svenfaw

Vendor advisory post: https://blog.coinkite.com/coldcard-mk3-seed-generation-warni...

Technical deep dive: https://blog.coinkite.com/entropy-technical-backgrounder/

"Discovered a very interesting thing about DeepSeek-R1 and all reasoning models: The wrong answers are much longer while the correct answers are much shorter."

Sounds real interesting to me - and I don't even have a bike (yet)! Wish you the very best.

For Windows, IE11/Trident. This may sound ridiculous, but if you think about it, it's still maintained security-wise (and will be forever, as per MS), and since its codebase has been frozen a few years ago, its attack surface can only shrink with time.

So if you're OK with the limited compatibility, it might be worth considering.

First time I hear of Coincap. The de facto standard reference for such stats is coinmarketcap.com, which lists a mind-boggling 16,155 cryptos.

To clarify, why is being able to display an alert a massive security flaw in this context?

bitcoin-cli --dumpwallet "filename" should give you the private keys in WIF format

This one expires in 2066, for instance: https://censys.io/certificates/3b639a3248914d0d5e3811c080f31...

If they could do that they might just as well disable the file-encrypting part.

Awesome! But why no download link?

Very nicely done. It even works fine in IE11!

No, they only include the DNS server name in cleartext. (Unless I’m misunderstanding DoH)

Almost everybody was already using Google by late 1999.

So does Chrome, if I'm not mistaken

Far from it. Here's an older one this year: https://chromereleases.googleblog.com/2019/03/stable-channel...

They are mixing apples and oranges indeed.

Dead is not quite correct. IE has been put on a permanent feature freeze, but MS has committed to keep releasing security updates for IE11 during Windows 10's entire lifetime. It is also the only browser shipping with the current Server editions. So I would argue that immortal would be a more accurate term.

If you trust the signed source code there's no reason you shouldn't trust the signed binary - unless you have sufficient time and expertise to audit the source.

Settings > Accessibility > Direct Access > Grayscale (Tested on Lollipop - may vary on later versions)

The same can be done on Android (Lollipop and above).

> The Dutch have the lowest obesity rates in the developed world, at 8%

Source? According to [1], obesity rate in NL is 19.8%, with some other European countries being lower.

[1] https://renewbariatrics.com/obesity-rank-by-countries/

Slightly offtopic - Any suggestions for a lightweight site engine, to produce equally simple personal websites?

What compiler do you use? Almost all of them embed a compilation timestamp (which is one of the reasons reproducible builds are often a challenge).

Getting a solid 32 hours (on average) out of my low-end Samsung J3 with 3G and location always on. Had to optimize a few things to get there, though.

This one looks like a good match: https://null-byte.wonderhowto.com/how-to/hack-like-pro-hijac...

What blogging engine is this? Real nice and clean.

However keep in mind that WoSign is also used for Authenticode timestamping - so fully distrusting it might be tricky on Windows systems.

Something to be aware of: on Windows, certain third-party executables are signed with a WoSign cert. One popular example being the npcap library (part of nmap). If you distrust WoSign roots, side effects may occur upon using nmap.

If I'm not mistaken, using a Mersenne Twister in a secure application is a really bad idea.

SHA256