indutny

Would they be interested in collaborating with me on this project? My email address is listed on my GitHub profile: https://github.com/indutny/

Thank you!

This very reasonable sum for a project with funding.

The GradType was creating using my personal funds. Any help is greatly appreciated!

That's very strange, sorry! What browser/keyboard layout are you using?

Good point! I've added a small note to explain it. Will re-work the thing later.

I think it has the potential to be used as a 2FA. However, for this to work - much more training data is required.

With some changes - yes. I did this in my experimental project: https://github.com/indutny/resistenz/blob/master/python/mode...

The idea is to add an extra 2 params to the output of each classifier cell. Then do L2 normalization on them ( https://github.com/indutny/resistenz/blob/master/python/mode... ) and treat them as a cosine/sine pair.

The loss in this case would be the Euclidean distance between the actual and predicted pairs, which is equal to "2 * (1 - cos(x-y))".

Any additional details on how encryption and key generation scheme looks like?

That's true, and should be viewed as a possible risk. However, there is still more implicit trust in 1Password and similar companies that is often not mentioned:

* They run mostly closed source system. Thus one has no idea what happens on backend, and what data is actually sent

* The encrypted vault already belongs to them. In fact, all encrypted vaults live in the same place, which makes it very attractive for hacker attacks

So effectively, leaking Master Password for 1Password might have just as bad effect as leaking it for DerivePass. Depending on how much you trust both entities.

Tobias J. Osborne:

https://www.youtube.com/channel/UCpHjg_Qmzxm3xaAWRrwQPCA

He has a very understandable approach to studying Quantum Field Theory. Highly recommended!

David Tong is a very good lecturer on the same subject, but unfortunately the videos are of very low quality:

https://www.youtube.com/watch?v=8yplCob7_Ck&list=PL1C5310BB3...

Has anyone considered using DerivePass yet? (https://derivepass.com/) It doesn't store passwords anywhere at all, just the domain and login information, both of which are encrypted with your master password.

(Disclaimer: I'm the author of it).

Just a few words from the author. This app came out of my frustration and lack of trust (read paranoia) in exiting password managers. All of the popular ones stores passwords in the "vault", which means that these companies take responsibility for ensuring that your data is safe. It is hard for me to believe in this, even a bit, so here we have DerivePass.

It generates password using scrypt from the Master Password and domain/login combination. As you type - it displays emojis that represent the Master Password in secure way. Only domain names and logins are stored in the cloud, and they are secured by AES-256 encryption with key derived from the Master Password too.

It is more like an alternative to cmake. gypkg has a fancy way of managing dependencies. It is not like npm however, since there is no default registry/storage for dependencies.

Please let me know if I can answer any other questions!

It looks like they are not too much similarities, except that they are both took some structure from the Bitcoin. Hackchain is less about signatures, public keys, mining the blocks; and is more about the output/input scripts in the transactions.

Indeed it is, thank you for the link!

Something like

mov 5, a

mov a, b

Where `a` gets `eax`, and `b` gets `ebx` during register allocation, and the lifetime analysis of each variable makes sure that all alive vars have register.

Of course, no one remembers: https://github.com/indutny/bthread

You can use OpenSSL without IO APIs. Just use SSL_set_bio ;)

Hello!

Nothing about KeePass, but recently I was wondering if I could write a software for deriving the keys from the master secret and seed (i.e. domain name or whatever).

Here is what I have came with:

* https://github.com/indutny/derivepass * https://github.com/indutny/scrypt

It is using dump scrypt implementation (see the second link), and should be pretty easy to verify by cross-reading the source and the spec. Also, there is a boilerplate iOS application which is using `derivepass`'s derivation function and `scrypt` too.

Please let me know if you have any questions!

Great feedback! I wonder if you might be interested in contributing this to bud? This thing will be very valuable addition!

There are lots of features:

* Asynchronous SNI - you may load cert/key pairs on the fly and let bud know which backend do you want it to connect the incoming client to

* Asynchronous OCSP stapling

* TLS ticket rotation, with possibility to scale to the big cluster

* x-forward frame for SPDY, and soon for HTTP/2 too

* Lots of other features, but nothing bud-specific

Wait a second, this is not domain name. This is an IP address, it is 46 bytes maximum. Thanks for posting this, but I don't see any issue with this.

Wow, thank you very much for this! Doing a release right now.

Curiosity? :)

Thank you for the kind words.

It is quite terse indeed, mostly because it was written as a basis for my 30 minutes talk on JSConf Budapest. I guess, I'm going to eventually cover this topic in a greater detail.

Thank you for advice!

Whoa, thank you! Fixed almost every of them. Hope it is better now.

I think it might be possible to do it with some sort of wrapping library written in C++ with C APIs. Technically, it will work this way for every kind of C++ library.

Oh, this is super cool! Thank you.

I'm terribly sorry for this. English is not my native language.

If you have any particular suggestions - would you mind posting them as a comment to this commit: https://github.com/indutny/blog/commit/8409a9d98c44a24359b53... ?

Thanks for giving a try ;)

Pull requests are welcome ;)

Public are the certs that can't be used for signing stuff, private are basically self-signed certificates (with some percent of error due to the way of detection).