HN user

remcob

863 karma
Posts2
Comments209
View on HN

Besides the data being signed as already mentioned, the protocol is interactive and custom to passport documents. So you can’t just put it on any programmable NFC tag. I also doubt you can buy programmable ones implementing the passport protocols. But maybe you can find general purpose programmable ones you can implement the protocol on.

There are also optional subprotocols that allow the chip to be authenticated (i.e. proof it knows a private key). These prevent copying valid signed data to a different chip.

It’s well known GPUs are good at cryptography. Starting with hash functions (e.g. crypto mining) but also zero knowledge proofs and multi party computation.

Did you verify this through disassembly? These loops can still be replaced by a closed form expression and I wouldn’t be surprised if LLVM figured this out.

Exactly, and this is in my experience what most Rust code ends up looking like.

It compromises a bit on generality and (potential) performance to achieve better readability and succinctness. Often a worthwhile trade-off, but not something the standard library can always do.

This is essentially the Birthday paradox. You need a quadratically better false match rate to deduplicate than to authenticate. It’s also why Worldcoin went with Irises (highest entropy among biometrics), custom hardware, custom optics and an in-house trained algorithm.

WebKit was more or less ‘stolen’ from KDE’s KHTML and KJS. They forked it, developed it in secret, and did not publish anything until it diverged so far from source that it could not be merged back in. While technically legal, it definitely goes against the spirit of open source. LLVM is a better story: also not invented at Apple, but they hired the core developers to continue working on it.

carbon dioxide

You probably mean nitrous oxide (N₂O). Both are sold in small aluminum canisters for culinary use. CO₂ is acidic and is quite unpleasant to inhale. N₂O is listed in the article (Table 1) as one of the inhalant anesthetics.

I had the experience of going through both IV general anesthesia (presumably propofonol) and syncope in the last two weeks and for me propofonol was much faster getting in and out of: like falling asleep and I woke pleasantly remembering a dream. Syncope for me was much harsher: tunnel vision as a passed out and I came by initially not remembering where or who I was, like my brain did a cold boot.

Yes they should. A deposit liability arises from the fact that they received an asset in a deposit transaction. Liabilities and assets aren't mutually exclusive in any transaction, and both must increase when you receive a customer's deposit, or else where does the liability come from?

Does a cash transporter count the contents of their armored vans as assets? Does DHL count the contents of their vehicles and warehouses as assets? Why should exchanges be different?

I know it's the law for exchanges to account custodial funds as assets (SAB121), but I don't see why it should be this way. In fact it seems to achieve the opposite of consumer protection.

This holds true for regular travel nearing light speed too: For an external observer the spaceship never goes faster than light, but the passengers clocks slow down and they can experience arbitrarily high faster-than-light speeds.

For some reason I never see this discussed when people talk about FTL travel, maybe I'm wrong?

I toy with microcontrollers. For hobbyists like me, ARM processors are still the most sensible choice. I'm not expecting any shift from that for at least five years.

I started using ESP32C3s in my projects. They are cheap powerful RISC-V micros supported by Arduino SDK. IMHO it's already better than the ARM offerings, but I'm still waiting for good Rust support.

so you reduce the effective keysize to 256-6*$num_chars

Correct: you reduce the search-space of the private key, but you simultaneously increase the cost of brute-forcing by the same amount because finding keys to try in the smaller search-space takes more work (the same work as generating vanity addresses).

As long as brute-forcing is the most efficient way to crack the attacker has to do the same expected amount of work on vanity addresses.

It's also missing the my favorite children's animated series "Alfred J. Kwak" [1]. A Dutch-Japanese collaboration notable for it's exceptionally mature treatment of very difficult topics such as apartheid, environmentalism, inequality, doping in sports, facism, etc.

[1] https://en.wikipedia.org/wiki/Alfred_J._Kwak

Edit: After seeing the series, Tove Jansen allowed the same Dutch-Japanese crew to animate the Moomins in a Dutch-Japanese-Finish collaboration. [2]

[2] https://en.wikipedia.org/wiki/Moomin_(1990_TV_series)

In my experience Rust has become the go-to language for applied cryptography and is becoming increasingly popular for embedded/iot development. We're currently hiring for both and experience a scarcity of developers.