HN user

imcotton

72 karma
Posts33
Comments43
View on HN
www.cloudflarestatus.com 1mo ago

Ongoing: Cloudflare customers seeing incorrect invoice payments for 2.5 days

imcotton
2pts0
blog.imcotton.xyz 1mo ago

My –/.ssh folder has NO private keys

imcotton
2pts2
bip39-recast.pages.dev 3mo ago

The Nginx default page hides 5 clues that lead to same 24-word BIP39 mnemonic

imcotton
4pts0
github.com 7mo ago

Cloudflare is using timingSafeEqual incorrectly in its own example docs

imcotton
3pts0
blog.imcotton.xyz 8mo ago

Blending crypto wallet seed into an AI slop essay

imcotton
1pts0
bip39-recast.js.org 9mo ago

Show HN: Use color strips to wrap your crypto wallet

imcotton
1pts0
jsr.io 11mo ago

Show HN: Constant Entropy Mixtape Vol.01

imcotton
1pts0
www.cornerlation.xyz 1y ago

Show HN: Client side rendered static site without JavaScript

imcotton
4pts0
sri-shasum.js.org 1y ago

Show HN: Generate Subresource Integrity (SRI)

imcotton
2pts0
news.ycombinator.com 1y ago

Ask HN: Why Cloudflare kept sending email on Invoice Amount: $0.00?

imcotton
1pts1
accdoo.app 1y ago

Show HN: Cutting 100k Pi digits offline (PWA)

imcotton
1pts0
blog.imcotton.xyz 1y ago

You can not lose your key, if you drop it first

imcotton
2pts0
github.blog 1y ago

Accessible settings to disable all hovercards on GitHub

imcotton
2pts0
blog.imcotton.xyz 1y ago

Port a URL Shortener Web App from Deno Deploy to Cloudflare

imcotton
2pts0
news.ycombinator.com 1y ago

Show HN: Personal URL Shortener Web App (Via Hono and Deno KV)

imcotton
2pts0
totk-loci.mataroa.blog 1y ago

Spots Around Hyrule (TotK)

imcotton
1pts0
blog.imcotton.xyz 1y ago

You can not lose your private key, if you drop it first

imcotton
2pts4
blog.imcotton.xyz 1y ago

My –/.ssh folder has NO private keys

imcotton
2pts0
sign-poc.js.org 2y ago

Show HN: Client only public key authentication IdP (similar: SSH and OAuth 2.1)

imcotton
3pts2
github.com 2y ago

NPM package koa-router was forked due to inactivity after sold (2019)

imcotton
1pts0
accdoo.app 2y ago

Show HN: Happy Pi day with this PWA to cut 100k Pi digits offline

imcotton
1pts0
news.ycombinator.com 2y ago

Show HN: Drop SSH private keys in exchange for keygen via PRNG and Ed25519

imcotton
2pts2
accdoo.app 2y ago

Show HN: accdoo cipher web app now fused with offline Pi cutter (100k digits)

imcotton
2pts1
news.ycombinator.com 2y ago

Ask HN: How'd you manage the password managers' master password?

imcotton
17pts26
accdoo.app 2y ago

Show HN: accdoo cipher – like xkcd/936 but with dial-pad only

imcotton
2pts1
news.ycombinator.com 2y ago

Ask HN: JavaScript pop quiz console.log(undefined && true)

imcotton
2pts0
github.blog 4y ago

Write Better Commits, Build Better Projects

imcotton
5pts0
github.blog 4y ago

GitHub: Update your pull request branch by rebasing

imcotton
3pts0
github.blog 4y ago

GitHub blog homepage is unreadable to you too?

imcotton
3pts3
github.com 4y ago

Re: Re: Move to ESM

imcotton
2pts0
Don't animate height 12 months ago

Does anyone have the courage to perform a similar inspection on the Cloudflare homepage like the author did? On my M4 Mac mini, Safari lagged with single-digit frames per second (FPS), which scared me so much that I had to close the page as quickly as possible.

In case one not digging into the source code, the key stretching here is PBKDF2-HMAC-SHA512 with 400,000 iterations (OWASP recommended 210,000).

The reason for not using Argon2 or scrypt is because PBKDF2 is native provide by Webcrypto yet FIPS-140 compliance.

Not in detailed setup yet (as you could tell by spotting the 'PoC' in the domain), but you could try following the mock wizard on the build page (click the build button at the top) and go through the user flow.

I want to have it up and running ASAP so that people with experience in the related field can code themselves against the site right away or create a design audit from the outline.

Sorry for any inconvenience at this stage.

accdoo.app is a Web App / PWA that help you to crunch some numbers:

    arr.map(BigInt).reduce((a, b) => (a * b) ** 2n)


The same operation can be performed on any off-the-shelf calculator (or in mind), but this one comes in handy for large numbers without losing its precisions, up to 100,000 digits on Web, 1,000,000 in CLI, configurable from API (npm:accdoo).

Aside from the spirit of xkcd/936, it is widely applicable (does not require a dictionary nor an ANSI keyboard) and can be used for things like door locks, vaults, pins, passcodes, entropy seeding, or even root password for password managers (yes, all numeric is fine), etc.

Now back to Pi, it is an infinite data source and constant across the universe (base-10), figured would be great to have it chopped freely and then mixed into the calculations above. The Pi is produced on-the-fly, using JavaScript native BigInt and Chudnovsky Algorithm ([wiki]), the code was taken from one of the examples in the QuickJS project ([quickjs/pi], [pi_bigint.js]).

The syntax for cutting is the same as in the manual ([accdoo.app/about]):

    pi#6     // take 6 digits of Pi (314_159)
    pi#6#3   // take 6 digits of Pi but drop 3 beforehand (159_265)

    pi#1#40000   // take one digit at 40,000th


This is the second Show HN post as its major feature bump, here's the link to its first intro 10 days ago ([39115559]) and a previous sideways on Ask HN 8 days ago ([39138957]).

[wiki]: https://en.wikipedia.org/wiki/Chudnovsky_algorithm

[quickjs/pi]: https://bellard.org/quickjs/pi.html

[pi_bigint.js]: https://github.com/bellard/quickjs/blob/master/examples/pi_b...

[accdoo.app/about]: https://accdoo.app/about#manual

[39115559] https://news.ycombinator.com/item?id=39115559

[39138957] https://news.ycombinator.com/item?id=39138957

I've being building something have similar functionality recently, thus have the underneath tech stacks in mind the moment I saw the title, (webcrypto: ecdhe, kdf, aes/gcm), further glance into the source code seems legit to me.

My only nitpick is for service like this, the shared private key shall be short lived one time using, storing into localStorage might potentially be a foot-gun with low ROI tho.

The very ticket [1] is locked by this epic ending:

You were overly confident in your opinion, but I hope this website helps you understand that it's actually really damn hard.

The reason your program shows a high FPS under other terminal emulators is simply, because their rendering pipeline works independent of VT ingestion. Gnome Terminal is not laying out text faster than your display refresh rate either. And of course, again, this is something WT will probably do as well in the future... but this project is nowhere near as old as Gnome Terminal is.

[1] https://github.com/microsoft/terminal/issues/10362#issuecomm...

Angular v8.0 7 years ago

That what they have been saying for years, not what the REAL reason.