Aaron Toponce ⚛️:debian:

MSCSIA, cryptography, security, locksport, Linux, programming, mathematics, amateur radio, Buddhism, running, anime, and bibliophilia.

Public Key

npub14dfr55yyvfw0leduur7e4af7fnkeegww6e2n64laxkkdyn4sufrqhs5uyy

NIP-05 Address

atoponce_at_fosstodon.org@mostr.pub

Profile Code

nprofile1qqs2k5362zzxyh8luk7wplv675lyemvu588dv4fa2l7nttxjf6cwy3spz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qr396ac

Publishing to

relay.mostr.pub

Author Public Key

npub14dfr55yyvfw0leduur7e4af7fnkeegww6e2n64laxkkdyn4sufrqhs5uyy

Show more details

Last Notes

2024-08-16 12:16:19

Machine learning.
https://cdn.fosstodon.org/media_attachments/files/112/971/649/990/846/614/original/1f2ad7aafa80f86f.webp

2024-08-05 22:08:03

Curious.
PuTTYgen supports the following SSH key types:
- DSA
- RSA
- ECDSA
- EdDSA
- Ed25519
- Ed448
OpenSSH ssh-keygen(1) supports:
- RSA
- ECDSA
- ECDSA-sk
- Ed25519
- Ed25519-sk
Given that the overwhelming majority of #SSH servers are provided by #OpenSSH, it's unfortunate that the two projects don't agree on key types.
#cryptography

2024-08-05 03:01:59

Cryptographic right answers, post-quantum edition.
https://www.latacora.com/blog/2024/07/29/crypto-right-answers-pq/
#quantum #cryptography

2024-07-31 02:42:36

Fuck the world C-suites wants to create.
https://arstechnica.com/gadgets/2024/07/logitech-has-an-idea-for-a-forever-mouse-thatrequires-a-subscription/

2024-07-16 12:29:31

Generative AI is garbage, exhibit 99:
#ai #math
https://cdn.fosstodon.org/media_attachments/files/112/796/157/528/868/994/original/20f2235235698a72.png

2024-07-04 22:03:46

Wikipedia now has dark mode.
https://cdn.fosstodon.org/media_attachments/files/112/730/479/653/278/680/original/cfc2b14168f24598.png

2024-07-04 02:13:22

In other news, #Authy has been breached. Again.
#cybersecurity
https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/

2024-06-27 20:41:10

#Linux chaos from bad to worse:
# sort /dev/urandom
# :(){ :|:& };:
# chmod -x $(command -v chmod)
# [ $[ $RANDOM % 6 ] == 0 ] && rm -rf /* || echo "click"

2024-06-21 13:14:33

You guys don't understand.
If Google pays taxes in a random country, to cheat the system and save money, that's clever because "Globalism".
If you do it, you get banned though.
Its like work, employers can out source any job, but if you do it you get fired.
Or you know, CEOs can work for multiple companies. If you do it it’s time theft.
https://techcrunch.com/2024/06/20/youtube-confirms-crackdown-on-vpn-users-accessing-cheaper-premium-plans/

2024-06-06 21:27:22

Geordi La Forge weighs in on the "tabs versus spaces" debate.
#programming
https://cdn.fosstodon.org/media_attachments/files/112/571/788/316/904/649/original/2a3f6510489883ef.png

2024-06-05 15:43:38

#Debian is switching to a tmpfs /tmp.
#linux
https://lists.debian.org/debian-devel/2024/05/msg00014.html

2024-06-02 00:37:11

3/2 🍓 = 6 → 🍓 = 12/3
3/2 🍊 = 2 → 🍊 = 4/3
3 🍅 = 10 → 🍅 = 10/3
🍓 × 🍊 × 🍅 =
12/3 × 4/3 × 10/3 =
480/27 =
160/9
Who designs #math puzzles where the fruit emoji are not whole numbers?
https://cdn.fosstodon.org/media_attachments/files/112/544/205/614/692/784/original/b36087cc76eef124.jpg

2024-05-16 12:41:07

Given the recent misinformation campaign by Pavel Durov and others surrounding #Teleglam and #Signal, it's worth reading how Telegram actually works by Moxie Marlinspike.
https://threadreaderapp.com/thread/1474067549574688768.html

2024-05-02 20:44:14

I know a joke about #vim. jk

2024-04-21 04:12:49

Writing good code > your choice of IDE
#programming

2024-04-19 20:38:06

Friends don't let friends use Discord.
Message History of 600 Million Discord Users Can be Accessed For $5
#privacy #security
https://80.lv/articles/message-history-of-600-million-discord-users-can-be-accessed-for-usd5/

2024-04-19 13:11:41

i j, k for iterators? index, jndex, kndex obviously.
#programming

2024-04-07 04:29:26

TIL Richard Stallman stole source code from Gosling EMACS, replaced the license headers with his own, and integrated it into his #GNU #EMACS. Over time he eventually replaced all the original code, but only after initially replacing the license headers first.
Why wasn't he sued? How do you sue a homeless man? What do you sue him for?

2024-04-05 16:30:31

Never underestimate #Linux neckbeards.
https://cdn.fosstodon.org/media_attachments/files/112/219/561/680/943/697/original/024b5f5a02a0d97d.png

2024-02-16 17:19:39

Why large language models are not intelligent, exhibit #64338.
#ChatGPT
https://cdn.fosstodon.org/media_attachments/files/111/942/296/320/684/264/original/99037eac8500e102.png

2024-02-16 17:13:20

NGINX's core developer parted ways with the parent company and started creating a new fork version under the name 'freenginx'
MariaDB for web servers.
#opensource #nginx
https://gigazine.net/gsc_news/en/20240215-freenginx

2024-02-09 15:43:19

Add #coffee stains to #LaTeX documents.
https://ctan.org/pkg/coffeestains?lang=en
https://cdn.fosstodon.org/media_attachments/files/111/902/279/392/548/685/original/73f014790d9fab44.png
https://cdn.fosstodon.org/media_attachments/files/111/902/280/210/530/569/original/34deba39c5767c5a.png
https://cdn.fosstodon.org/media_attachments/files/111/902/282/061/873/036/original/ea9160ee591a58ed.png
https://cdn.fosstodon.org/media_attachments/files/111/902/330/968/275/500/original/603720f3cb87c4d9.png

2024-02-06 23:12:15

- reply

@npub1zpu…qh6x What a dumb article. This is nothing more than a fluff opinion piece with no real interesting technical criticisms of the browsers mentioned.
Arc: Mac-only.
Brave: An ad hominem attack against its founder.
Edge: An ad hominem attack against Windows users.
Opera: Why mention it if you're not going to discuss it?
Vivaldi: Subjective opinion and no objective critique.
:eyeroll:

2024-02-05 00:27:40

I find that I'm replacing LED lightbulbs in my house at 3-4 times the rate of CFL bulbs.
Has anyone else noticed this? Driving me crazy.

2024-01-31 22:34:43

The truth. It hurts.
#running
https://cdn.fosstodon.org/media_attachments/files/111/852/934/413/265/922/original/e9d503990f59f05d.png

2024-01-30 00:12:56

#Coffee spelled backward is "eeffoc". Just know that I don't give eeffoc until I've had my coffee.

2024-01-26 23:55:50

Successfully resisted the urge to make a change on a Friday afternoon.
Just goes to show that all things are possible if you put your mind to it.
#sysadmin

2024-01-19 17:47:06

Stay in school kids.
#math
https://cdn.fosstodon.org/media_attachments/files/111/783/862/851/044/214/original/fddc993e1389689f.png

2024-01-13 04:00:33

When incrementing and decrementing a variable, you can do var++ and var-- in many languages.
Am I the only one that wants to skip "int var=3; var++" and instead just go straight to "3++", or "3--"?
Heh.

2024-01-09 00:45:45

- reply

@npub1pxt…pdwx Wake me up when it gets the number of fingers right and 3D space. Heh.

2024-01-09 00:41:49

Me: "Draw some hands."
AI: "Okay. I'll try to do that."
Yeah, I'm not worried about the AI apocalypse.
https://cdn.fosstodon.org/media_attachments/files/111/723/201/873/002/294/original/31ab2a02d51ac1bd.png
https://cdn.fosstodon.org/media_attachments/files/111/723/202/698/352/725/original/46b1cb4c57aee64f.png
https://cdn.fosstodon.org/media_attachments/files/111/723/203/143/210/173/original/4ce88749efca2773.png
https://cdn.fosstodon.org/media_attachments/files/111/723/209/538/666/163/original/bbbd316ee80e1b5e.png

2024-01-06 21:46:39

What did Master Yoda say when he saw himself in 4K?
HDMI.

2024-01-05 12:58:49

Microsoft is adding a Copilot key to their keyboards. "The biggest keyboard change in 30 years!". Heh.
On other news, #Linux users have a new compose key.
https://edition.cnn.com/2024/01/04/tech/microsoft-ai-copilot-key/index.html

2024-01-03 16:05:51

You've heard of Pop Tarts, but why aren't there any Mom Tarts?
Because of the pastryarchy.

2023-12-28 23:34:35

2024 is the year of the #Linux Desktop. Checkmate losers.
https://www.tomshardware.com/monitors/linux-is-the-only-os-to-support-diagonal-pc-monitor-mode-dev-champions-the-case-for-22-degree-rotation-computing

2023-12-22 18:51:08

There are two types of people.
#gnu #linux #unx #bsd
https://cdn.fosstodon.org/media_attachments/files/111/625/565/545/288/375/original/0af35b8f342ae08c.jpeg

2023-12-15 15:56:30

I can't believe I'm posting this, but here we are.
Drivers please scrape the ice and frost off the windows of your vehicle.
Out on my run this morning, I watched a white van drifting into the wrong lane and nearly hit an oncoming car, because the van's windshield was completely frosted over. The driver couldn't see.
My safety wasn't in jeopardy, but it's something I'll be paying attention to now.
The mathematician in me started counting. I noticed 1 in 5 vehicles do not scrape their windows.

2023-12-09 14:54:40

#Linux tip of the day: Use cp(1) instead of dd(1) to copy an ISO to a USB drive:
# cp file.iso /dev/sdz

2023-11-26 14:46:09

I've been screaming this for years. Service providers that provide authentication should do these two things at a minimum:
1. Require at least 12 characters.
2. Use ZXCVBN to estimate password strength and require a score of 4.
Interestingly enough, if you do those two things, you don't have to have stupid password complexity requirements, and you don't need a blacklist, as 12+ characters with a ZXCVBN score of 4 won't show up in password database breaches.
https://www.cc.gatech.edu/news/largest-study-its-kind-shows-outdated-password-practices-are-widespread
#passwords

2023-11-26 01:59:23

Optimist: the glass is half full
Pessimist: the glass is half empty
#Linux user: water is bloat

2023-10-10 13:17:00

Happy International Jumping Spider Day. Photo by u/bens_small_world/ on Reddit.
Did you know jumping spiders exhibit REM dream behavior?
https://news.harvard.edu/gazette/story/2022/08/harvard-researchers-find-rem-sleep-in-jumping-spiders/
https://cdn.fosstodon.org/media_attachments/files/111/210/901/100/968/133/original/960cb8e8092f00dc.png

2023-09-28 21:55:10

The WebP vulnerability in libwebp is nasty. Here's a fairly comprehensive list of applications affected:
#webp #opensource #cybersecurity
https://gist.github.com/mttaggart/02ed50c03c8283f4c343c3032dd2e7ec

2023-09-18 15:05:00

Is #Oracle threatening me here, with #GPLv3 software mind you, or is this just a poorly worded "business opportunity" spam email?
"... which is a licensed software" has threatening undertones.
#VirtualBox #FreeSoftware
https://cdn.fosstodon.org/media_attachments/files/111/086/756/116/823/728/original/0c18ab51f84112fd.png

2023-09-15 20:35:40

- Python sucks because is slower than molasses on a cold day.
- YAML sucks because parsing is a nightmare.
- JSON sucks because it doesn't support f***ing comments.
- Markdown sucks because it doesn't have tables.
- Bash sucks because it can't do floating point arithmetic.
I'm in a mood.

2023-09-09 03:55:33

I will show that 3=0.
Let x²+x+1=0. Clearly, x=1 is not a solution to the equation. Divide both sides by "x":
x+1+1/x=0 => x+1=-1/x
Thus, x²+x+1=0 => x²-1/x=0. Multiply by "x":
x³-1=0. Clearly, x=1 is a solution to this equation. So going back to the original equation:
1²+1+1=0 => 3=0
QED
#math

2023-09-06 20:54:31

- reply

@npub1w7m…9wnp You think that's neat. Wait until you learn the license for PowerShell is MIT
https://github.com/PowerShell/PowerShell

2023-08-25 11:49:13

Tor is introducing a proof-of-work defense to onion services with the release of 0.4.8.
Just one question: do I get Bitcoin after closing the browser?
https://blog.torproject.org/introducing-proof-of-work-defense-for-onion-services/

2023-08-23 22:09:36

<rant>
The clock in the OS works by having the time updated based on the counter in the RTC.
Sun with #Solaris Zones made every object inside the kernel have a zone context and then very carefully abstracted and hardened any exchange across zone boundaries so that there isn't even a handle on global resources inside a zone.
So it followed that each zone could have its own clock object spawned and all existing software would seamlessly work inside a zone.
1/2

2023-08-12 22:56:53

Purchased a new printer.
It came with … a CDROM.
What am I supposed to do with that? I don't have any optical media readers in any of my computers.
https://cdn.fosstodon.org/media_attachments/files/110/879/111/885/747/849/original/9a276dc19c550905.jpg

2023-07-19 18:02:55

- reply

@npub17nk…6qq2 I prefer an actual performance "in the field" heart rate drift test.
It's found by running for 1 hour at a pace you think is your aerobic threshold, usually defined as the top of zone 2.
Calculate the ratio of your pace to HR for the first 30 min. Call this "A".
Calculate the ratio of your pace to HR for the last 30 min. Call this "B".
Find R = (A-B)/A.
If:
- 0<R<=3%, you can go harder
- 3%<R<=5%, this is Z2
- R>5%, you went too hard
See for more info:
https://uphillathlete.com/aerobic-training/heart-rate-drift/

2023-07-19 17:54:55

- reply

@npub17nk…6qq2 Yeah, there are a few. Probably the best one is the ability to run that pace while breathing through your nose. Granted, not everyone has the same nasal capacity, but on average, it holds.
Also, heart rate monitors in wrist watches notoriously return high HR values and vary wildly. Just getting a chest strap or arm band HRM is usually enough to confirm the effort that you actually think you're doing.

2023-07-19 17:48:14

- reply

@npub17nk…6qq2 Are you sure you have your HR zones correct? A lot of apps and exercise providers want to define zones for you, but are usually not accurate.

2023-07-14 11:27:33

- reply

@npub14d3…7npp Also, the waters were muddied for the longest time, as "redhat" was the design for the logo.

2023-07-11 12:53:18

Now the #RedHat timeline is just getting weird. #SUSE just announced that they will invest $10 million USD in developing a #RHEL fork over the next few years.
This is in addition to continuing development of their SUSE #Linux desktop and server distributions.
I know their intent, but I'm not sure I agree with their expected outcome. They want more money via support contracts, that much is obvious. But will the ROI be worth it?
https://www.suse.com/news/SUSE-Preserves-Choice-in-Enterprise-Linux/

2023-07-11 05:43:52

This post by Oracle is ironic.
"Keep #Linux Open and Free—We Can’t Afford Not To"
COUGH #Solaris COUGH
What a bunch of hypocrites.
https://www.oracle.com/news/announcement/blog/keep-linux-open-and-free-2023-07-10/

2023-07-10 20:11:51

Red Hat is spelled with two words, the first character of each capitalized. It is not spelled "RedHat", "Redhat", or "redhat".
#redhat #linux #rhel #fedora #almalinux #rockylinux #centos
https://www.redhat.com/en/about/brand/new-brand/details

2023-07-05 22:15:25

- reply

@npub1ywy…cksd I mis-typed. The conflict of interest is being employed by Cathey Communications (according to your LinkedIn profile) who provides PR services for CIQ who sponsors Rocky Linux.
https://twitter.com/GordonMessmer/status/1675997487625306113

2023-07-05 20:25:02

Curious to get the opinion of @npub1ywy…cksd on this accusation of him having a clear conflict of interest between reporting on the #RedHat licensing changes on ZDNET and being employed by CIQ who sponsors #Rocky #Linux.
https://twitter.com/GordonMessmer/status/1675997483573612546

2023-07-04 19:06:12

What browser do you use and why?
https://cdn.fosstodon.org/media_attachments/files/110/657/373/870/636/805/original/aaf64ef47fe0e971.webp

2023-07-03 22:50:20

#vim vs #emacs
https://cdn.fosstodon.org/media_attachments/files/110/652/585/750/249/780/original/00a791916285dc4c.png

2023-07-01 18:35:07

- reply

@npub1lsl…9c2x APIs were created as a more efficient way of getting to data versus web scraping. So when he killed API access, of course devs turned back to web scraping to get the data.
No doubt that created additional load on the servers, so he thinks limiting access to the data via requiring an account to view tweets and rate limiting web resources is a good solution.
But now he's just limited ad exposure. Aren't ads a large driver to revenue? So, yeah, this is tremendously stupid.

2023-06-23 16:36:06

Know your #programming variable style conventions:
camelCase
PascalCase
snake_case
kebab-case
ceiling¯case

2023-06-21 16:32:47

- reply

@npub1gfd…7gg6 RHEL is overrated.

2023-06-20 22:16:38

Just used an all-whitespace password on an account.
I can login and logout without problem, and it saved correctly in my password manager.
From where I'm standing, everything is working as it should.

2023-06-16 05:44:12

#Reddit Threatens to Remove Moderators From Subreddits Continuing Apollo-Related Blackouts
https://www.macrumors.com/2023/06/15/reddit-threatens-to-remove-subreddit-moderators/

2023-06-01 19:34:53

All I wanted to do was melt some shave soap. Instead, I ended up burning it (I didn't know you could burn soap) and shattered my Pyrex.
https://cdn.fosstodon.org/media_attachments/files/110/470/628/579/129/480/original/93f11d761af55945.jpeg

2023-05-19 22:23:50

- reply

@npub178r…qekt @npub1aq2…4nfw I heard the next election will have full self-driving.

2023-05-19 16:16:25

I knew about reversing a file with tac(1), but I did not know about reversing lines with rev(1).
#gnu #linux #bsd #unix

2023-05-05 11:37:39

I just learned that #Wireguard will automatically and correctly clamp any private 32-byte key.
For example:
$ openssl rand -base64 32
tx6Kwv9L17ARq8WOd0M3sjm8gKU8bmdoSeBoGTzyEyY=
Even though the first and last bytes are not properly clamped above, when generating the public key, the wg(8) tool will clamp it. Further, when bringing up the interface, Wireguard will also clamp it.
See https://git.zx2c4.com/wireguard-tools/tree/src/genkey.c and https://git.zx2c4.com/wireguard-linux/tree/drivers/net/wireguard/noise.c (search for "curve25519_clamp_secret")
#cryptography

2023-04-30 13:49:12

I always get a kick out of off-brands in #anime. It's always something I'm looking for.
Here we have a "Macrosoft Winding XO" laptop with a 128-bit DES encrypted password.
Sounds about right.
https://cdn.fosstodon.org/media_attachments/files/110/288/074/509/289/739/original/96cc8ec7176115b1.png
https://cdn.fosstodon.org/media_attachments/files/110/288/075/228/505/818/original/d9ee6463a921692d.png

2023-04-25 20:20:02

If your phone has a Qualcomm chipset, it might be spying on you. Unfortunately, this is happening at the firmware level, beneath iOS and Android.
#[0]
https://www.nitrokey.com/news/2023/smartphones-popular-qualcomm-chip-secretly-share-private-information-us-chip-maker

2023-04-18 17:39:41

The blog post mentions it, but this table assumes that the passwords are **randomly** generated, not designed by your brain.
However, the systematic approach they took to coming at those numbers is sound.
https://www.hivesystems.io/blog/are-your-passwords-in-the-green
#[0] #[1]
https://cdn.fosstodon.org/media_attachments/files/110/221/026/295/865/715/original/9122245004a91d60.png

2023-03-09 00:05:39

Got me in the first half. Not gonna lie.
#[0] #[1]
https://cdn.fosstodon.org/media_attachments/files/109/990/393/158/595/656/original/e090b20e2d4436c3.png