Dad ๐Ÿ‘ถ๐Ÿ‘ฑโ€โ™‚๏ธ, engineer๐Ÿ‘จโ€๐Ÿ’ปโš’, fixed wheel cyclist ๐Ÿšฒ, Australian ๐ŸŒž๐Ÿป immigrant in Germany ๐ŸŒฆ๐Ÿบ. My partner @HannahNeumeyer ๐Ÿ˜˜ does good work for society ๐Ÿ‘.

Joined July 2007
292 Photos and videos
I wrote a couple of posts about a private PKI (tarnbarford.net/journal/simpโ€ฆ) and securing TCP sockets with TLS and peer authentication (tarnbarford.net/journal/secuโ€ฆ).

1
167
This is so wild, the bx tool generates 24 word mnemonic pass phrases intended to be used for bitcoin wallets but it generates at most 2^32 unique phrases. milksad.info/

1
1
159
I was expecting it to be some impressive hack exploiting the Mersenne Twister PRNG by somehow finding enough values in the sequence reduce the keyspace a bit.
1
1
93
Apparently it's possible to brute force with the public record of a transaction made with the wallet and a couple of days processing on a standard gaming PC.
70
htmx is the hero we don't deserve ๐Ÿ˜ญ
OK, sit down whistleblowers are confirming that these so-called "dropdowns" DO๐Ÿ‘NOT๐Ÿ‘EXIST! what we have been lead to believe are "dropdowns" are, in fact, divs, buttons & anchors TARTED UP w/ css/xss (unclear) a massive coverup by FE gang! they played us like a damn fiddle!
2
293
Noooo, the six-lobe or the hexagon are the good ones. Philips and slotted are designed to limit the torque you can apply ๐Ÿ˜ญ
1
172
Incredible
1
140
I have no idea who this is or why people follow them. Thier tweets I'm seeing are consistently bad. An expert is going to write better code than a novice, but difference is not the number of lines or the amount of thought or care. It's thier skills, knowledge and experience.
What a novice does in 100 lines of code, an expert does in 10. Oddly, they often take the same amount of time to write. The difference is thought and care.
mongosh, the official mongodb shell crashes a second after I start it because a https request to send telemetry data fails.
Hopefully I can put it back together ๐Ÿ˜ฌ
"Field explosion" in our elasticsearch logging data stream, I didn't notice till we hit the 10k limit.
1
Took most of a day to work out how to get the ECK file beats to write to a different data stream.
1
The cause of the field explosion was logging error objects that have dynamic field names, thanks Axios!
I once saw Cloudflare as potentially a great place to work. Even before KF it'd become clear Cloudflare wasn't a custodian of the Internet, it was just another toxic tech company. I'll actively avoid using their services going forward.
3 Sep 2022
Replying to @k8em0
True story: After cloudbleed, cloudflare literally lobbied the FTC to investigate me and question the legality of openly discussing security research. How come they're not lobbying their DC friends to investigate the legality KF? ๐Ÿคทโ€โ™‚๏ธ
2
2
@EliseTillet this might be something that's interesting to you in your work.
I'm working on some Javascript code that needs to extract large JSON objects from and even larger JSON objects and it quickly became clear that some types and runtime validation would help a lot.
2
I manually broke up the types where I had functions that worked on part of the data structure, I'm not sure if there is any way around that. Maybe annoying if I wanted to generate the types in the build, but I don't think I do.
1
It's amazing. I found a ton of real bugs I didn't even know yet existed just converting my existing code to TypeScript, I've got great error highlighting and code completion my editor and apparently I can use the JSON Schema files to do runtime validation.