Quiark

This is a very cool idea – have been looking for something like this for a while to get out of the echo chambers that we tend to form in our social circles.

I was actually disappointed it's not real. If services like this were widely used, eventually it would devalue the likes and social personas and everyone would just start ignoring it.

And on top of that, I thought it was in a real blender. So my brain imagined something like "Will it blend" while receiving orientation of all the parts via quantum entanglement. Now that would be the future.

ipfs is a new protocol which happens to do similar things to bittorrent. For simplicity you can think of it as bittorrent with folders

The most updated book I read was The Science of Interstellar by Kip Thorne

yeah, the naming.... it's basically a client app for the ethereum ecosystem, much like the role a web browser has

It is gross incompetence that it was not a built-in feature.

Letting apps bundle their own browser engine guarantees that there will be unpatched security bugs.

Yes but I can also imagine all kinds of problems coming from keeping private keys. Stolen, lost, hacked (see Estonian id card)(well all right, secp256k1 is much less susceptible to it than RSA).

Don't be so pessimistic, people care about things.

What do you mean? A change to digitally signed data can be detected immediately without any blockchain.

did you know you can make digital signatures without a blockchain

And in Asia they sell skin-whitening lotions.

* groans* at the old joke

This is how you catch and jail the bad boy who's scraping your website :P

Suggestion: don't use integration. The whole idea has a high risk of security compromise and the plugins I've seen were not implemented well. I use copy/paste or Autotype and don't find it slow to use at all.

The problem is that when QC come, ECC will not be in any better position than RSA...

Can you be a bit more specific on your claim that the various agencies can break TLS?

As far as I know, localhost can't be intercepted. Except for unintentional mistakes such as binding to 0.0.0.0 instead of 127.0.0.1. And inevitably there are going to be some tinkerers who'll run it over the network because it suits them.

A few things to be wary of:

* KeePassHTTP doesn't use authenticated encryption for its protocol and thus is insecure (decrypt password level insecure). Please make sure you don't have this issue.

* Browser integration means there is only some JS code between my unlocked password vault and random websites. Please study findings from Tavis Ormandy and others who found such vulnerabilities in LastPass et al

Yes, whitespace as multiplication between number and unit or variable will be expected as multiplication but you can consider warning users about whitespace between two number literals because that could be just a typo.

I tried to enter

  3 5

which was interpreted as 3 * 5. Seems a bit risky to me :) Otherwise looks neat.

I think it's interesting that if you look at this and at Eve, you'll see how both are trying to improve programming and end up at quite different approaches. No size fits all.

I also made a mirror of the PDF on IPFS (BitTorrent is soooo 2000's)

QmNsMdUqiSy8dQ1pNxGL2CVvZXDaNY9Lu53HRKKoYZNM7w

AEAD cipher with nonce generated from plaintext? That would have equivalent security properties except for being needlessly complicated?

I agree that the HMAC approach is better but a proper deterministic encryption would work just fine, wouldn't it? You're comparing your method with ECB mode which is a bit unfair.

Wow, that's cool. TLA+ is the same formalism that Amazon uses to verify (some of) their cloud services.

Because every such project starts with crowdfunding. Some of them may actually get some code written but not always. /s

But what extra features does this actually provide? According to screenshots, it has:

* a popup menu * colored background lines * another popup menu

well that's not exactly innovative (a popup menu for argument completion is available in fish today without eating RAM like Chrome)

I was duped into reading this a few months back. The entire page is total nonsense, promising to solve all of the world's problems without having a clue about anything. HN sinked to new depths for me by having this on the front page :/