Chris Vest

Computer at lifestyle company in Cupertino.
So much #netty, #java, #database, and #tls

config: #nobridge searchable

Public Key

npub1q8rm4apj4uvhanr5sas8g052ykrfl2jugad756yqxv8y62qz23ys8gu068

NIP-05 Address

chrisvest@mastodon-social.mostr.pub

Profile Code

nprofile1qqsqr3a67se27xt7e36gwcr5869ztp5l4fwywkl2dzqrxrjd9qp9gjgq78akq

Author Public Key

npub1q8rm4apj4uvhanr5sas8g052ykrfl2jugad756yqxv8y62qz23ys8gu068

Show more details

Last Notes

2025-05-28 02:48:47

Sonatype has really messed up this maven central migration. I struggled all day to figure out how to publish snapshots, only to hit a wall with trying to *download* the published snapshots.
The docs, the plugins, the repo tooling… none of it was ready for this.

2025-05-05 21:16:16

In Pixar's Coco we learned that the souls of the dead vanish if the person is forgotten. This imply souls are reference counted.

2025-04-21 22:04:33

- reply

@nprofile…ln70 they could’ve commissioned an artist for a site-specific anime girl… all of them

2025-03-31 22:56:22

Meanwhile, good news for the … *checks notes* … zero users of the DH_anon TLS authentication method. We're gonna fix it. Sorry about it being broken for 5+ years, but literally no one noticed.

2024-12-24 02:09:39

Is your Christmas tree leaning or falling over? Too many decorations on one side? Let a database engineer take a look. They love balancing trees.

2024-12-24 02:09:39

Is your Christmas tree leaning or falling over? Too many decorations on one side? Let a database engineer take a look. They love balancing trees.

2024-12-03 18:47:17

- reply

@nprofile…2wfl Puerto Rico be like “am I a joke to you?”

2024-12-03 15:23:26

- reply

@nprofile…vdjy maybe techbros screaming at furry art is the engagement the algorithm craves

2024-11-29 18:09:33

- reply

@nprofile…dpy5 browser feature wish: crawl and index the given domain from the current page, and let me do local fulltext searches.

2024-10-04 05:44:47

Pondering vectorised ASN.1 DER parsing.

2024-10-01 14:38:15

- reply

@npub1p45…89jz so now it’s no longer just a hobby, and you do have a business providing a service to a billion people?

2024-07-26 16:47:55

ASN.1 BIT STRINGs are such a pain to work with.

2024-07-26 16:47:55

ASN.1 BIT STRINGs are such a pain to work with.

2024-07-18 18:58:43

- reply

@npub1y0e…mm9n I just need to parse and encode KeyUsage properly 😬

2024-07-18 18:41:27

It had to happen sooner or later… just downloaded the X.509 specification.

2024-07-17 17:42:00

- reply

@npub1y0e…mm9n `man -k sockaddr` only finds a perl page, for instance, so I'm not sure what's going on. But yeah, just grep'ing the man directory works

2024-07-17 17:30:25

What's a good tool for searching your man pages? (whatis and apropos are not cutting it)

2024-06-13 23:55:18

Chiquita, the banana company, fined $38 million for funding paramilitary right-wing terrorist group that killed 8 people in Columbia: https://www.npr.org/2024/06/12/nx-s1-5003706/jury-chiquita-liable-paramilitary-killings-colombia

2024-05-31 00:32:58

A type 2 diabetes patient has been *cured* by Chinese scientists with a stem cell treatment, no longer needing insulin or any other medication: https://www.nature.com/articles/s41421-024-00662-3

2024-05-02 17:02:03

- reply

@npub1su4…a0dw It looks like a Lucid Kirkland

2024-03-07 19:54:08

Hey security guy, please review my code. I wrote it in a memory safe language!
*hands over a PR with hundreds of integer overflows*

2024-02-24 00:32:54

Reminder to programmers who occasionally needs to generate an X.509 certificate (e.g. for SSH, for signing commits, emails, for GitHub, etc):
Don't use RSA, unless you need to for some specific compatibility reason.
Use EC-P 256 or Ed25519, instead. They're safer, faster, smaller.

2024-02-11 17:43:59

Lithium battery prices are coming down quite quickly: https://thedriven.io/2024/01/25/worlds-largest-ev-battery-maker-set-to-cut-costs-in-half-by-mid-2024/
Good news for energy storage, which is important for practical deployment of renewable energy, and for people who don’t have 50k+ USD budgets for EVs. I think we need to see 20k USD EVs to reach the top of the S-curve.

2024-02-05 15:16:45

- reply

@npub1h4f…aupf being able to piggyback on HTTP infra like proxies is clever, but I’m not convinced about reusing the auth methods of HTTP. At least, we should all move away from password and token based auth.

2024-02-02 22:07:45

- reply

@npub15ml…2w4s Apple: We made a new connector!
Everyone: a new connector, or lightning again?

2024-01-17 03:38:52

- reply

@npub1su4…a0dw fans?

2023-11-20 23:54:41

- reply

@npub1su4…a0dw I feel like the worst part of this is that the iOS peers on the other end of those chats have no idea that the communication have dramatically worse security than what you can normally expect from iMessage.

2023-11-19 16:14:38

- reply

@npub1su4…a0dw “Totalled” just means the cost of repair exceeds the value of the car, but that cost clearly depends on who and where the repair is done. I love that these cars get a second chance.

2023-11-18 01:14:03

The prices of EV batteries are falling faster than expected: https://www.goldmansachs.com/intelligence/pages/electric-vehicle-battery-prices-falling.html

2023-11-14 22:18:34

- reply

@npub1a4c…t2kf oh, it's kind of like how adding lanes to a highway makes traffic worse?

2023-11-10 21:10:08

- reply

@npub1su4…a0dw "hiring and recruitment practices for certain types of positions" … the only reason those positions were "open" in the first place is because the PERM process requires it. There's already a person working that exact job, and they probably wouldn't have hired a foreigner if they could've gotten a US citizen to begin with. The PERM process is just byzantine.

2023-10-24 19:31:27

- reply

@npub1su4…a0dw "50% faster peak multi-threaded performance vs M2" … it's a 12-core part vs. an 8-core part, so, I mean, I guess? 😅

2023-10-19 17:30:23

I'm noticing a shift in how developers perceive CVEs. There's a growing sentiment of "CVEs are often bogus. Disputing them is incredibly hard." People reach out to maintainers and just want to know if they need to upgrade, or silence the alert. The CVE system is eroding its trust by not properly vetting reports.

2023-10-19 17:30:23

2023-10-19 02:26:42

- reply

@npub1a4c…t2kf “naturally aspirated” is certainly something you hear called out as a positive thing in car reviews.

2023-10-10 19:45:34

- reply

@npub1su4…a0dw Baldurs Gate 3 runs better on my M2 Max than it does on my PS5.

2023-09-20 22:12:20

- reply

@npub1y0e…mm9n @npub1su4…a0dw the predictions made at the time that these efforts to defang Chinese semiconductor would have the opposite effect, have now basically come to fruition.

2023-09-09 20:42:08

- reply

@npub1a4c…t2kf I’m reminded of a time where a newspaper tried to estimate how many votes the different eurovision shows got. Their estimates were completely off, because they didn’t know that the finale get more votes than all the shows leading up to it, combined.

2023-09-06 21:40:58

- reply

@npub1a4c…t2kf my entirely unsubstantiated hunch is that this is another case of “no one ever became a billionaire by being a good person.”
I think PT likely correlate with other progressive ideas of doing right by people, comunity, environment, etc. As such these companies are less exploitative and thus less profitable.
Or maybe I’m just jaded.

2023-08-23 17:25:37

As I've been saying for over 2 years now; the variants will continue until mitigations improve.
https://mastodon.social/@arstechnica/110929448167474881

2023-08-17 00:58:13

- reply

@npub1y0e…mm9n these ones have custom extensions, because otherwise it’d be too easy

2023-08-16 22:45:35

When you’re reading a certificate validation spec and the process requires a peer IP address (no TLS APIs provide this) and custom ASN.1 parsing to implement.
https://files.mastodon.social/media_attachments/files/110/901/718/409/899/027/original/ad13e2151f917d0c.jpeg

2023-08-16 22:45:35

2023-08-09 21:16:30

I now count myself in the club where we get together to compare and talk about our favorite ASN.1 decoders, generators, implementations, etc.

2023-08-02 01:14:51

- reply

@npub1a4c…t2kf that would require them to think about something other than their next bonus or grant. Software is routinely shipped in a poor state; it just has to ship in the quarter or the FY, so someone has an achievement bullet to show.

2023-07-18 19:47:00

- reply

@npub1a4c…t2kf My gut feel is that the volume costs more than weight, with all the transport these pieces go through; e.g. how many couches can you fit in a shipping container. That said, IKEA go to great lengths to optimise the space packaging of their stuff, so who knows.