<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cassonmars</title><link>https://news.ycombinator.com/user?id=cassonmars</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 09 Nov 2026 17:25:31 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cassonmars" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by cassonmars in "Show HN: Steal My Bitcoin"]]></title><description><![CDATA[
<p>I suspect this is going to be more a point about the fact that most PHP server configurations do not have the ability to be exploited by the recent vulnerability that made people think the AI vulnpocalypse was here</p>
]]></description><pubDate>Sat, 24 Oct 2026 21:30:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=50225540</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=50225540</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50225540</guid></item><item><title><![CDATA[New comment by cassonmars in "Getting ready to operate GNU Taler in Germany"]]></title><description><![CDATA[
<p>> We are looking for investors who:<p>> - want a privacy-preserving, free-software payment system to become legally available in Germany and the Euro area;<p>> - understand that this is a regulated infrastructure business with a licensing phase before revenue; and<p>> - are able to invest at least €50,000.<p>It's a shame that people can't say things like this for their own startups in the U.S. without violating securities laws. It would be so much easier.</p>
]]></description><pubDate>Fri, 23 Oct 2026 12:58:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=50208297</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=50208297</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50208297</guid></item><item><title><![CDATA[New comment by cassonmars in "Is this the new cyber normal?"]]></title><description><![CDATA[
<p>that can sometimes be a plus considering how dependencies used by a lot of projects are themselves targets</p>
]]></description><pubDate>Fri, 23 Oct 2026 12:46:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=50208137</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=50208137</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50208137</guid></item><item><title><![CDATA[New comment by cassonmars in "DeepSeek banned from U.S. federal civilian agencies under new DHS order"]]></title><description><![CDATA[
<p>> Once the open weight models are banned in the US<p>Bold assumption. Cryptography as a field had similar attempts at squashing access. Didn't end well for the censors.</p>
]]></description><pubDate>Tue, 20 Oct 2026 10:48:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=50164224</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=50164224</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50164224</guid></item><item><title><![CDATA[New comment by cassonmars in "REA Reverse – Engineer Anything"]]></title><description><![CDATA[
<p>> It really depends on your perspective of what the point of the hobby is. Were decomps/recomps a hobby because people wanted to make sure their old games could run on modern hardware and be extended with mods etc., or were they a hobby because people enjoyed the actual process of using Ghidra and reverse engineering by hand, and the decompiled game was just a side effect?<p>I think your question would make sense if these were the only two reasons. Someone who just wants to make sure their old games can run would see these tools as a good thing. People who just enjoy reverse engineering by hand wouldn't care this exists, or maybe even, a helpful tutor.<p>So perhaps then, the sentiment being as negative as it is, is revealing something about the hobby: that many participants, considered the metagame of being the first to do it, to be "smart enough" to have figured it out, the "street cred" if you were, is what they are lamenting, but they just either lack the words, or aren't being honest with themselves.</p>
]]></description><pubDate>Sat, 10 Oct 2026 06:42:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=50030327</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=50030327</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50030327</guid></item><item><title><![CDATA[New comment by cassonmars in "Tell HN: GitHub refuses to remove cracked copies of my software after a month"]]></title><description><![CDATA[
<p>The question is not how then is one supposed to trust the law, because you already know the answer. The question is what one does about it.</p>
]]></description><pubDate>Wed, 07 Oct 2026 15:11:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49993933</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49993933</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49993933</guid></item><item><title><![CDATA[New comment by cassonmars in "Snap Wants to be a State Actor??–Kansas v. Snap"]]></title><description><![CDATA[
<p>Probably not, the current (and hopefully not continuing) state admin (outside of the governor who has been a nice check against the legislature and judicial insanity here) is very ideologically aligned to the point of trying to find ways to imprison trans people.</p>
]]></description><pubDate>Sun, 27 Sep 2026 06:07:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=49863806</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49863806</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49863806</guid></item><item><title><![CDATA[New comment by cassonmars in "Resident Evil 4 (GameCube) – complete byte-identical decompilation to C/C++"]]></title><description><![CDATA[
<p>They really did. And through great irony, such objections are preserved.<p><a href="https://www.historyofinformation.com/detail.php?id=3439" rel="nofollow">https://www.historyofinformation.com/detail.php?id=3439</a><p>"For this invention will produce forgetfulness in the minds of those who learn to use it, because they will not practice their memory. Their trust in writing, produced by external characters which are no part of themselves, will discourage the use of their own memory within them. You have invented an elixir not of memory, but of reminding; and you offer your pupils the appearance of wisdom, not true wisdom, for they will read many things without instruction and will therefore seem [275b] to know many things, when they are for the most part ignorant and hard to get along with, since they are not wise, but only appear wise."</p>
]]></description><pubDate>Mon, 21 Sep 2026 06:43:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=49783808</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49783808</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49783808</guid></item><item><title><![CDATA[New comment by cassonmars in "I co-founded Burning Man. The festival has lost its soul"]]></title><description><![CDATA[
<p>They can be, but unfortunately the org has threatened to revoke official regional burn status unless they followed all the same rules, in particular, that children be allowed. There used to be some leeway on that, and there were really wonderful regional burns that did not permit kids. They were forced to, which resulted in the "real" burn being in a small taped off area.<p>Seems insane to me to think kids should be at burns.</p>
]]></description><pubDate>Sun, 30 Aug 2026 00:00:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=49494389</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49494389</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49494389</guid></item><item><title><![CDATA[New comment by cassonmars in "NSA and IETF, Part 9"]]></title><description><![CDATA[
<p>Let's opt for the simplest possible way to describe this.<p>A good number of the proposals (in particular, the proposals that actually got close to being chosen), are based on lattice constructions.<p>NTRU's underlying construction has been available to scrutinize for 30 years, whereas the Module-LWE proposals (Kyber being one) has had 11 years. Keep in mind, the largest employer (and under very tight classified controls) of number theorists _is_ the NSA. In terms of overall intellectual power, if there _is_ a problem in the MLWE constructions, they'd very likely be the first to find it, all while not saying a single word. Then, despite clear objections laid out by people with explicit expertise on the distinctions between RLWE and MLWE, especially w/r/t parameter choice, Kyber, under weaker parameters, was chosen anyway.<p>We can't rely on the obvious tells anymore – they've already played that hand (EC-DRBG) and were caught. If a bad standard is being pushed, it has to be done in a way that is so subtle, that it literally comes up to, "yeah, maybe this is weaker, but we haven't found a way to prove that". DJB already lost the selection process, so now the goal is to at the very least, avoid recommendations that push an unshielded, far less historically tested option, with no helpful antidote if it were to be broken.<p>I get that generally assuming conspiracies is a bad starting place for debate (after all, how do you disprove a hypothesis that is expected to be so surreptitiously constructed that it evades all ability to be scrutinized?), and I'd similarly think this is an unreasonable assumption, except for the fact _it has already happened and been exposed, multiple times_.</p>
]]></description><pubDate>Sun, 16 Aug 2026 11:58:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49319204</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49319204</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49319204</guid></item><item><title><![CDATA[New comment by cassonmars in "NSA and IETF, Part 9"]]></title><description><![CDATA[
<p>Are you a cryptographer?<p>I am. I literally hold six patents around secure key generation and management. I stand by DJB's points.</p>
]]></description><pubDate>Sat, 15 Aug 2026 03:53:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=49307480</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49307480</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49307480</guid></item><item><title><![CDATA[New comment by cassonmars in "NSA and IETF, Part 9"]]></title><description><![CDATA[
<p>because the NSA has never surreptitiously pushed bad standards they used to exploit before<p>/s</p>
]]></description><pubDate>Sat, 15 Aug 2026 03:34:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=49307358</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=49307358</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49307358</guid></item><item><title><![CDATA[New comment by cassonmars in "If You Build It, They Will Come"]]></title><description><![CDATA[
<p>> IMO the penalties for corruption in public service jobs (all the way to the top!) should also be outsized to match the damage it does to society.<p>Tough to do when those who write the laws are a part of the problem. What do you suggest to make this so?</p>
]]></description><pubDate>Sun, 19 Jul 2026 02:15:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48964418</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48964418</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48964418</guid></item><item><title><![CDATA[New comment by cassonmars in "Web-based cryptography is always snake oil"]]></title><description><![CDATA[
<p>Your argument would be far more charitable if NIST had not already been caught pushing a broken standard at the behest of the NSA before. DJB might be combative and somewhat caustic, but the one thing he's never been, given enough time in the retrospect to show it, is wrong.</p>
]]></description><pubDate>Mon, 06 Jul 2026 06:46:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48801391</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48801391</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48801391</guid></item><item><title><![CDATA[New comment by cassonmars in "An American Privacy Emergency"]]></title><description><![CDATA[
<p>The problem with attempting to provide universal healthcare in the united states is that, despite health professionals attesting to the necessity and validity of certain health related topics, the current administration in particular is very keen about stripping away access to these forms of care, as far as they legally can (medicare/medicaid, VA, federal funding).<p>UHC requires the removal of politicians from qualified input, and this country's politicians love nothing more than to get overly involved in things they know nothing about.</p>
]]></description><pubDate>Fri, 03 Jul 2026 02:15:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48769936</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48769936</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48769936</guid></item><item><title><![CDATA[New comment by cassonmars in "Amazon drops Sam Altman movie after announcing OpenAI partnership"]]></title><description><![CDATA[
<p>This feels like a strange take to me. With the internet, it has never been easier for people anywhere in the (connected) world to find an audience, which we've seen to great and detrimental effects. Prior to this, reaching widespread audiences _required_ powerful entities (publishers, marketers, broadcasters).<p>Why do you feel differently?</p>
]]></description><pubDate>Fri, 19 Jun 2026 21:05:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48603231</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48603231</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48603231</guid></item><item><title><![CDATA[New comment by cassonmars in "What Caused That Loud Boom in South Carolina?"]]></title><description><![CDATA[
<p>Save a click: no public information exists yet.</p>
]]></description><pubDate>Mon, 01 Jun 2026 23:50:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48364085</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48364085</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48364085</guid></item><item><title><![CDATA[New comment by cassonmars in "Show HN: Freenet, a peer-to-peer platform for decentralized apps"]]></title><description><![CDATA[
<p>For a basic CRDT set, merge rules have to have some kind of temporality basis in the messages such that commutativity is preserved. usually it's a timestamp, sometimes it's an unforgeable value like a hash, e.g.
A: { "prev_hash": null, "content": "foobar" }
B: { "prev_hash": "<hash of A>", "content": "foobarbaz" }
C: { "prev_hash": "<hash of B>", "content": "foobaz" }<p>and when played out of order, it's guaranteed to resolve to foobaz eventually or immediately, depending on when messages are received<p>when you encounter the scenario of a fork, there's usually a fork resolution rule, e.g.
D: { "prev_hash": "<hash of B>", "content": "foobazbar" }<p>to resolve C vs D, sort lexicographically, choose direction of sort order and pick first<p>When you have non-continuous data due to messages dropping, e.g. you have B and perhaps an E that builds on C, you can either use the same lexicographic rule, or make the hash basis a combination of timestamp and hash, so you get temporality and lineage.<p>As for deletes, you have either the single set approach of simply making the message content empty and that _is_ the delete, or you have the 2-phase sets, where there exists an add set and a delete set.<p>Quite a few ways to approach it, but commutativity can be readily preserved.</p>
]]></description><pubDate>Thu, 21 May 2026 20:13:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48228308</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48228308</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48228308</guid></item><item><title><![CDATA[New comment by cassonmars in "I built my own hair electrolysis machine"]]></title><description><![CDATA[
<p>based</p>
]]></description><pubDate>Sun, 03 May 2026 23:34:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48002759</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=48002759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48002759</guid></item><item><title><![CDATA[New comment by cassonmars in "A cryptography engineer's perspective on quantum computing timelines"]]></title><description><![CDATA[
<p>As you are someone building cryptographic libraries used by people all over the world, which includes those who might be seen as "enemies" by the organization in question, this is not a gradient — it's quite binary in nature.</p>
]]></description><pubDate>Tue, 07 Apr 2026 01:32:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47669685</link><dc:creator>cassonmars</dc:creator><comments>https://news.ycombinator.com/item?id=47669685</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47669685</guid></item></channel></rss>