purplehat_

8 ms·

1.
by purplehat_ 3mo ago
i'm trying to understand how outer shell works here. on the website you give the following as your motivation: > Apps like Jupyter and Tensorboard are not typically visible to standard web browsers if they’re running on remote serve
2.
by purplehat_ 3mo ago
On Being the Right Size turned 100 this year. It's not entirely the same topic as this essay, but this reminded me of it and it's a pretty famous short essay that's worth reading if you haven't seen it. https:/&#x2
3.
by purplehat_ 4mo ago
Cool find and a very interesting analysis! There's a lot more to morphology than just the shape of the shell, and indeed the shape can sometimes be misleading, in that very different species can have somewhat similar shells, and differ
4.
by purplehat_ 4mo ago
The first bit seems possibly solvable with private set intersection. You can publish a salted hash of everybody you trust, and I can compute hashes of everyone I trust with your salt to see if we have anyone in common. Then I check the sign
5.
by purplehat_ 5mo ago
For people reading this, you may want to know the the NSA is allegedly trying to weaken hybrid ML-KEM and X25519 down to just ML-KEM. This is a good thing to pay attention to! Here is a 6-part article about the topic: https://bl
6.
by purplehat_ 5mo ago
I believe ML-KEM is the standard algorithm for post-quantum asymmetric encryption. I think it's slower mainly because there's not good hardware support, but it shouldn't be a big deal because most encryption is hybrid where y
7.
by purplehat_ 5mo ago
This article, "Factoring is not a good benchmark to track Q-day", was posted this month by one of Cloudflare's lead post-quantum researchers specifically addressing the factoring issue. https://bas.westerbaan.name&
8.
by purplehat_ 5mo ago
I'm surprised people are advocating self-hosting as a viable solution. It takes a lot of knowledge to do sync and backup yourself, most of it implicit knowledge that people here don't realize we have and so for us it seems very ea
9.
by purplehat_ 5mo ago
what's the advantage of a static site generator over pandoc + makefile?
10.
by purplehat_ 5mo ago
Hi Matt, there's lots of speech-to-text programs out there with varying levels of quality. 100% local is admirable but it's always a tradeoff and users have to decide for themselves what's worth it. Would you consider making
11.
by purplehat_ 6mo ago
Have you (or anyone reading this) been able to "beat" fingerprint.com without Tor or turning JavaScript off outright? I've tried it various times over the last couple years, using different browsers with various privacy setti
12.
by purplehat_ 6mo ago
Fair point, but that solution doesn't address the market for theft, so there's a tradeoff there.
13.
by purplehat_ 6mo ago
Can you elaborate on "fairly well documented exploit tactics"? My impression is that most of these are either social engineering, for which we need to hire better designers, or complicated chains of hard-to-find primitives only ac
14.
by purplehat_ 6mo ago
I really don't understand the argument here. That the product is locked down by design is a feature, not a limitation. Yes, this has the side effect of making them more money and allowing a walled garden to form, but given that the vas
15.
by purplehat_ 6mo ago
I'm not sure anyone is being this explicitly malicious. Parents' groups, child safety organizations, and researchers have been at this for years, and while I agree with you that the solutions are very misguided, I think it does ou
16.
by purplehat_ 6mo ago
there is a `theme set` command
17.
by purplehat_ 6mo ago
I'm surprised zero-knowledge proofs have not been mentioned. This is a technique where (for example) the government signs your digital license, then you can present a proof that you are over 18 to a site without revealing anything else
18.
by purplehat_ 7mo ago
The quote seems to imply that if the watch receives the payload from any source, even without a compromised AP, it'll pop the shell. The easiest source of this is local network attacks, and it's not that unusual. In this case you
19.
by purplehat_ 7mo ago
Yes, to self-host it you will need a Google maps API key. In the related links at the bottom, https://gdir.telae.net/links.html , the Git repo https://github.com/pafoster/gdir.telae.net is available alo
20.
by purplehat_ 7mo ago
Omega-3 good, Omega-6 bad has been known for many years. For example, Scott Alexander wrote in 2014 on his blog Slate Star Codex about how Omega-3 lowers crime rates and Omega-6 increases crime rates. And he links to some cool RCTs where yo
21.
by purplehat_ 8mo ago
To be fair, the octet as the byte has been dominant for decades. POSIX even has the definition “A byte is composed of a contiguous sequence of 8 bits.” I would wager many software engineers don't even know that a non-octet bytes were a
22.
by purplehat_ 8mo ago
I hear sentiment like this occasionally and I genuinely wonder if this is conspiracy theory stuff or if this sort of thing actually happened in the past. I'm aware of the programs Snowden revealed, Tempora / XKeyscore / Longh
23.
by purplehat_ 8mo ago
For anyone else who got a little too excited at the title, ECC here is error correction codes, not elliptic curve crypto. Very cool writeup, thanks for digging into all those data sheets and sharing it with us! I feel like the hands-on elec
24.
by purplehat_ 8mo ago
Why do you say that? Bubblewrap is a it's a very minimal setuid binary. It's 4000 lines of C but essentially all it does is parse your flags ask the kernel to do the sandboxing (drop capabilities, change namespaces) for it. You do
25.
by purplehat_ 9mo ago
Thanks for linking to the essay. I just read it and really enjoyed it. I think I'll try to put the ideas into practice in my writing (and hope I'll succeed).
26.
by purplehat_ 9mo ago
That's really funny. Yes, in case it wasn't clear for others reading this and thinking about installing these, it's almost certain that uBlock Origin and Brave browser will not cause you any problems and if you're using
27.
by purplehat_ 9mo ago
I often see things like this and get a little bit of FOMO because I'd love to see what I can get out of this but I'm just not willing to upload all these private documents of mine to other people's computers where they'r
28.
by purplehat_ 9mo ago
I've tried a few times to convince people in my life who would self describe as "bad with computers" to download an adblocker, but they usually find the friction too high. Adding extensions is unfamiliar for most, and even if
29.
by purplehat_ 9mo ago
Thanks for sharing this!! I like using silly fonts, e.g. Comic Sans Mono has been my daily driver for the past year or so, and it's really fun to see the Minecraft fonts and old DOS and VT323 fonts. If anyone's into retro computin
30.
by purplehat_ 10mo ago
Hey - I wonder if you might be able to elaborate on this? I'm on gnome and have had by and large a pleasant experience, and now I'm curious what I might be missing out on. What made it feel like a horrible OOBE for you?

More ›