Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)S

sus

@ sus @programming.dev

Posts
16
Comments
219
Joined
3 yr. ago

  • Python has a library for everything but..

    Jump

  • bonus points if you're using a statically typed language but the library uses extensive metaprogramming seemingly for the sole purpose of hiding what types you actually need

  • Yup...i can confirm that

    Jump

  • I think the problems there are exacerbated a lot by over-eager type coercion and other crappy design decisions inherited from almost 30 years ago

  • Piracy advice

    Jump

  • if you can't connect to a vpn using only open source software, that's a crappy vpn

  • Piracy advice

    Jump

  • importantly it's (hopefully) an ISP that operates from a less copyright-happy country and isn't tied down to tons of expensive infrastructure and long-term contracts

  • "☹️".reverse() == "🙂"

    Jump

  • but sometimes "👍🏽".reverse() == "🏽👍"

  • that's not-

    Jump

  • the thing where it actually helps is if you're "one word speed reading" (eg. http://onewordreader.com/). Then it's easier to rapidly focus your eyes on each word, without having to follow a rigid timer. But if you're reading normally it probably doesn't help

  • that's not-

    Jump

  • A key part of visual design is knowing that the users don't know what's best for themselves. They usually stop complaining after 3 months which is proof that you are correct and they are wrong!

    (sarcasm rate: 1 - ε)

  • It must be a silent R

    Jump

  • many words should run into the same issue, since LLMs generally use less tokens per word than there are letters in the word. So they don't have direct access to the letters composing the word, and have to go off indirect associations between "strawberry" and the letter "R"

    duckassist seems to get most right but it claimed "ouroboros" contains 3 o's and "phrasebook" contains one c.

  • TIL Only about 9% of plastic ever produced has been recycled.

    Jump

  • Most microplastics come from car tires and washing of clothing with plastic in them. (both abrade the plastic causing uncountable tiny pieces of microplastics to enter the water or the air)

    Then there are a lot of places that dump plastic into rivers or the ocean instead of into landfills.

  • Popular Programming Book "Clean Code" is being rewritten

    Jump

  • Rules of thumb can be very useful for a relatively inexperienced programmer, and once you understand why they exist you can choose to ignore them when they would get in the way. Clean Code is totally unhinged though

  • average day in NPM land

    Jump

  • is-number is a one-line function. (though it's debatable if a function that complex should be compressed to one line)

    You may have heard of a similar if more extreme "microdependency" called is-even. When you use an NPM package, you also need all the dependencies of that package, and the dependencies of those dependencies recursively. Each package has some overhead, eventually leading to this moment in time.

  • average day in NPM land

    Jump

  • -----BEGIN PRIVATE KEY-----

    Jump

  • the direct chain I can see is

    "can you string words to form a valid RSA key"

    "I would hope so, [xkcd about password strength]"

    "words are the least secure way to generate random bytes"

    "Good luck remembering random bytes. That infographic is about memorable passwords."

    "You memorize your RSA keys?"

    so between comments 2 and 3 and 4 I'd say it soundly went past the handcrafted RSA key stuff.

  • -----BEGIN PRIVATE KEY-----

    Jump

  • I think this specific chain of replies is talking about that actually.. though it is a pretty big tangent from the original post

  • -----BEGIN PRIVATE KEY-----

    Jump

  • if you know there are exactly two additional characters

    this is pretty much irrelevant, as the amount of passwords with n+1 random characters is going to be exponentially higher than ones with n random characters. Any decent password cracker is going to try the 30x smaller set before doing the bigger set

    and you know they are at the end of the string

    that knowledge is worth like 2 bits at most, unless the characters are in the middle of a word which is probably even harder to remember

    if you know there are exactly two additional characters and you know they are at the end of the string, the first number is really slightly bigger (like 11 times)

    even if you assume the random characters are chosen from a large set, say 256 characters, you'd still get the 4-word one as over 50 times more. Far more likely is that it's a regular human following one of those "you must have x numbers and y special characters" rules which would reduce it to something like 1234567890!?<^>@$%&+-() which is going to be less than 30 characters

    and even if they end up roughly equal in quessing difficulty, it is still far easier to remember the 4 random words

  • -----BEGIN PRIVATE KEY-----

    Jump

  • you memorize the password required to decrypt whatever container your RSA key is in. Hopefully.

  • -----BEGIN PRIVATE KEY-----

    Jump

  • and some people will try to just hold a key down until it reaches the length limit.. which is an even worse way to generate a password of that length

  • -----BEGIN PRIVATE KEY-----

    Jump

  • this assumes a dictionary is used. Otherwise the entropy would be 117 bits or more. The only problem is some people may fail to use actually uniformly random words drawn from a large enough set of words (okay, and you should also use a password manager for the most part)

  • After a particularly annoying update today

    Jump

  • more accurately, average person has a higher tolerance for bullshit than for spending many hours learning something new or spending potentially years applying for citizenship in another country