<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: MrRadar</title><link>https://news.ycombinator.com/user?id=MrRadar</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 08 Apr 2026 10:30:21 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=MrRadar" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by MrRadar in "Cloudflare targets 2029 for full post-quantum security"]]></title><description><![CDATA[
<p>Only the asymmetric portion of the cryptography (which is only used in the handshake) will need to use PQC algorithms. Symmetric crypto algorithms (AES/ChaCha20/SHA-*), which are used after the handshake, are not as badly affected by quantum computing so they're not being replaced in the immediate term. I'm pretty sure that general purpose CPUs do not have hardware acceleration for the asymmetric crypto anyways.</p>
]]></description><pubDate>Tue, 07 Apr 2026 20:43:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47681119</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47681119</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47681119</guid></item><item><title><![CDATA[New comment by MrRadar in "Cloudflare targets 2029 for full post-quantum security"]]></title><description><![CDATA[
<p>This page lists some figures for ML-KEM-768 (which is the PQ key exchange algorithm that's most widely deployed today): <a href="https://blog.cloudflare.com/pq-2025/#ml-kem-versus-x25519" rel="nofollow">https://blog.cloudflare.com/pq-2025/#ml-kem-versus-x25519</a> This one is actually faster than X25519 (a highly optimized ECC algorithm) by about double but requires 1,184 bytes of data to be exchanged per keyshare vs 32 for X25519. In practice everyone today is using a hybrid algorithm (where you do both ECC and PQ in case the PQ algorithm has an undiscovered weakness) so an ECC+PQ key exchange will be strictly slower than an ECC-only key exchange.<p>This page lists some numbers for different PQ signature algorithms: <a href="https://blog.cloudflare.com/another-look-at-pq-signatures/#the-algorithms" rel="nofollow">https://blog.cloudflare.com/another-look-at-pq-signatures/#t...</a> Right now the NIST has selected three different ones (ML-DSA, SLH-DSA, and Falcon a.k.a. FN-DSA) which each have different trade-offs.<p>SLH-DSA is slow and requires a large amount of data for signatures, however it's considered the most secure of the algorithms (since it's based on the well-understood security properties of symmetric hash algorithms) so it was selected primarily as a "backup" in case the other two algorithms are both broken (which may be possible as they're both based on the same mathematical structure).<p>ML-DSA and Falcon are both fairly fast (within an order of magnitude of Ed25519, the X25519 curve signature algorithm), but both require significantly larger keys (41x/28x) and signatures (38x/10x) compared to Ed25519. Falcon has the additional constraint that achieving the listed performance in that table requires a hardware FPU that implements IEEE-754 with constant-time double-precision math. CPUs that do not have such an FPU will need to fall back to software emulation of the required floating point math (most phone, desktop, and server CPUs have such an FPU but many embedded CPUs and microcontrollers do not).<p>The net result is that TLS handshakes with PQ signatures and key exchange may balloon to high single- or double-digit kilobytes in size, which will be especially impactful for users on marginal connections (and may break some "middle boxes" <a href="https://blog.cloudflare.com/nist-post-quantum-surprise/#dilithiums-size" rel="nofollow">https://blog.cloudflare.com/nist-post-quantum-surprise/#dili...</a>).</p>
]]></description><pubDate>Tue, 07 Apr 2026 20:05:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47680659</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47680659</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47680659</guid></item><item><title><![CDATA[New comment by MrRadar in "Cloudflare targets 2029 for full post-quantum security"]]></title><description><![CDATA[
<p>Post-quantum algorithms tend to be slower than existing elliptic curve algorithms and require more data to be exchanged to provide equivalent security against attacks run on non-quantum computers.</p>
]]></description><pubDate>Tue, 07 Apr 2026 19:10:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=47679958</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47679958</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47679958</guid></item><item><title><![CDATA[New comment by MrRadar in "Cloudflare targets 2029 for full post-quantum security"]]></title><description><![CDATA[
<p>Along similar lines, Mozilla recently updated their recommended server-side TLS configuration to enable the  X25519MLKEM768 post-quantum key exchange now that it's making it into actually-deployed software versions: <a href="https://wiki.mozilla.org/Security/Server_Side_TLS" rel="nofollow">https://wiki.mozilla.org/Security/Server_Side_TLS</a> At the same time they removed their "old client" compatibility profile as newer TLS libraries do not implement the necessary algorithms (or at least do not enable them by default) and slightly tweaked the "intermediate" compatibility profile to remove a fallback necessary for IE 11 on Windows 7 (now Windows 10 is the minimum compatible version for that profile).</p>
]]></description><pubDate>Tue, 07 Apr 2026 18:38:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47679531</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47679531</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47679531</guid></item><item><title><![CDATA[New comment by MrRadar in "Slop is not necessarily the future"]]></title><description><![CDATA[
<p><i>Users</i> care about quality, even if the people buying the software do not. You can't just say "well the market doesn't care about quality" when the market incentives are broken for a paricular type of software. When the market incentives are aligned between users and purchasers (such as when they are the same person) quality tends to become very important for the market viability of software (see Windows in the consumer OS market, which is perceptibly losing share to MacOS and Linux following a sustained decline in quality over the last several years).</p>
]]></description><pubDate>Tue, 31 Mar 2026 20:41:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593210</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47593210</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593210</guid></item><item><title><![CDATA[New comment by MrRadar in "Slop is not necessarily the future"]]></title><description><![CDATA[
<p>> This obviously doesn't represent all of the billions of dollars spent on software like Salesforce, SAP, Realpage, Booking.com, etc. etc. (all notoriously buggy, slow, and complex software). You can't tell me with a straight face that all of the thousands of developers who develop these products/services care deeply about the quality of the product. They get real nice paychecks, benefits and put dinner on the table for their families. That's the market.<p>Those first three are "enterprise" or B2B applications, where the person buying the software is almost never one of the people actually using the software. This disconnect means that the person making the buying decision cannot meaningfully judge the quality of any given piece of software they are evaluating beyond a surface level (where slick demos can paper over huge quality issues) since they do not know how it is actually used or what problems the actual users regularly encounter.</p>
]]></description><pubDate>Tue, 31 Mar 2026 20:34:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593108</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=47593108</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593108</guid></item><item><title><![CDATA[New comment by MrRadar in "Can “second life” EV batteries work as grid-scale energy storage?"]]></title><description><![CDATA[
<p>Every generation of the production Nissan Leaf has used lithium batteries. AFAIK no modern (~post-2000) mass-produced (>10k units sold) EV has ever used NiMH or lead-acid batteries.<p>Edit: Checking Wikipedia to verify my information, I found out that Nissan actually sold a lithium-battery EV in <i>1997</i> to comply with the same 90s CARB zero-emissions vehicle mandate that gave us the GM EV-1: <a href="https://en.wikipedia.org/wiki/Nissan_R%27nessa#Nissan_Altra" rel="nofollow">https://en.wikipedia.org/wiki/Nissan_R%27nessa#Nissan_Altra</a></p>
]]></description><pubDate>Thu, 23 Oct 2025 20:22:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=45686578</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=45686578</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45686578</guid></item><item><title><![CDATA[New comment by MrRadar in "I spent a year making an ASN.1 compiler in D"]]></title><description><![CDATA[
<p>> Are you saying that if I'm using D-without-GC, I can use any D library, including ones written with the assumption that there is a GC? If not, how does it not fracture the community?<p>"Are you saying that if I'm using Rust in the Linux kernel, I can use any Rust library, including ones written with the assumption they will be running in userspace? If not, how does that not fracture the community?"<p>"Are you saying that if I'm using C++ in an embedded environment without runtime type information and exceptions, I can use any C++ library, including ones written with the assumption they can use RTTI/exceptions? If not, how does that not fracture the community?"<p>You can make this argument about a lot of languages and particular subsets/restrictions on them that are needed in specific circumstances. If you <i>need</i> to write GC-free code in D you <i>can</i> do it. Yes, it restricts what parts of the library ecosystem you can use, but that's not different from any other langauge that has wide adoption in a wide variety of applications. It turns out that in reality most applications don't need to be GC-free (the massive preponderance of GC languages is indicative of this) and GC makes them much easier and safer to write.<p>I think most people in the D community are tired of people (especially outsiders) constantly rehashing discussions about GC. It was a much more salient topic before the core language supported no-GC mode, but now that it does it's up to individuals to decide what the cost/benefit analysis is for writing GC vs no-GC code (including the availability of third-party libraries in each mode).</p>
]]></description><pubDate>Thu, 23 Oct 2025 19:45:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=45686121</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=45686121</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45686121</guid></item><item><title><![CDATA[New comment by MrRadar in "Decoding Netflix's AV1 Streams"]]></title><description><![CDATA[
<p>Yeah, AV1 is primarily based on what Google was working on for their own successor to VP9, what would have been VP10, with technology contributions from Mozilla/Xiph's Daala and Cisco's Thor codecs.</p>
]]></description><pubDate>Wed, 01 Oct 2025 20:28:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=45443032</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=45443032</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45443032</guid></item><item><title><![CDATA[New comment by MrRadar in "Windows 7 x64 Extended Support Page"]]></title><description><![CDATA[
<p>Seriously. Also less and less software is supporting 7. Importantly, Firefox ESR 115 is the last modern browser to support Windows 7 and it's entering EOL after this month[1]; Chrome dropped Windows 7 support in 2023[2].<p>[1] <a href="https://support.mozilla.org/en-US/kb/firefox-users-windows-7-8-and-81-moving-extended-support" rel="nofollow">https://support.mozilla.org/en-US/kb/firefox-users-windows-7...</a>
[2] <a href="https://support.google.com/chrome/a/answer/7100626" rel="nofollow">https://support.google.com/chrome/a/answer/7100626</a></p>
]]></description><pubDate>Tue, 26 Aug 2025 18:11:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=45030189</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=45030189</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45030189</guid></item><item><title><![CDATA[New comment by MrRadar in "Linux Reaches 5% Desktop Market Share in USA"]]></title><description><![CDATA[
<p>There is a port of Mbed TLS to Classic MacOS[1] which has TLS 1.2 enabled but per the README.md probably not the right cihper suites (it only has AES-CBC ciphers enabled by default) to connect to servers configured per the widely-used Mozilla "intermediate" recommendations[2] (which require AES-GCM or ChaCha20 ciphers).<p>[1] <a href="https://github.com/bbenchoff/MacSSL">https://github.com/bbenchoff/MacSSL</a>
[2] <a href="https://wiki.mozilla.org/Security/Server_Side_TLS" rel="nofollow">https://wiki.mozilla.org/Security/Server_Side_TLS</a></p>
]]></description><pubDate>Wed, 16 Jul 2025 16:36:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=44584256</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=44584256</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44584256</guid></item><item><title><![CDATA[New comment by MrRadar in "Why Bell Labs Worked"]]></title><description><![CDATA[
<p>The Technology Connections video series on RCA's Selectavision CED home video system touches on this quite a lot (it was a horribly mismanaged project which took more than a decade to commercialize, by which time it had already been superceded by VHS/Betamax and Laserdisc)[1]. His main source for the information on the development of the CED system was the book "The Business of Research: RCA and the VideoDisc" by Margaret B. W. Graham.<p>[1] <a href="https://www.youtube.com/watch?v=PnpX8d8zRIA&list=PLv0jwu7G_DFVP0SGNlBiBtFVkV5LZ7SOU" rel="nofollow">https://www.youtube.com/watch?v=PnpX8d8zRIA&list=PLv0jwu7G_D...</a></p>
]]></description><pubDate>Mon, 12 May 2025 14:15:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=43963186</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43963186</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43963186</guid></item><item><title><![CDATA[New comment by MrRadar in "Sneakers (1992) – 4K makeover sourced from the original camera negative"]]></title><description><![CDATA[
<p>It doesn't even take destruction of the property to keep media locked up forever, sometimes even just IP rights. For example original Brave Little Toaster film has never seen an official release in HD because it was produced as a joint venture and nobody has (apparently) been willing or able to hammer out a deal between the various rights holders for a new home video or streaming release.<p>In 2023 a 4K scan of a theatrical print was uploaded to Youtube and despite the slightly rough state of the print it remains the best quality you can view the film today. There's even a pinned comment under the video from the original director thanking the person who uploaded it to Youtube for preserving their film!</p>
]]></description><pubDate>Tue, 06 May 2025 14:55:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=43905864</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43905864</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43905864</guid></item><item><title><![CDATA[New comment by MrRadar in "Sneakers (1992) – 4K makeover sourced from the original camera negative"]]></title><description><![CDATA[
<p>A while ago I found a few episodes of a 1950s crime drama/noir series called M Squad (the M is for "murder") on Youtube. I don't recall exactly how but probably because someone mentioned it was a direct inspiration for short-lived Police Squad series and later the Naked Gun films.<p>Anyways, I went to see if there was an official DVD release of it, and there was but several of the episodes were sourced from off-air TV recordings from reruns in the 1980s because those were the only copies the distributor could find! They were originally planning to release the set without them but asked fans if they could source copies which is how they ended up with those recordings. I didn't end up purchasing it because even the episodes where they had a better quality source weren't mastered particularly well to the point where several reviews said they were borderline unwatchable due to the image getting crushed into murky darkness thanks to the noir lighting and DVD MPEG-2 compression.</p>
]]></description><pubDate>Tue, 06 May 2025 14:39:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=43905668</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43905668</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43905668</guid></item><item><title><![CDATA[New comment by MrRadar in "C++26: more constexpr in the core language"]]></title><description><![CDATA[
<p>COBOL is being actively developed as a language, the latest standard was published in 2023.</p>
]]></description><pubDate>Wed, 23 Apr 2025 21:54:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43777043</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43777043</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43777043</guid></item><item><title><![CDATA[New comment by MrRadar in "C++26: more constexpr in the core language"]]></title><description><![CDATA[
<p>The D language basically does that. You can write D programs that evaluate D code at compile time to generate strings of new D code which you can then basically compile-time eval into your code as needed. Combined with the extremely powerful compile-time reflection capabilities of D it's the closest thing I've seen to Lisp metaprogramming outside of that family of languages and it's easier to read than Rust macros or C++ template metaprogramming.</p>
]]></description><pubDate>Wed, 23 Apr 2025 21:51:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=43777008</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43777008</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43777008</guid></item><item><title><![CDATA[New comment by MrRadar in "How a 20 year old bug in GTA San Andreas surfaced in Windows 11 24H2"]]></title><description><![CDATA[
<p>That's C++11 syntax. Before then you'd have to manually initialize them in every constructor, with a hand-written default constructor as a minimum:<p><pre><code>    struct test {
        int my_int;
        int *my_ptr;
        
        test() : my_int(0), my_ptr(NULL) {}
    };</code></pre></p>
]]></description><pubDate>Wed, 23 Apr 2025 19:42:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=43775923</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=43775923</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43775923</guid></item><item><title><![CDATA[New comment by MrRadar in "Building Ultra Long Range Toslink"]]></title><description><![CDATA[
<p>Thanks for the explanation!</p>
]]></description><pubDate>Tue, 07 Jan 2025 17:23:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=42624893</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=42624893</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42624893</guid></item><item><title><![CDATA[New comment by MrRadar in "Building Ultra Long Range Toslink"]]></title><description><![CDATA[
<p>The article mentions S/PDIF (which TOSLINK is an optical version of) uses Manchester code[1] which eliminates the DC component by ensuring every bit has at least one transistion of the signal between high and low.<p>[1] <a href="https://en.wikipedia.org/wiki/Manchester_code" rel="nofollow">https://en.wikipedia.org/wiki/Manchester_code</a></p>
]]></description><pubDate>Tue, 07 Jan 2025 16:29:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=42624212</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=42624212</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42624212</guid></item><item><title><![CDATA[New comment by MrRadar in "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems"]]></title><description><![CDATA[
<p>It's fixed in Debian 12[1]. Debian 11 and earlier's SSH version was not vulnerable.<p>[1] <a href="https://security-tracker.debian.org/tracker/source-package/openssh" rel="nofollow">https://security-tracker.debian.org/tracker/source-package/o...</a></p>
]]></description><pubDate>Mon, 01 Jul 2024 23:35:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=40851979</link><dc:creator>MrRadar</dc:creator><comments>https://news.ycombinator.com/item?id=40851979</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40851979</guid></item></channel></rss>