Hacker News Reader

Congrats!

I think you should highlight more the IoT use case, It's a really great solution for devices that need to talk over multiple transports (Lora + IP) and to avoid the need for a VPN.

Keyb0ardWarri0ron FCC wants to kill burner phones by forcing telecoms to get all customers' IDs

I'm always surprised how bad ideas spread faster than good ideas among our rulers. Here is a map of countries where an ID is required (or not) https://www.comparitech.com/blog/vpn-privacy/sim-card-regist...

Keyb0ardWarri0ron Show HN: Open-source private home security camera system (end-to-end encryption)

From what I understand, some camera modules for ESP32 have built-in video encoding, so basically the ESP32 will only have to manage the encryption + network.

If you are interested, take a look at what SeeedStudio are doing. I think It's worth exploring for very cheap cameras, but yeah, no AI (without an additional accelerator).

Keyb0ardWarri0ron Show HN: Open-source private home security camera system (end-to-end encryption)

RSIC-V based are probably the most widely available microcontrollers / dev boards, but they unfortunately don't have AES accelerators. On the other hand, ChaCha20 (or ChaCha12) run great on them.

Keyb0ardWarri0ron Show HN: Open-source private home security camera system (end-to-end encryption)

This is great, congrats!

Do you think it would be possible to use ESP32 (RISC-V CPUs) based cameras?

Both for cost reduction and availability of the hardware reasons.

Maybe with a ChaCha20-based cipher instead of AES?

Keyb0ardWarri0ron Running Bare-Metal Rust Alongside ESP-IDF on the ESP32-S3's Second Core

ESP32-S3 may be the worse model to run Rust on due to the XTensa cores that makes the toolchain unnecessarily complicated.

The newer model, C3, C6, C5 all have RSIC-V cores which make it a dream to run Rust (basically: rustup target add riscv32imac-unknown-none-elf).

Here is a good introduction: https://kerkour.com/introduction-to-embedded-development-wit...

Keyb0ardWarri0ron ChaCha12-BLAKE3: Secure, Simple and Fast authenticated and committing encryption

Interesting construction, thank you for sharing!

But:

- More and more people see ChaCha20 as wasteful (too many rounds)

- Poly1305 is "hard" to implement

- ChaCha12 + BLAKE3 can fulfill all the symmetric cryptography needs (MAC, AEAD, Hash, RNG...), which is untrue of ChaCha20 + Poly1305, therefore simplifying the deployment of secure cryptography

- ChaCha12 + BLAKE3 both scales with the width of SIMD vectors, opening the door to really really fast cryptography on general-purpose hardware, especially with ARM SVE & SVE2

- SIV construction requires to decrypt the entire payload before being able to verify the authentication tag, which can be costly and may lead to DoS attacks due to the asymmetry of the cost of attack / cost of defense

Keyb0ardWarri0ron Minimum Viable Blog

Take a look at https://markdown.ninja

It lets you create a blog and a newsletter with Markdown and publish directly from the command line (or the web editor). You get the offline-first workflow of Markdown, but with beautiful themes like substack.

It's like a mix between Wordpress, netlify and substack.

Keyb0ardWarri0ron Ask HN: What are you working on? (April 2025)

https://markdown.ninja

A Markdown-first CMS and website builder for blogs, newsletters and documentation websites.

I've been blogging since more than 10 years, and the only thing that made it possible is Markdown. That's why I've decided to build a complete publishing platform to replace the complex and fragile setups of bloggers and startups. Do you really need a CI/CD pipeline, static site builder, hosting, CDN and analytics just for a website? :/

The platform is currently 100% operational and I'm now working to Open Source it.

The best thing? You can publish directly from the CLI:

$ mdninja publish

Keyb0ardWarri0ron Memory safety for web fonts

But can't be embedded in other projects as easily as Rust (FFI, WASM).

Keyb0ardWarri0ron Memory safety for web fonts

This is the true power of Rust that many are missing (like Microsoft with its TypeScript rewrite in Go): a gradual migration towards safety and the capability of being embedded in existing project.

You don't have to do the Big Rewrite™, you can simply migrate components one by one instead.