Show newer

#TIL Back in 2005, John Gilmore and Zooko (both are well-known cypherpunks) told Linus Torvalds he should avoid using SHA-1 in git right now before it's too late, since it was already theoretically unsound. Linus completely rejected this suggestion. :blobfacepalm: He said the attack is theoretical, and git's hash is not meant for security anyway - if you want to use git securely, you should only trust your local tree and never pull code from a public server. :blobfacepalm:

This decision basically summarizes the upstream kernel community's historical attitude on security mitigations...

RT @bascule@twitter.com: 2005 John Gilmore vs Linus Torvalds on SHA1 "debate" in a nutshell metzdowd.com/pipermail/cryptog

RT @zooko@twitter.com: I, too, begged Linus not to use SHA1 and he (indirectly) mocked me for it. IIRC I suggested that they use Tiger-192 instead. If they had, it would still be working fine and would not require an upgrade.

#infosec #git #cryptography #crypto #cypherpunk

re: I don't know what I've been told.. 

@freemo @stux

You can also evaporate something (but only as long as you have something to evaporate). Surprisingly many spacecraft used evaporative cooling at least sometimes (Gemini had an evaporator that seemed to have been used at low flow continuously, Apollo LM was cooled purely by evaporation, Apollo CSM had an evaporator to allow higher heat rejection rates than by radiators alone and as the sole way to dispose of heat after the SM was gone, Shuttle had an evaporator to cover high heat load intervals and, I assume, to help in the case the payload doors won't open).

Q: If system programmers create a music genre, what would it be?

A: Dumpedcore.

looking back at the recipe, I think I just under-did it with the salt. I added a seasoned salt later in the process, but too little and too late

Show thread

youtube.com/watch?v=k2WcOdz96k
a friend introduced me to K.Flay 5 or 6 years ago. She was one of his favorite artists at the time. I guess we aren't friends anymore, but I still like this song.

The "pouring water on a heated pan" thing worked for getting a crust on my bread, but the crust is sooo bland :( maybe one day I'll pull all the elements together successfully to make a good loaf.

a few hours ago, I was watching a video about autonomous teams of killing machines (see "slaughterbots"). now, I'm listening to an interview about DARPA's autonomous robotics competition for rescue and conservation. rather jarring...

the eel swims away sadly with their financial portfolio after i explain that i had said "e-learning" and not "eel earning" :(

@niconiconi I'm imagining a video with the 3 note corporate astroturf music playing in the background and the overly enthusiastic narrator "We at Google are really excited to tell you about some really cool things coming down the pipe. We've been able to find all sorts of efficiencies to drive down costs! What does this mean for you? Well, do you know how everyone talks about how great it is to have Google on their resume? You get to experience it first-hand! You can find out just how many doors having us on your resume helps to open!"

So, apparently you can tell libcurl to wait a bit by returning CURL_WRITEFUNC_PAUSE from your callback...still a bit weird, but I guess it works.

Show thread

Maybe it's just me, but libcurl's callback-oriented interface seems kinda whack. It's like "aaaaah! here's some data! you deal with it!"...but this is over TCP. I should be able to say "2048 bytes please, libcurl" and libcurl should reply "2048 bytes for you, sir", and so on, with the server waiting in between my requests until there are no more bytes to read..

Show older

🌸🌹2ck 🌱🐇's choices:

CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.