Yawning Angel
banner
yawning.bsky.social
Yawning Angel
@yawning.bsky.social
Screaming into the void.
Why is it that MacOS detects my keyboard as a JIS layout one, but refuses to apply the layout so all the punctuation is in the wrong places, and the only solution is to install a `.keylayout` file? Even Windows lets me select my keyboard layout manually.

msyk.net/macos/winkey...
November 12, 2024 at 3:42 PM
How do you fuck up AF_UNIX to the point where you can kernel panic from userland, when you steal your OS code from 30+ years of prior work (Not a Rust Bug, but an Apple bug).

github.com/rust-lang/ru...
October 8, 2024 at 1:35 PM
In a further sign of Japan's descent into the grim dark cyberpunk future, the Tokyo Govt is now running an AI powered matchmaking service/dating app.

Signing up requires photo ID, proof of income, govt. issued proof of being single, and money.

www.futari-story.metro.tokyo.lg.jp/ai-matching/
AIマッチングシステム|TOKYOふたりSTORY|TOKYO縁結び
東京都が提供するAIマッチングシステムです。婚活を始める「最初の一歩」としてご利用ください。
www.futari-story.metro.tokyo.lg.jp
September 20, 2024 at 6:24 AM
And people say that panaceas are a myth.
August 19, 2024 at 10:58 AM
Real life has been "interesting" for the last month in a not amazing way, apologies in advance if responses from me are going to be somewhat slower than usual.
August 19, 2024 at 10:54 AM
If the TV loicense people are hurting so much for money as the news says, how can they afford to send me junk mail asking me to get a TV loicense.

I do not own a TV or any device capable of receiving broadcast TV. NHK can Fuck Off.
August 19, 2024 at 10:51 AM
Reposted by Yawning Angel
Switching Off your Device Does Not Protect Against Fault Attacks (Paul Grandamme, Pierre-Antoine Tissot, Lilian Bossuet, Jean-Max Dutertre, Brice Colombier, Vincent Grosso) ia.cr/2024/1123
July 10, 2024 at 8:37 AM
It's kind of impressive that the only package I need to implement Dual_EC_DRBG in Go "securely" is @filippo.abyssdomain.expert 's bigmod package, since the `crypto/ecdh` package exposes just enough for the rest.

nb: I do use `crypto/elliptic` for the scalar-field order, but that can be removed.
July 10, 2024 at 3:56 PM
I just spent my afternoon trying to figure out how to use HTTP over AF_UNIX in Rust, and ran into a giant tire fire.

My brain lacks wrinkles for Rust and it's ecosystem.

ps: Thanks to comments in a still-open bug in reqwest from 2017, I think I figured it out at least.
July 10, 2024 at 9:11 AM
Time to find out how much MS uses Github repos for training Copilot, and how many people blindly copy-paste code for things that they shouldn't.
July 8, 2024 at 10:27 AM
Neat.
A More Compact AES, and More (Dag Arne Osvik, David Canright) ia.cr/2024/1076
July 3, 2024 at 3:35 AM
Sending me a profanity laced tirade about how your software broke because a downstream dependency of something I maintain moved it's repo, is not an effective way to motivate me to help you.
July 3, 2024 at 3:26 AM
www.bbc.com/news/article...

10k -> 13k SHU is enough to prompt a Govt. initiated recall? WTF.
Samyang: Denmark recalls Korean ramen for being too spicy
The food authorities said the instant ramen contained such high capsaicin levels consumers could be poisoned.
www.bbc.com
June 18, 2024 at 4:13 PM
Reposted by Yawning Angel
Well damn, the era of compiler-introduced timing side-channels is here.

In the Kyber reference implementation, Clang notices a bitmask is just selecting between zero and a constant and turns it into an if.

Very happy the Go compiler is not that smart right now.

groups.google.com/a/list.nist....
Compiler-introduced timing leak in Kyber reference implementation
groups.google.com
June 3, 2024 at 12:20 PM
An old friend noted that there is a distinct feeling of "I just lost a SAN point". Not only is that true, but lately I'm experiencing that a lot more than I should.
May 27, 2024 at 1:54 PM
As an addendum, as far as personal (non-employer) projects go, Rust has been the safest language I have used because I rage-quit and delete everything due to friction before my code gets far enough to have bugs.
May 22, 2024 at 2:03 PM
Reposted by Yawning Angel
I feel like writing Go full-time for a decade has made me less capable of using difficult languages, but I like it this way - I can focus on what I'm trying to achieve instead.
May 22, 2024 at 8:08 AM
After using Go for things that require concurrency and networking, dealing with async, tokio and hyper makes me seriously question my life decisions, and want to consume various mind altering substances in large quantities.
May 22, 2024 at 6:32 AM
If I ever design a programming language, my benchmark for success will be "pervasive enough that my terrible design decisions lead to dedicated silicon workarounds for performance reasons".

developer.arm.com/documentatio...
Documentation – Arm Developer
developer.arm.com
May 2, 2024 at 6:37 AM
I like how trying to use dtruss has a reasonable chance of making my system unusable till I power-cycle the thing.
May 2, 2024 at 3:28 AM
> My investigator's motto is not "99% Mythos Lore, 1% Sanity- don't push me"

Has become an increasingly accurate description of my professional career over the years.
May 1, 2024 at 11:59 AM
Comparing performance of RSA-2048 and secp256kr1 when:
- Both are implemented in Mathematica
- secp256k1: affine coordinate add/double
- secp256k1: add then double scalar multiply

Only shows that ECC is really fast, despite the best efforts to the contrary.
The Practical Advantage of RSA over ECC and Pairings (Zhengjun Cao, Lihua Liu) ia.cr/2024/608
April 22, 2024 at 2:20 AM
One of these years, I seriously should just give up on hosting my own e-mail. I just don't want to deal with the headache of migrating my mailserver state. :/
April 22, 2024 at 1:44 AM