Hacker News: some_furry

Cryptography Conspiracy Theory Is Wrong

some_furry — Mon, 02 Nov 2026 15:38:49 +0000

Article URL: https://soatok.blog/2026/10/29/your-cryptography-conspiracy-theory-is-wrong/

Comments URL: https://news.ycombinator.com/item?id=50338315

Points: 4

# Comments: 0

New comment by some_furry in "Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents"

some_furry — Thu, 29 Oct 2026 14:44:13 +0000

Because it's not guaranteed, and anyone who shrugs and thinks, "Oh who cares? This will sort itself out. Why bother myself over it?" contributes to them not being held accountable for their crimes.

New comment by some_furry in "Code-execution flaw in UEFI firmware threatens most servers on planet Earth"

some_furry — Wed, 28 Oct 2026 12:44:59 +0000

Yeah, well, the Unix philosophy is from the engineering department, not the accounting department.

Funding FOSS projects without advertising, dopamine-hacking, donation-begging into the void, or being subsidized by billionaires that want to influence the electorate is still largely unsolved.

New comment by some_furry in "Why I Wrote PGP (1991, revised 1999)"

some_furry — Thu, 15 Oct 2026 19:52:59 +0000

https://gpg.fail/

https://www.latacora.com/blog/2019/07/16/the-pgp-problem

Recommendations: https://soatok.blog/2024/11/15/what-to-use-instead-of-pgp/

We don't need to keep elaborating or re-litigating the same discussion. The PGP idea of "one tool to rule them all" is a terrible cryptography design, and the world is better off the sooner we stop trying to make it work.

New comment by some_furry in "How Singapore's government-run dating service works"

some_furry — Sun, 04 Oct 2026 02:08:37 +0000

Leaving a comment like this on a Saturday night...

You must be really lonely lol :D

New comment by some_furry in "How Singapore's government-run dating service works"

some_furry — Fri, 02 Oct 2026 14:31:20 +0000

The divorce rate has entered the chat.

New comment by some_furry in "How Singapore's government-run dating service works"

some_furry — Fri, 02 Oct 2026 04:58:27 +0000

It's also a market for lemons: Every match that leads to a long-term, exclusive relationship is two customers gone for good.

New comment by some_furry in "America.gov"

some_furry — Thu, 01 Oct 2026 16:47:45 +0000

No gods, no kings, no masters.

New comment by some_furry in "The AI Race Just Got Awkward"

some_furry — Wed, 30 Sep 2026 16:17:07 +0000

It's gamer terminology.

In a PvP (player vs player) game, if you kill a player the moment they spawn into the game arena, that's called "spawn-camping".

New comment by some_furry in "America.gov"

some_furry — Wed, 30 Sep 2026 04:25:22 +0000

You're entitled to your opinion, but neither what you said nor Trump's pardon can change history. What's done is done.

January 6 was an insurrection incited by the sitting President against his own country. Any attempt to water this down is dishonest.

New comment by some_furry in "America.gov"

some_furry — Tue, 29 Sep 2026 23:00:49 +0000

Before they were pardoned, the rioters were indicted by grand juries and convicted by juries of their peers. It was an insurrection, not just a "large crowd".

New comment by some_furry in "America.gov"

some_furry — Tue, 29 Sep 2026 21:30:45 +0000

I asked, "What happened on January 6, 2021?" and its answer is, I think, telling: https://imgur.com/a/e1H8NvK

New comment by some_furry in "Everybody’s home. No one’s coming over"

some_furry — Tue, 29 Sep 2026 11:47:09 +0000

When I was growing up, a good deal of these sorts of parties involved backyards, barbecues, and swimming pools. Rarely did we spend time indoors.

New comment by some_furry in "The new CC, an AI agent built for families"

some_furry — Wed, 23 Sep 2026 01:37:03 +0000

At least we know KilledByGoogle will never be starved for content.

New comment by some_furry in "The new CC, an AI agent built for families"

some_furry — Wed, 23 Sep 2026 01:35:39 +0000

What is Google's CC supposed to even stand for?

Carbon Copy? As in, a rip-off?

Whatever hellhole committee named this did a poor job.

New comment by some_furry in "What California is learning from solar panels built over irrigation canals"

some_furry — Wed, 23 Sep 2026 00:38:21 +0000

Sex addiction isn't a real thing.

https://www.thelancet.com/journals/lanpsy/article/PIIS2215-0...

https://link.springer.com/article/10.1007/s11930-014-0016-8

https://www.sciencedirect.com/science/article/abs/pii/S02727...

New comment by some_furry in "The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library"

some_furry — Mon, 14 Sep 2026 18:39:13 +0000

I mean this with absolutely no shade but: That was objectively good advice.

(Not to detract from anyone's cleverness or hard work.)

New comment by some_furry in "The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library"

some_furry — Mon, 14 Sep 2026 18:37:50 +0000

Ah, right. That was clearly tongue-in-cheek and easily forgettable, not an actual accusation on either party.

I've added an important clarification in case anyone else missed the rest of the prose that discussed how this was entirely my own fault to zero in on a sarcastic turn of phrase: https://soatok.blog/2026/09/12/the-v8-javascript-runtime-und...

New comment by some_furry in "The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library"

some_furry — Mon, 14 Sep 2026 18:33:58 +0000

You walked back putting an accusation of evil in my mouth while following up with warning me not to make an accusation I would not make to begin with. Incredible.

New comment by some_furry in "The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library"

some_furry — Mon, 14 Sep 2026 18:31:05 +0000

You can write algorithms that leak every bit of your secrets, trivially. The npm "elliptic" package does this. Daniel Bleichenbacher has tested several packages' timing leakage in Rooterberg that are easily exploited: https://github.com/bleichenbacher-daniel/Rooterberg/blob/mai...

You can use algorithm implementations that do not have secret-dependent timing differences in any language, as long as you are clear that your guarantees do not extend to the underlying runtime or to compiler optimizations. This isn't perfect, but it's better.

You can go further Rust-to-WASM and use tools like https://github.com/trailofbits/skills/tree/main/plugins/cons... to check the assembly and the runtime that the assembly runs in. (Most of the linked Claude skill is a Python program. It just relies on AI to eliminate false positives.)

The real question is: What's your threat model?