naná 🌸

recommendation for fast DNS providers that aren't cloudflare

i just upgraded without any problem. nice work!
www.debian.org/distrib/

ive been at amy and her wife's house for like one hour and they're already bickering about text editors.

many users on this website would benefit from decentralized social media network systems

intriguing

"how many B's in blueberry" entered in a Python REPL, causing a syntax error

lol Python is so useless

This programming thing is clearly a bubble.

"More Than a Game": An Autistic Perspective on the Power of Video Gaming - Reframing Autism The structured world of video games can offer many of our community refuge, routine and opportunities for success and connection in a safe environment. In this heartfelt guest blog, Suzanne Roman shar...

they hate gamers... do they hate autistic people too?

Release 6 · GrapheneOS/Info Notable changes in version 6: support some relative URLs in changelogs remove cryptocurrency fee recommendations to match current donation page rename Release Notes to Releases where applicable en...

GrapheneOS Info app version 6 released:

github.com/GrapheneOS/I...

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

discuss.grapheneos.org/d/24741-grap...

#GrapheneOS #privacy #security

i won again by only updating & restarting every 5 moons.

Text that reads: A: n the context of security vulnerability disclosure, the term "embargo" refers to an agreed-upon period of time during which details of a discovered vulnerability are kept confidential. This allows affected parties (such as software vendors, maintainers, or downstream distributions) time to prepare and release patches or mitigations before the vulnerability becomes public. The list is public, hence agreed immediately to disclosure or the 30-days confidential period past invaine (or just a template). Anyway, good time to list those systems that are impacted and those that are not affected by this vulnerability.

A security researcher has accidentally published the details of a BusyBox bug that can be abused to crash IoT devices, gain root privileges, or plant persistent backdoors

lists.busybox.net/pipermail/bu...

i remain much more concerned about what humans will do to each other with AI than I am about what AI itself will do to humans

i don't get how dutch people can be xenophobic. like, brother, you speak dutch.

Abstract. This work presents an exhaustive analysis of QSF, the KEM combiner used by X-Wing (Communications in Cryptology 1(1), 2024). While the X-Wing paper focuses on the applicability of QSF for combining ML-KEM-768 with X25519, we discuss its applicability for combining other post-quantum KEM with other instantiations of ECDH. To this end, we establish simple conditions that allow one to check whether a KEM is compatible with QSF by proving ciphertext second‑preimage resistance C2PRI for several variants of the Fujisaki–Okamoto (FO) transform. Applying these results to post-quantum KEMs that are either standardized or under consideration for standardization, we show that QSF can also be used with all of these, including ML-KEM-1024, (e)FrodoKEM, HQC, Classic McEliece, and sntrup. We also present QSI, a variation of QSF and show that any two KEM can be combined by hashing their concatenated keys. The result is a hybrid KEM which is IND-CCA-secure as long as one of the KEM is IND-CCA- and the other C2PRI-secure. Finally, we also analyze QSF and QSI regarding their preservation of the recently introduced family of binding properties for KEM.

Image showing part 2 of abstract.

Starfighters − on the general applicability of X-Wing (Deirdre Connolly, Kathrin Hövelmanns, Andreas Hülsing, Stavros Kousidis, Matthias Meijers) ia.cr/2025/1397

in fact, we often publish our own phone numbers online and even include them on our resumes, which we send to various companies, and we never know where they'll end up.

Remember that your password and two-factor authentication will remain active in the event of an unauthorized access *attempt* using your phone number.

Fascinating cross-border impact of the UK’s censorious laws.

I’m really glad we rolled out TLS and built for an untrusted network over the past decade, given how much traffic will have to start flowing over commercial VPNs.

some governments publish their citizens' official identification numbers online.

while it's an invasion of privacy, i honestly don't see anything *extremely serious* about knowing someone's phone number.

A cat donut on my floor

A pair of glowing eyes in the donut

Kit inside the donut, looking at me

The Creature in the Donut

a kind of authoritarian, "left-wing" speech police.

very cute.

The gaze of a contented cat.
#cats

"bitstuffing" basically, it gets shot in the foot by its own complexity.

with all due respect, but i disagree.

the ideal social network resembles nostr:

- no CEOs
- no presidents
- no algorithms like those that exist on bsky, twitter, tiktok etc.
- no centralized servers

as a leftist, i hope the left occupies nostr.

just you and your keys, no algorithms or PDSs.

my God, are they worried about improving the Discover Feed *algorithms*? are they serious? isn't there anything more important?

do they know that every reasonably sane user has already disabled this feed?

all this decentralization discourse and y'all are forgetting that tomatoes and green peppers are both technically fruits.

*not* decentralized.

gotta love how minecraft skyblock tech always inevitably turns into maximizing the suffering of spawnable creatures

▘̶̪̞̖͙̟̖̯̘͗▒̴̲̰̟̙̻͋ͅ╣̷̭̰̤̀̅̈́̂̍▝̸͎͕̝̒̕▗̶̨̬̥͉̮̰̲̙͕▀̵̖̜͚̳͉̌̀░̴̠̹̺͕͖̦̠̱͆▒̵̠̳͇̗̿̄▌̵͙̝̞̗͓̄͑̽̇▞̴̨̣̰̝̖͌͒̽̓▛̷̯̳͎͕̮͉̬̱̞░̷͖̠͙͎̩̫͍̲̺

i've got an agonizing headache and the ibuprofen did jack shit

hard to say which one is ethically worse between the mobile gaming industry and the casino industry.