystone MIPS. And assuming about ((32x32 core-hours) / 8766 (hours/year
5.
by mcpherrinm 8d ago
That's a good point. I've added to the post. It's simple enough I'd expect anyone who wants to do it can follow the docs from CADO-NFS, which are very good, but I can write it down explicitly. Install CADO-NFS per upstre
6.
by mcpherrinm 8d ago
Netscape of this era predates the Subject Alternative Name :)
7.
by mcpherrinm 8d ago
Fascinating! My involvement in this space starts much later, so it’s always interesting to hear from folks involved at the time. The rumours about monetizing the root program is one I’ve heard repeated but never anything concrete. These day
8.
by mcpherrinm 9d ago
I didn't use any GPUs, but Steve Weis (who factored the final key at the bottom of the post) did. He's posted about that factoring setup over on https://x.com/sweis/status/2095570645505700165
9.
by mcpherrinm 9d ago
I agree to some degree, but it's not essential for what I wanted to do (which is find a 512-bit RSA key). The biggest thing I'm afraid of is that the generated scripts missed some entries, or otherwise mis-classified them, in part
10.
by mcpherrinm 9d ago
(As the author of the post) I've written and worked on a few TLS implementations, so it wasn't terribly interesting to me. And I have to go to work tomorrow and solve real, modern CA problems :) But in short, I wanted to use Go, a
11.
by mcpherrinm 9d ago
It's hard to extrapolate that far, but maybe hundreds of thousands or millions of years. Naively looking at scaling factors is going to be tricky, because computation of this scale is going to involve things like "how do I hijack
12.
by mcpherrinm 9d ago
It’s not quite a doubling per bit, which is why RSA keys are relatively large compared to similar-strength ECDSA keys, for example. Steve Weis, who has been doing RSA factoring on some large GPU clusters, estimates factoring 1024-bit RSA wo
13.
by mcpherrinm 13d ago
The linked actual research article did look at multiple GNSS systems. GPS is presumably being reported out of familiarity https://doi.org/10.1029/2026GL124645
14.
by mcpherrinm 2mo ago
This shouldn’t be too much of a surprise, as TLS 1.3 has been out for many years and is widely adopted. I haven’t paid too much attention to the TLS WG lately (for obvious reasons if you look at their mailing list), but I assume this is mos
15.
by mcpherrinm 2mo ago
While I didn't work on AWS, I did intern on the retail side of Amazon, and there's definitely this sort of monitoring in place. Surely somebody was paged. And even if not, this is "just" the cost explorer estimations, no
16.
by mcpherrinm 2mo ago
She posted a video of her food loadout on instagram. It looked like a lot of dehydrated meals, and also a lot of peanut butter and tortillas. Here's a video of a day's food: https://www.instagram.com/reel/DZd8
17.
by mcpherrinm 2mo ago
She's got a lot of content posted on Instagram and TikTok, which includes packing food, videos of the boat inside and out, etc. https://www.instagram.com/yourowkelsey/reels/ https://www.tiktok.com&
18.
by mcpherrinm 2mo ago
So, in this case it wasn't correct to do so, but there is actually a current algorithm which uses floating point: Falcon (aka FN-DSA). https://keymaterial.net/2026/05/13/so-you-want-to-deploy-fn-... talk
19.
by mcpherrinm 3mo ago
The underlying context is the US government only wants to buy systems which support pure post-quantum cryptography for use on top-secret networks, as part of the requirements of (via its Commercial National Security Algorithm Suite 2.0 stan
20.
by mcpherrinm 3mo ago
If a key is breached, the certificate can be revoked, but that revocation goes away once the certificate is expired. Expiry is a pretty fundamental part of the security model of certificates.
21.
by mcpherrinm 3mo ago
It's the list here: https://docs.adyen.com/plugins#built-by-adyen
22.
by mcpherrinm 4mo ago
The best introduction to verifiable indexes I know of offhand is https://www.youtube.com/watch?v=gfrXTgmbS1s and https://github.com/transparency-dev/incubator/tree/main/vind...
23.
by mcpherrinm 4mo ago
Yes, many of the problems from CT are fixed. I wouldn't call it a "broken mess" though, as it has been relatively effective at detecting various problems, and to my knowledge hasn't been compromised. There are no SCTs, w
24.
by mcpherrinm 4mo ago
On Linux and similar systems, I'm hoping github.com/rustls/upki will handle landmark distribution, and that non-browser clients can use that. Of course Rustls will support their own project, but I'm hopeful other TLS sta
25.
by mcpherrinm 4mo ago
Great question! Of course, we'll continue to provide more information as we firm up more details. This is an area that's not locked down yet, but I can give a sneak preview of what it might look like. We expect batches to be produ
26.
by mcpherrinm 4mo ago
OpenSSH's Damien Miller has https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e... defining ssh-mldsa44-ed25519@openssh.com which seems more likely given the authorship.
27.
by mcpherrinm 4mo ago
Even without DNSSEC, the CAA record approach can help, as it requires MITMing between the CA and the DNS server, which may be harder in some cases than just MITMing a target site. There’s some upcoming attempts at transport security for aut
28.
by mcpherrinm 4mo ago
CAA checking is mandatory, so you can always restrict to a given CA. To get complete control with DNSSEC, you also need the accounturi and validationmethod extensions (which you need to guarantee only your account can issue, and only with t
29.
by mcpherrinm 4mo ago
The post seems to be down so I am not quite sure what it says, but Co-Authored-By trailer is what Claude does. I'm not quite clear what you're suggested that's different from what Claude does - just default to off instead of
30.
by mcpherrinm 5mo ago
It doesn't matter what the network is doing; the phone needs to disable 2g. There's various ways to get the phone to downgrade to 2g otherwise, eg https://montsecure.com/files/2021_downgrade.pdf Android has i

More ›