HN user
Signal message keys seem to include an IV. [1] Message keys are generated by passing a chain key through a key derivation function. [2] So you can also expand a shared secret established through Diffie-Hellman.
Someone please correct me if I'm wrong.
[1] https://github.com/signalapp/libsignal-protocol-java/blob/ma...
[2] https://signal.org/docs/specifications/doubleratchet/Set0_1....
Sounds right. [1] The mission patch is hilarious.
You can search `known_hosts` for a fingerprint using `ssh-keygen -l -f ~/.ssh/known_hosts` and `grep`. If you disable `HashKnownHosts` in your ssh config, the command will also tell you the name of the host(s) for that fingerprint, rather than its hash.
I use this all the time, because my AWS/Azure/GCP ips change constantly, but their pubkey fingerprints do not.
[1] https://www.schneier.com/blog/archives/2005/05/the_potential...
That is the most stupid thing I've read in a while.
Arrogance.
It takes 10 lines of Python to compute a multiplicative inverse mod p, using arbitrary precision integers. [1] Try doing the same thing with nothing but x86 assembly and Volume 2 of Knuth's AOCP.
It's a useful, humbling exercise.
You will be happy to learn that under Chair Khan, the FTC is going to prioritize enforcement actions against this specific practice. Only 1 Commissioner issued a dissenting statement. [1]
Comcast has probably already discontinued the practice, as it's been 2 weeks since the policy statement was issued.
[1] https://www.ftc.gov/news-events/press-releases/2021/10/ftc-r...
This is one of the many ways endless years of emergency low interest rates are destroying the economy and the livelihood of many people.
Japan has held rates near the zero lower bound since the late 1990s. If rates were the only factor, you'd expect to see the same situation there.
My desktop text editor, KeenWrite, provides such basic TeX rendering in real-time.
Lyx [1] is also great.
Crypto continues to help nobody and achieve nothing in the real world
It's kind of surprising how little progress has been made.
It is absolutely possible to use privacy-respecting low-fee tokens to purchase ebooks, purchase "no advertisement" article reads, or subscribe to periodicals.
Even something like Taler is better than Visa and Mastercard. I would love to know why lwn.net, ars, or the register don't try. I would absolutely pay $0.25-$2.00 per read for the ~50 articles I read per month on these websites.
Micropayments for tech readers seems like a good place to start. Tech readers use ad blockers, but are also willing to try new tools with janky UX.
The "inflation targeting era" began around 1995 [1]. The official story explaing how 2% became an (informal) international standard is kind of interesting [2].
[1] https://www.stlouisfed.org/-/media/project/frbstl/stlouisfed...
[2] https://www.nytimes.com/2014/12/21/upshot/of-kiwis-and-curre...
He was rude then, and he’s not happy generally
Not too long ago, people could encounter a grumpy store clerk and forget about it by the time they got home. Sometimes they'd even turn it into a joke [1]. It was a simpler, less angry time.
You're probably correct in this case, but not in general. The authors of [1] could have quietly run a money printer but elected to seek reforms instead.
[1] https://online.wsj.com/public/resources/documents/1029sechft...
Hamming is great in general. Some years ago, I picked up a copy of "Numerical Methods for Scientists and Engineers" for like $2 at a used book store. I had no idea who Hamming was, but it was cheap so I bought it.
After the first chapter I thought, "this guy is pretty sharp let's see what else he's written." That is when I found "You and Your Research".
I think "honest market" is libertarian-speak for "no government". He's being serious.
I believe the United States slow walked its own Prompt Global Strike [1] program because it was perceived to be needlessly escalatory [2]. That sounds like sensible policy making.
[1] https://en.wikipedia.org/wiki/Prompt_Global_Strike
[2] https://web.archive.org/web/20121220071303/http://defense.ao...
The formula for error bars under the traditional Binomial assumption is:
+/- sqrt(p * (1-p) / N)
https://stats.stackexchange.com/questions/29641/standard-err...
last month that I was made aware that the project has been discontinued (Why??)
It looks like the main contributor is (or was very recently) a Signal developer [1], but they have not committed to Streisand since 2018 [2].
[1] https://signal.org/blog/help-iran-reconnect/
[2] https://github.com/StreisandEffect/streisand/graphs/contribu...
Same here, mostly doing math stuff on x86.
There was a recent thread [1] optimizing some very primitive trig functions.
I recently watched a djb interview where he talked about the importance of fully utilizing available hardware [2 at 5:15]. That can be a good starting point, although at work its usually easier to just consume more resources than to use what you've got more efficiently.
Wow, is it really this [1] easy to run a C routine?
Where does the rpi4 store the firmware necessary to read from the sd card where this software is (presumably) stored?
[1] https://github.com/isometimes/rpi4-osdev/blob/master/part1-b...
In nvidia land, `nvidia-smi` is like `top` for your gpus. If you're running compiled CUDA, `nvprof` is very useful. But I'm not sure how much work it would take to profile something like a pytorch model.
https://developer.nvidia.com/blog/cuda-pro-tip-nvprof-your-h...