atoponce

atoponce, 1 year ago to random

How it started: How it's going:

image/jpeg

atoponce, 3 months ago to coffee

Add #coffee stains to #LaTeX documents.

https://ctan.org/pkg/coffeestains?lang=en

Screenshot of the second page of a PDF with a coffee stain.
Screenshot of the third page of a PDF with two coffee drip stains.
Screenshot of the fourth page of a PDF with a coffee drip stain.

atoponce, 3 months ago to ChatGPT

Why large language models are not intelligent, exhibit #64338.

#ChatGPT

atoponce, 4 months ago to random

You've heard of Pop Tarts, but why aren't there any Mom Tarts?

Because of the pastryarchy.

atoponce, 1 year ago to random

If your phone has a Qualcomm chipset, it might be spying on you. Unfortunately, this is happening at the firmware level, beneath iOS and Android.

#privacy

https://www.nitrokey.com/news/2023/smartphones-popular-qualcomm-chip-secretly-share-private-information-us-chip-maker

atoponce, 10 months ago to vim

#vim vs #emacs

atoponce, 9 months ago to programming

CAPTCHAs are getting out of hand these days.

#programming

atoponce, 1 month ago to privacy

Friends don't let friends use Discord.

Message History of 600 Million Discord Users Can be Accessed For $5

#privacy #security

https://80.lv/articles/message-history-of-600-million-discord-users-can-be-accessed-for-usd5/

atoponce, 11 months ago to programming

Know your #programming variable style conventions:

camelCase
PascalCase
snake_case
kebab-case
ceiling¯case

atoponce, 10 months ago to random

This is a motherfucking website.

And it's fucking perfect.

https://motherfuckingwebsite.com/

atoponce, 1 year ago to random

This is truly maddening.

https://userinyerface.com/

atoponce, 1 month ago to random

Passkeys are indeed a shattered dream. Everything in this post is spot on with my experience using them.

In theory, I love the idea. In practice, it's a horrible, horrible, horrible UX.

I'll stick with #passwords + security keys/TOTP until this mess gets cleaned up.

https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

atoponce, 1 year ago to random

It's kind of hilarious to me how toxic the word "telemetry" has become. Don't get me wrong, the ad tracking industry has ruined it for everyone. However

Firefox users: Disable telemetry! It's an enemy to your privacy!
Mozilla: We removed a feature no one was using due to a lack of telemetry data.
Firefox users: I use it all the time! Why are you bad at this!

1Password users: I trust AgileBits to safely handle my data.
AgileBits: We added telemetry.
1Password users: Why do you hate my privacy?!

atoponce, 9 months ago to vim

Bram Moolenaar, the original author, maintainer, release manager, and benevolent dictator for life of #Vim has passed away on August 3, 2023.

https://groups.google.com/g/vim_announce/c/tWahca9zkt4?pli=1

atoponce, 10 months ago to fedora

#Fedora #Linux is debating adding telemetry to #GNOME for Fedora 40.

https://discussion.fedoraproject.org/t/f40-change-request-privacy-preserving-telemetry-for-fedora-workstation-system-wide/85320

atoponce, 11 months ago to debian

#Debian 12 "Bookworm" has entered the quiet period before release. Only ~100 RC bugs affect Bookworm when it releases.

https://lists.debian.org/debian-devel-announce/2023/06/msg00000.html

atoponce, 6 months ago to linux

You're familiar with the sudo(8) command, but did you know it had a logo? Did you further know that it's a sandwich?

#gnu #linux #bsd #unix

https://www.sudo.ws/about/logo/

atoponce, 6 months ago to random

I've been screaming this for years. Service providers that provide authentication should do these two things at a minimum:

1. Require at least 12 characters.
2. Use ZXCVBN to estimate password strength and require a score of 4.

Interestingly enough, if you do those two things, you don't need stupid password complexity requirements, and you don't need a blacklist, as 12+ characters with a ZXCVBN score of 4 won't show up in password database breaches.

https://www.cc.gatech.edu/news/largest-study-its-kind-shows-outdated-password-practices-are-widespread

#passwords

atoponce, 1 year ago to javascript

The #LastPass password generator uses a userspace #RC4 generator.

Here's their #JavaScript:

dogenerate() -> lpCreatePass() -> get_random() -> rng_get_bytes() -> rng_get_byte() -> prng_newstate() -> ARC4init(); ARC4next()

As RC4 is insecure, you would be wise not to use their web-based password generator.

Further, it seems likely they're using the same code in their password manager. You would be wise not to use it there also.

#cryptography #passwords

https://www.lastpass.com/features/password-generator

Screenshot of LastPass JavaScript source code highlighting the "lpCreatePass" function.
Screenshot of LastPass JavaScript source code highlighting the "rng_seed_int", "rng_seed_time", "rng_get_byte", "rng_get_bytes", and "get_random" functions.
Screenshot of LastPass JavaScript source code highlighting the "prng_newstate", "ARC4init", and "ARC4next" functions.

atoponce, 4 months ago to random

What did Master Yoda say when he saw himself in 4K?

HDMI.

atoponce, 1 year ago to random

I always get a kick out of off-brands in #anime. It's always something I'm looking for.

Here we have a "Macrosoft Winding XO" laptop with a 128-bit DES encrypted password.

Sounds about right.

image/png

atoponce, 10 months ago to linux

This post by Oracle is ironic.

"Keep #Linux Open and Free—We Can’t Afford Not To"

COUGH #Solaris COUGH

What a bunch of hypocrites.

https://www.oracle.com/news/announcement/blog/keep-linux-open-and-free-2023-07-10/

atoponce, 1 year ago to random

Solid criticism of #passkeys, specifically how Apple is rolling them out to macOS and iOS users.

TL;DR- passkeys behave like SSH keys, but without the transparency. Further, Apple iCloud can't be trusted to handle them correctly.

#Passwords

https://lapcatsoftware.com/articles/2023/5/1.html

atoponce, 2 months ago to random

Here's a fun way to comment your C# source code: start it with "https://"

Yup. A URL.

The C# compiler sees "https:" as an unused go-to label and "//" starts a comment for the rest of the line

https://this.is.totally.a.valid.comment.in.c#

atoponce, 8 days ago to random

iTerm2 now has ChatGPT integration.

https://iterm2.com/downloads/stable/iTerm2-3_5_0.changelog