ctz

Joined 16 years ago

Karma
2,856
Submissions
511
Member since
Oct 21
bluesky: https://bsky.app/jbp.io

mastodon: https://infosec.exchange/@ctz

github: https://github.com/ctz/

locale: Cambridge, England

alumnus: nCipher, Thales eSecurity, Good Technology, Blackberry, Electric Imp, Twilio

recent open source:

- rustls: a TLS stack in Rust

- fastpbkdf2: faster PBKDF2

View on Hacker News

Recent submissions

Comment · 7 months ago
people better not be snooping on my public open source projects!
Comment · 8 months ago
There were ~16mn users of the internet in 1995. As of 2025 there are 5.56bn. Are you saying paedophilia has dropped by 99.7% over 30 years? If so, please provide a source for that claim.
Comment · 9 months ago
Me too!
Comment · 11 months ago
I have a Neato D650 which I assume meets that classification and is covered by the service withdrawal, it is now pretty degraded -- no notifications, no mapping, no keep-out zones.

No notifications means if it gets stuck it stays there.

No mapping means if it doesn't fully clean the space (eg, a door is closed) then I have no way of knowing without baby-sitting it.

No keep-out zones means every clean involves carefully preparing the space to hang up trailing wires out of the way -- previously I just had some keep-outs near the wires and that worked perfectly.

Without all these features I have stopped using it; it is quicker to just use a stick vacuum.

Comment · 1 year ago
Welcome to the web. Pages often have hyperlinks that can be followed to see related information.
Comment · 1 year ago
I can already feel the unfinished edge of the desk chipboard on my wrists. Such a premium finish!
Comment · 1 year ago
I understand that part. Mostly interested where the runners are coming from? macOS especially is pretty costly to provide runners for, so who is doing that for free?
Comment · 1 year ago
> You can have a nice CI/CD pipeline that runs 100% in-house, for free.

Interested! Some detail on how you achieve this for free would be great.

Comment · 1 year ago
asn1 enjoyers can also look forward to the sweet release of death. though if you end up in hell you might end up staring at XER for the rest of eternity
Comment · 1 year ago
The other base64 prefix to look out for is `MI`. `MI` is common to every ASN.1 DER encoded object (all public and private keys in standard encodings, all certificates, all CRLs) because overwhelmingly every object is a `SEQUENCE` (0x30 tag byte) followed by a length introducer (top nibble 0x8). `MII` is very very common, because it introduces a `SEQUENCE` with a two byte length.
Comment · 1 year ago
Looks like it is in ports?
Comment · 1 year ago
Comment · 1 year ago
My apologies.
Comment · 1 year ago
Comment · 1 year ago
It is instructive to compare Bun and Deno's issue tracker. Like, the five most recent issues for Bun at the time of writing are all crashes. Some of these are controlled panics or assertion failures, but others are like "we are now executing from address -1" or "we are trying to read from address 0x00000069." Recently written software simply should not have these classes of problem.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton