vord's recent activity
-
Comment on Origin of ECDSA curve seed provided by NSA to NIST in 2000 without explanation turns out to be simple PRNG output with UNIX timestamp as seed in ~comp
-
Comment on Asset flips and vibes: fifteen years of videogames as a preview of the LLM era in ~comp
vord Link ParentI feel like if they had a filter like "Received updates for at least 2 years," that haystack would be exponentially smaller.I feel like if they had a filter like "Received updates for at least 2 years," that haystack would be exponentially smaller.
-
Comment on Origin of ECDSA curve seed provided by NSA to NIST in 2000 without explanation turns out to be simple PRNG output with UNIX timestamp as seed in ~comp
vord (edited )Link ParentIn absence of any additional background knowledge, almost any conspiracy tied to an American 3-letter agency, but particularly the NSA and CIA, should have at least 5x more credibility relative to...In absence of any additional background knowledge, almost any conspiracy tied to an American 3-letter agency, but particularly the NSA and CIA, should have at least 5x more credibility relative to being applied to any other thing.
"9/11 was an inside job" sounds absolutely unbelievable, until you learn about Operation Northwoods, and then you have to ponder what would have happened if someone other than JFK was calling the shots.
Full disclosure, I don't think 9/11 was an inside job. I do think there is a pretty good chance that the offhand dismissal of the intelligence leading up to it was not done because they genuinely thought it was noise. Mr. Rumsfield was pretty sus, and Cheney was worse.
-
Comment on Best way to setup email forwarding for a domain I own? in ~tech
vord LinkProtonmail does it quite nicely, but not on the free tiers. Have a duo plan with two domains, one for me and one for my spouse. They do catchall for receiving, but if you want to send with the...Protonmail does it quite nicely, but not on the free tiers. Have a duo plan with two domains, one for me and one for my spouse. They do catchall for receiving, but if you want to send with the address you have to configure one of your email addresses.
-
Comment on Maybe there was an egg cartel after all in ~food
vord Link ParentWell, apparently we need a measles outbreak for awhile to remind people why we need vaccines, so I think disaster it is.Well, apparently we need a measles outbreak for awhile to remind people why we need vaccines, so I think disaster it is.
-
Comment on Maybe there was an egg cartel after all in ~food
vord Link ParentThe problem with the way a lot of people learn history is via this fantastical lens like a fairytale, with very little introspection as to how those events impacted future events. Everyone acts...The problem with the way a lot of people learn history is via this fantastical lens like a fairytale, with very little introspection as to how those events impacted future events.
Everyone acts like if we repealed every law implemented since 1900 that we would retain our hard-won progress instead of people (mostly companies) immediately going "oh thank fuck we can just dump our waste in lakes again and stop paying minimum wage."
-
Comment on What can be done about Linux being slopified? in ~tech
vord Link ParentBut it has no semblance of sentinence to determine what that quality bar is. On more than one occasion a Opus 5+ prompt deployed an ancient outdated library instead the modern best practice....But it has no semblance of sentinence to determine what that quality bar is. On more than one occasion a Opus 5+ prompt deployed an ancient outdated library instead the modern best practice. Because the old outdated library has a huge footprint on stackoverflow, and it was best practice until say circa 2018.
Reenforcement learning is how you get a bot deploying JQuery in 2026.
-
Comment on What can be done about Linux being slopified? in ~tech
vord Link ParentHad Fable 5.1 do it about a week ago, though it was not "just created." It did it to "prevent API breakage." It might have had to with there being a database schema. The change is one which would...Had Fable 5.1 do it about a week ago, though it was not "just created."
It did it to "prevent API breakage."
It might have had to with there being a database schema. The change is one which would have added a table column, but to avoid a data migration just created a second table.
-
Comment on iPhone Duo sells out immediately, now backordered until next year in ~tech
vord (edited )Link ParentYes, but that's what I'm saying. The odds of being victim of a sim swap, especially with the retiring of 3G, are infantesimally small. Especially since it would also require an unchanged breeched...Yes, but that's what I'm saying. The odds of being victim of a sim swap, especially with the retiring of 3G, are infantesimally small. Especially since it would also require an unchanged breeched password.
Agree that SMS should never be used as an identity beyond "this is probably not a bot." I had always taken it to be more of a measure to minimize bot and (more importantly to eshop sites) preventing people creating many accounts to take advantage of coupons.
My idea is that the link would be an encrypted message on its own, just to signal that your chosen MFA app would open it and decrypt it with your chosen key. Doesn't matter if the SIM is swapped if e2e encryption is in play.
-
Comment on What can be done about Linux being slopified? in ~tech
vord (edited )Link ParentI'd say we're already running into it hard, we just haven't hit the theoretical limit. That decoherence essay really put a bow on a phrase we've been using at work: Claude is the best tech-debt...I'd say we're already running into it hard, we just haven't hit the theoretical limit. That decoherence essay really put a bow on a phrase we've been using at work:
Claude is the best tech-debt generator on the planet.
It's pretty good at spitting out smaller one-shots. But as you iterate on it, if you never go back and look over the code and refactor it yourself, it degenerates quickly. The larger the codebase gets, the more likely it breaks apart at the seams because it can't keep everything in context.
Especially since by default it feels like the models will spit out 80 tests for every 100 lines of code. Which then will become further tech debt that needs to be maintained.
-
Comment on What can be done about Linux being slopified? in ~tech
vord Link ParentOh, you need a small feature added to a class I just built? Let me duplicate that class and suffix it '_new_feature.'Oh, you need a small feature added to a class I just built?
Let me duplicate that class and suffix it '_new_feature.'
-
Comment on What can be done about Linux being slopified? in ~tech
vord Link ParentLinus is best described as a fairly well-principled person who is too damn busy to bother wasting time mincing words with people wasting his time.Linus is best described as a fairly well-principled person who is too damn busy to bother wasting time mincing words with people wasting his time.
-
Comment on iPhone Duo sells out immediately, now backordered until next year in ~tech
vord (edited )Link ParentHere's the thing. Nobody needs perfect security for everything. SMS is fine for like 60% of use cases. A secondary email is fine for about the next 20%. For the next 25%, a very standardized TOTP...Here's the thing. Nobody needs perfect security for everything. SMS is fine for like 60% of use cases. A secondary email is fine for about the next 20%. For the next 25%, a very standardized TOTP is fantastic.
Most everything beyond that has always felt more like a solution in search of a problem than a material cybersecurity risk.
Once we got past servers storing passwords in plaintext, authenticating over cleartext, and implementing rudimentary fail-to-ban, the primary vector left has been the fuzzy grey matter that will accidentally hand over the keys, no matter how good any other factors.
The real risk IMO is people using biometrics in place of passwords. Those are only as secure as your consciousness preventing a bad actor moving your body.
SMS insecurity could easily be solved with basic e2e encryption. Instead of a number, you get an app hyperlink like
mfa://<encrypted message>But that doesn't further enable vendor lockin and analytics. -
Comment on iPhone Duo sells out immediately, now backordered until next year in ~tech
vord Link ParentI use GrapheneOS. Google's hardware attestation has started to make it literally impossible to use some applications that I previously used. People are going nuts with security. I don't need 2FA...I use GrapheneOS. Google's hardware attestation has started to make it literally impossible to use some applications that I previously used.
People are going nuts with security. I don't need 2FA for my rent payment gateway. What's somebody going to do, pay my rent for me?
-
Comment on Origin of ECDSA curve seed provided by NSA to NIST in 2000 without explanation turns out to be simple PRNG output with UNIX timestamp as seed in ~comp
vord Link ParentAnd that's why literally every classified document should be declassified and published after 20 years. You get 20 years to resolve any issues that would pose a threat from publication. And if...And that's why literally every classified document should be declassified and published after 20 years.
You get 20 years to resolve any issues that would pose a threat from publication. And if this would destabilize the globle....then we should probably stop doing things that destabilize the globe when they are public knowledge.
-
Comment on iPhone Duo sells out immediately, now backordered until next year in ~tech
vord LinkWhile I dislike the continued dominance of Apple phones for a variety of reasons, this does please me to know that the market is not in fact clamoring for an ever-larger, ever-thinner rectangle....While I dislike the continued dominance of Apple phones for a variety of reasons, this does please me to know that the market is not in fact clamoring for an ever-larger, ever-thinner rectangle.
At this point in my life I want off the smartphone train. We need laws that mandate that 2FA (and passkeys) must always have an option that doesn't require the use of a specific app. That's the biggest thing holding me to one right now.
-
Comment on Anthropic says revenue jumped 45% to $16.8 billion in third quarter in ~tech
vord Link ParentEvery ERP/CRM system tacked on AI due to hype. These companies will all be fine because they were already immensely profitable, and the AI was a bolt-on that almost nobody wanted, and most of us...Every ERP/CRM system tacked on AI due to hype. These companies will all be fine because they were already immensely profitable, and the AI was a bolt-on that almost nobody wanted, and most of us will be thrilled if they get rid of it.
-
Comment on 1 in 8 Billion - Browser game, free, life sim with real statistics from 172 countries in ~games
vord Link ParentIt said it was made and powered by Claude, so the answer is probably somewhere in the middle.It said it was made and powered by Claude, so the answer is probably somewhere in the middle.
-
Comment on 1 in 8 Billion - Browser game, free, life sim with real statistics from 172 countries in ~games
vord LinkThis reminds me of a great evolution of Spent, and I absolutely love it. I think it currently ranks as one of my favorite things powered by AI, and I will be quite saddened if/when it becomes...This reminds me of a great evolution of Spent, and I absolutely love it.
I think it currently ranks as one of my favorite things powered by AI, and I will be quite saddened if/when it becomes unaffordable to keep going.
-
Comment on Anthropic says revenue jumped 45% to $16.8 billion in third quarter in ~tech
vord Link ParentThe idea that we've hit the start of an S curve on spending already is a terrifying thought, which would suggest that peak AI spend seems to be on the order of $200B or less, spread among all the...The idea that we've hit the start of an S curve on spending already is a terrifying thought, which would suggest that peak AI spend seems to be on the order of $200B or less, spread among all the players.
Which I presume will mostly boil down to the big players gathering up the remains of OpenAI and Anthropic in a few years.
Oh yes. TBH I forgot about all that other nonsense.