Hacker News: Ryan5453

New comment by Ryan5453 in "Keys Not Included: recovering the signing keys for US driver's license barcodes"

Ryan5453 — Thu, 17 Sep 2026 07:52:39 +0000

Thank you! Just updated it to use the the browser default monospace for inline text.

New comment by Ryan5453 in "Keys Not Included: recovering the signing keys for US driver's license barcodes"

Ryan5453 — Thu, 17 Sep 2026 07:50:11 +0000

You can only store ~1100 bytes in a PDF417 barcode so storing the image itself it unfeasible. And storing a signature of an image you don't have access to is useless. Passports are able to do this because the smartcard chips they use can store at least 32 KB of data (usually more).

New comment by Ryan5453 in "Keys Not Included: recovering the signing keys for US driver's license barcodes"

Ryan5453 — Thu, 17 Sep 2026 07:49:49 +0000

> Seems doubtful! I expect the forgers used a real signature from another card instead, so it has the right key but the wrong data. Reverse engineering the process as the author did and making up their own key wouldn't be of any value to the forgers.

This was just bad wording. I meant to say "someone else's key" in the context that it was a key generated by the forgers rather than the state DMV, will update to make it more clear!

> This is not wrong, but should come with a little warning. A real verifier needs to additionally check the encoded data matches the human-readable data on the front of the card.

Correct, but simply checking that it matches the front is likely not enough to deter fraud. You could extract the barcode data from a real ID and put it on a physically different (fake) ID with a different photo and it would still return as valid. To detect this you generally would need a higher end solution (IDScan.net/VeriScan's ID authentication solution (yes... the one that just leaked everyone's data), TokenWorks' IdentiFake, IDScience, amongst others) that does the same high resolution UV/IR checks TSA does. But the forgers are good enough now to be able to sometimes pass those scanners too.

Keys Not Included: recovering the signing keys for US driver's license barcodes

Ryan5453 — Thu, 17 Sep 2026 03:03:23 +0000

Article URL: https://ryan.science/blog/keys-not-included

Comments URL: https://news.ycombinator.com/item?id=49735930

Points: 191

# Comments: 70

CrofAI Is an OpenRouter Wrapper

Ryan5453 — Mon, 14 Sep 2026 17:45:34 +0000

Article URL: https://kendell.dev/blog/crofaifalse/

Comments URL: https://news.ycombinator.com/item?id=49700924

Points: 8

# Comments: 0

New comment by Ryan5453 in "Project Glasswing: Securing critical software for the AI era"

Ryan5453 — Tue, 07 Apr 2026 18:19:54 +0000

Pricing for Mythos Preview is $25/$125, so cheaper than GPT 4.5 ($75/$150) and GPT 5.4 Pro ($30/$180)

Project Glasswing: Securing critical software for the AI era

Ryan5453 — Tue, 07 Apr 2026 18:09:34 +0000

Related: Assessing Claude Mythos Preview's cybersecurity capabilities - https://news.ycombinator.com/item?id=47679155

System Card: Claude Mythos Preview [pdf] - https://news.ycombinator.com/item?id=47679258

Also: Anthropic's Project Glasswing sounds necessary to me - https://news.ycombinator.com/item?id=47681241

Comments URL: https://news.ycombinator.com/item?id=47679121

Points: 1541

# Comments: 836

New comment by Ryan5453 in "Google restricting Google AI Pro/Ultra subscribers for using OpenClaw"

Ryan5453 — Mon, 23 Feb 2026 01:43:08 +0000

Antigravity gives access to Sonnet and Opus 4.6, I would presume most people are using those models rather than Gemini

New comment by Ryan5453 in "Developing Developers (2015)"

Ryan5453 — Thu, 19 Dec 2024 18:03:25 +0000

There is a decently large amount of TAs for the freshman first semester course (aka Fundies 1) — this semester has 77 TAs