HackerTrans
TopNewTrendsCommentsPastAskShowJobs

imcotton

no profile record

Submissions

Ongoing: Cloudflare customers seeing incorrect invoice payments for 2.5 days

cloudflarestatus.com
2 points·by imcotton·25 วันที่ผ่านมา·0 comments

My –/.ssh folder has NO private keys

blog.imcotton.xyz
2 points·by imcotton·2 เดือนที่ผ่านมา·2 comments

The Nginx default page hides 5 clues that lead to same 24-word BIP39 mnemonic

bip39-recast.pages.dev
4 points·by imcotton·4 เดือนที่ผ่านมา·0 comments

Cloudflare is using timingSafeEqual incorrectly in its own example docs

github.com
3 points·by imcotton·7 เดือนที่ผ่านมา·0 comments

Blending crypto wallet seed into an AI slop essay

blog.imcotton.xyz
1 points·by imcotton·8 เดือนที่ผ่านมา·0 comments

Show HN: Use color strips to wrap your crypto wallet

bip39-recast.js.org
1 points·by imcotton·9 เดือนที่ผ่านมา·0 comments

Show HN: Constant Entropy Mixtape Vol.01

jsr.io
1 points·by imcotton·11 เดือนที่ผ่านมา·0 comments

Show HN: Client side rendered static site without JavaScript

cornerlation.xyz
4 points·by imcotton·ปีที่แล้ว·0 comments

Show HN: Generate Subresource Integrity (SRI)

sri-shasum.js.org
2 points·by imcotton·ปีที่แล้ว·0 comments

Ask HN: Why Cloudflare kept sending email on Invoice Amount: $0.00?

1 points·by imcotton·ปีที่แล้ว·1 comments

Show HN: Cutting 100k Pi digits offline (PWA)

accdoo.app
1 points·by imcotton·ปีที่แล้ว·0 comments

You can not lose your key, if you drop it first

blog.imcotton.xyz
2 points·by imcotton·ปีที่แล้ว·0 comments

Accessible settings to disable all hovercards on GitHub

github.blog
2 points·by imcotton·ปีที่แล้ว·0 comments

Port a URL Shortener Web App from Deno Deploy to Cloudflare

blog.imcotton.xyz
2 points·by imcotton·2 ปีที่แล้ว·0 comments

Show HN: Personal URL Shortener Web App (Via Hono and Deno KV)

2 points·by imcotton·2 ปีที่แล้ว·0 comments

Spots Around Hyrule (TotK)

totk-loci.mataroa.blog
1 points·by imcotton·2 ปีที่แล้ว·0 comments

You can not lose your private key, if you drop it first

blog.imcotton.xyz
2 points·by imcotton·2 ปีที่แล้ว·4 comments

My –/.ssh folder has NO private keys

blog.imcotton.xyz
2 points·by imcotton·2 ปีที่แล้ว·0 comments

comments

imcotton
·2 เดือนที่ผ่านมา·discuss
How many AI agent running on your system right now?
imcotton
·6 เดือนที่ผ่านมา·discuss
The first thing I need to do after creating a repo on GitHub, disable Project in repo settings.
imcotton
·12 เดือนที่ผ่านมา·discuss
xkcd/538 never gets old.
imcotton
·12 เดือนที่ผ่านมา·discuss
I did this in console:

    $('#container').style = 'display: unset'
imcotton
·12 เดือนที่ผ่านมา·discuss
Does anyone have the courage to perform a similar inspection on the Cloudflare homepage like the author did? On my M4 Mac mini, Safari lagged with single-digit frames per second (FPS), which scared me so much that I had to close the page as quickly as possible.
imcotton
·ปีที่แล้ว·discuss
Thanks, I have being putting medium domain into dns blocklist for years.
imcotton
·ปีที่แล้ว·discuss
now try this:

    cat Makefile.md | npx offmark
imcotton
·ปีที่แล้ว·discuss
It's good to have a client side that does not send data to remote, improvements:

- CSP and security headers, currently this site scores D on https://securityheaders.com

- no SRI check on CSS or JavaScript files.

- by loading adsbygoogle.js which invalidates any privacy protection claims.
imcotton
·ปีที่แล้ว·discuss
I have previously written a blog post on this very topic, tl;dr: deleting your keys.

https://blog.imcotton.xyz/my-ssh-folder-has-no-private-keys
imcotton
·ปีที่แล้ว·discuss
I also think OAuth could be used to better serve AX in the age of agent, but before the whole industry find the PMF, shall we not leave the humans (us) behind? Thus I made one for breaking the grip of big IdPs and offer a more secure and easier authentication solutions for humans [1].

You can find its dogfooding demo on the Show HN [2].

[1]: https://sign-poc.js.org

[2]: https://news.ycombinator.com/item?id=42076063
imcotton
·2 ปีที่แล้ว·discuss
In case one not digging into the source code, the key stretching here is PBKDF2-HMAC-SHA512 with 400,000 iterations (OWASP recommended 210,000).

The reason for not using Argon2 or scrypt is because PBKDF2 is native provide by Webcrypto yet FIPS-140 compliance.
imcotton
·2 ปีที่แล้ว·discuss
Now, brute-force my private key and post new blog entry with your wallet address, I will send you rewards.
imcotton
·5 ปีที่แล้ว·discuss
The very ticket [1] is locked by this epic ending:

> You were overly confident in your opinion, but I hope this website helps you understand that it's actually really damn hard.

> The reason your program shows a high FPS under other terminal emulators is simply, because their rendering pipeline works independent of VT ingestion. Gnome Terminal is not laying out text faster than your display refresh rate either. And of course, again, this is something WT will probably do as well in the future... but this project is nowhere near as old as Gnome Terminal is.

[1] https://github.com/microsoft/terminal/issues/10362#issuecomm...