reyk is a user on bsd.network. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
reyk boosted

Looks like a diff fell into snaps.
2 out of 4 cpus stay idle 😀

reyk boosted

#OpenBSD intuition regarding a new side-channel caused by the speculative execution on systems with lazy FPU context switching wasn't unsubstantiated. Intel has just published an avdisory: intel.com/content/www/us/en/se

Today I was procrastinating ... err, toying around with authenticator and implemented an OATH-compatible login mode for – RFC 6238 (TOTP) and RFC 4226 (HOTP). github.com/reyk/login_oath/blo

May contain spaces Show more

reyk boosted

Here we go again…

D. Evtyushkin et al., “BranchScope: A New Side-Channel Attack on Directional Branch Predictor”

cs.ucr.edu/~nael/pubs/asplos18 (PDF)

This is not exactly surprising: the branch predictor is the new vulnerability Klondike.

I also think the syntax and style is ugly. These :: look a lot like Perl. Still semicolons, really? I also never liked C++-style // comments. No KNF, enforced { on the same line? Rust hast some interesting promises, but why should I learn a language that looks like the worst mix of Linux kernel code and Perl?

I started reading the Rust book, chapter 1.1 “$ curl sh.rustup.rs -sSf | sh” … “Of course, if you distrust using curl URL | sh to install software, you can download, inspect, and run the script however you like.” … so why do they even suggest this curl nonsense in the first place?!
bsd.network/media/pwndzBCPrM-t

reyk boosted

#OpenSSH just gained it's first post-quantum signature algorithm, the eXtended Merkle Signature Scheme (XMSS): marc.info/?l=openbsd-cvs&m=151

I wrote the ar5k driver for 1st gen Atheros wlan under Linux. But everyone stopped caring as soon as there was an official blob driver from the vendor. devs invited me to rewrite my driver and I fell in love with the clean source code, kernel and OS ever since.

reyk boosted

... I will continue to use Twitter for the surreal illusion of happiness and Mastodon for all the negativity and raw thoughts. It might include traces of OpenBSD but won’t be that focused as it used to be.

But I have to admit that the Microsoft guy merged my patch very quickly. whatever...

That doesn’t mean that the Azure CLI is specifically bad. ALL of these cloud CLIs are bad. The worst one is OpenStack where you have to use the „obsolete“ version (eg. neutron CLI) for half the options that are unimplemented or broken in the latest &greatest openstack CLI. But, of course, the old CLI always yells at you „I‘m obsolete, use the new CLI“. And why are Python people so keen on throwing their tracebacks at you? You do something wrong - traceback. Typo - traceback. Timeout - traceback.

I hate it when I have to dig into Python code. But Azure’s CLI was throwing tracebacks at me, so I had to fix it: github.com/Azure/azure-cli/com

reyk boosted

doas cat toot Show more

ok, you convinced me, it’s alive!

Is Mastodon still a thing?