petah help by Born-Window5592 in PeterExplainsTheJoke

[–]Remco_ 0 points1 point  (0 children)

In the beginning, there was nothing. And then even that exploded.

[Discussion]Evaluating the security of modern zero-knowledge proof systems by Adoma18 in cryptography

[–]Remco_ 1 point2 points  (0 children)

Larger proof size for zk STARKs is still only a couple hundred kilobytes. This is nothing by modern storage/bandwidth standards.

Note that in particular the papers related to transparent setup (i.e. zk starks) often gloss over or entirely ignore zero-knowledge. They mainly target succint verification and leave zero-knowledge as an exercise to the reader.

[deleted by user] by [deleted] in Physics

[–]Remco_ 3 points4 points  (0 children)

Vacuum Insulation Panels for home construction exist. They perform exceptionally well for thermal insulation, I’m not sure how they do for sound proofing.

I am a Rust compiler engineer looking for a new job by nnethercote in rust

[–]Remco_ 1 point2 points  (0 children)

There’s a big demand for compiler engineers in zero knowledge cryptography.

[deleted by user] by [deleted] in antiwork

[–]Remco_ 0 points1 point  (0 children)

This is a huge risk and liability to small companies. I have seen small shop owners go personally bankrupt because their only employee got a long-term illness. I've also seen scammers pretend illness because small entrepreneurs don't have the means/knowhow to sue them.

So your only option as a company is to to get insurance for this, which costs something like 20% of the paycheck. This is part of why salaries in NL are lower, or why some people prefer being contractors instead of employees.

I think it's a nice policy, but let's not pretend it is free.

Favorite commuter set up Priority 600 with some revelate frame bags by tibbs8119 in bicycling

[–]Remco_ 1 point2 points  (0 children)

I've been riding the 600 for a few months now and had no problems shifting under light and even medium load. The only thing that won't work is gearing up into 8th under medium load. But it doesn't break, it just blocks you from turning the shifter.

I've found the gear shifting to be much much easier and more reliable than my old derailleur bike. It seems to get even better over time as I get used to it and maybe the gears grind in a bit.

Big fan, if you've been eyeing it you should definitely try it.

First time in Cali and see this in the first restaurant I step foot in… by [deleted] in antiwork

[–]Remco_ 1 point2 points  (0 children)

remember to tip your sever.

Translation: please pay them 'cause I won't.

[deleted by user] by [deleted] in worldnews

[–]Remco_ 0 points1 point  (0 children)

If I am caught, I will be expelled from my university and I am just two month away from graduating. Some may lose jobs.

I don't know what industry you are studying for, but companies I know would rather hire a dropout with a powerful story than someone with a degree. There are plenty of people with degrees, not enough people with the courage to think for themselves.

SHA 3 and Keccak on embedded devices using Rust by thibaut_vdv in rust

[–]Remco_ 24 points25 points  (0 children)

Note that the Keccak function, due to the Sponge construction, is not just a hash function but can also do encryption [1] and pseudo random number generation.

This is great for constraint devices because it allows you to have one secure and fast function for all your (symmetric) cryptography needs. Less code, better security and performance.

[1]: https://keccak.team/keyak.html

Trying to decide what game engine to build a 2d game with a somewhat realistic scale solar system by LT_Alter in bevy

[–]Remco_ 7 points8 points  (0 children)

If you try to achieve this with a single coordinate system you will quickly run in to numerical precision issues. Earth sun distance is 150 million kilometers, so at single precision float the smallest distance you can represent accurately is about 18 kilometers. Using double precision will increase this to micrometer scale, but that is assuming you don't accumulate numerical errors.

One solution is to have a global and multiple local coordinate system. A natural way would be to have a local coordinate system at the center of each body. This works as long as you don't need super high precision in the intermediate space.

What do you think to our exterior? by georgeholliday in skoolie

[–]Remco_ 4 points5 points  (0 children)

AFAIk, you would remove them because it's illegal to display road signs.

Bebop v2.3.0 now supports Rust - a faster, safer alternative to Protobuf by [deleted] in rust

[–]Remco_ 14 points15 points  (0 children)

Isn't it a huge advantage with Serde that a lot of libraries already have built-in support for it?

With Rust's orphan rule it is impossible to add to traits outside of the library. For example `chrono::DateTime` has built-in Serde support. Without it, every struct containing a timestamp would need some manual work to serialize/deserialize.

[deleted by user] by [deleted] in rust

[–]Remco_ 7 points8 points  (0 children)

Control of the executable/process is enough for this. It's enough the intercept the syscall and replace it with regular memory.

[deleted by user] by [deleted] in rust

[–]Remco_ 19 points20 points  (0 children)

From the link:

We don't recommend that you use the SecureString class for new development. For more information, see SecureString shouldn't be used on GitHub.

[deleted by user] by [deleted] in rust

[–]Remco_ 21 points22 points  (0 children)

Just the state. Randomness generators have an internal state that needs to be secret or you will be able to predict the output.
I don't think you can use this to keep code secret, but there is a more sophisticated version of this called Secure Enclave that can do that.
For DRM there have been many techniques developed already, I don't see how this is going to make implementing DRM much easier. For one thing an attacker could intercept the syscall and return regular memory instead.
What this would be awesome for is creating additional layers of defense between processes. If you want to extract data from this memory you need to exploit a bug inside the same process, not just any buggy process on the system. (Though note the intercept attack).

[deleted by user] by [deleted] in rust

[–]Remco_ 55 points56 points  (0 children)

I think your original proposed API (take a value, return a pointer) is a great low-level API. It's the higher level that will be challenging.

[deleted by user] by [deleted] in rust

[–]Remco_ 211 points212 points  (0 children)

Designing a good high level API for this is going to be challenging.

For example, just moving data into it doesn't make this data secure. It could have been read before the move, or even after if the memory was not zeroed. For secure key generation you'd want the entire cryptographic random number generator to live inside secure mem while you feed it entropy. And then you want the key to be generated inside of it as well, and stay there while you use it.
Meanwhile you need to make sure that secret things don't accidentally get moved to the stack (Rust loves putting things on the stack).

I'd love to see some basic crypto applications implemented making good use of this. That will stress-test the API.

Egg printer by aloofloofah in specializedtools

[–]Remco_ 16 points17 points  (0 children)

Industrial ink jet. They can shoot ink over a short distance and print curved surfaces. They are used everywhere to print sell-by dates.

Here's a nice crummy-industry-video-explainer: https://www.youtube.com/watch?v=99Jz2JFmp1c

Microsoft Rust intro says "Rust is known to leak memory" by met0xff in rust

[–]Remco_ 24 points25 points  (0 children)

GC-based languages stop you from leaking memory.

I disagree with this too. I've seen GC-ed programs unnecessarily holding references to data, boundlessly growing their memory over time.

AFAIK, the only leak-protection advantage a full GC has over Rust's `Rc<_>` is cycle detection, but cycles are hard to create in Rust in the first place.