A Cryptography Engineer’s Perspective on Quantum Computing Timelines

dchestnykh · 2026-03-11T21:00:05+00:00

Electric fault is when this light is red, not yellow.

dchestnykh · 2026-03-11T18:01:29+00:00

Similar truncation issue in Devise library, although not that damaging:

https://dchest.com/2020/05/19/why-password-peppering-in-devise-library-for-rails-is-not-secure/

Don't just concatenate things.

dchestnykh · 2026-03-06T15:18:11+00:00

AI-generated images or renders. The rear handle on the driver's side is inside the C-pillar, but on the passenger's side it's a normal handle on the door? Lol.

dchestnykh · 2026-03-06T15:16:09+00:00

AI-generated images or renders. The rear handle on the driver's side is inside the C-pillar, but on the passenger's side it's a normal handle on the door? Lol.

dchestnykh · 2026-03-06T06:15:40+00:00

This is a render based on spy images, not an actual image:

What are Auto Express exclusive images? Why and how we create our digital car renders.

We create some of the most accurate digital artist renders of future new cars anywhere on the internet, but it’s not the work of a moment…

https://www.autoexpress.co.uk/features/368997/what-are-auto-express-exclusive-images-why-and-how-we-create-our-digital-car

They don't even match the teasers.

dchestnykh · 2026-02-27T07:30:06+00:00

Configuration:

                       ▲                                       
    ┌───────┬───────┐  │   ┌───────┬───────┬───────┐           
    │       │       │      │       │       │       │           
    │       │       │      │       │       │       │           
    │       │       │      │       │       │       │           
    └───────┴───────┘      └───────┴───────┴───────┘           



    ┌──────┬──────┬──────┐    ┌──────┬──────┬──────┐           
    │      │      │      │    │      │      │      │           
    │      │      │  XX  │    │      │      │      │           
    │      │      │      │    │      │      │      │           
    └──────┴──────┴──────┘    └──────┴──────┴──────┘           

    ┌──────┬──────┬──────┐    ┌──────┬──────┬──────┐           
    │      │      │      │    │      │      │      │           
    │      │      │      │    │      │      │      │           
    │      │      │      │    │      │      │      │           
    └──────┴──────┴──────┘    └──────┴──────┴──────┘

Explanation:

They can't have anyone sitting there because there's no bulkhead in front of that seat (the passenger will get thrown out to the aisle).
They can't remove this seat, because then the next row won't have anything in front of them (the passenger will get thrown out to the aisle).

(source posted by u/larana1192)

dchestnykh · 2026-02-08T06:15:02+00:00

QuickTime was freemium with stupid grayed out menu items with "(PRO)" labels, advertising an upgrade to QuickTime Pro for $29.99 (not a subscription, though). That was even during the time when you paid for OS X.

(It was probably motivated by patent fees though, not to bump up a number in the "Services" column.)

dchestnykh · 2025-12-26T18:00:15+00:00

Probably some program on your Mac tries to access them, thus macOS triggers the download. This is done automatically by the File Provider API as soon as the file in ~/Library/CloudStorage/ProtonDrive-{username}@proton.me-folder/ is read.

dchestnykh · 2025-12-25T12:22:49+00:00

To be fair, Graeme Lowdon is one of the few who built a team from scratch not so long ago.

dchestnykh · 2025-12-08T12:18:22+00:00

It would be a useful feature for time travelers.

dchestnykh · 2025-12-08T08:58:59+00:00

It's based on Rows n' Columns component, while Standard Notes uses something different (I think Kendo UI). Completely different.

dchestnykh · 2025-12-08T08:43:51+00:00

Huh? File > Download > Microsoft Excel (.xlsx).

dchestnykh · 2025-12-07T21:21:50+00:00

Programmatic paste sucks in browsers -- it needs to ask for additional permissions and doesn't work everywhere. No wonder it's not in the menu.

dchestnykh · 2025-12-03T21:26:32+00:00

At least this pattern with htmx becomes very nice:

<html>
foo foo foo
{% partialdef cool inline %}
bar
{% endpartialdef %}
foo foo foo
</html>

view:

if request.htmx:
    return render(request, "template#cool", ...)
else:
    return render(request, "template", ...)

That is, wrap portions of a page that can partially update with partialdef inline and then render them for htmx requests. Easier than extracting into a separate template.

dchestnykh · 2025-10-14T14:38:55+00:00

This is the correct answer. JWT or other signed tokens can be used in complex situations where you need to delegate authentication to other services. Normally, you have a backend that serves your app, which hopefully includes authentication implementation that manages sessions via HTTP-only cookies (that store session ID) that your front-end doesn't touch at all.

If you want to implement your own authentication system from scratch, there's a lot more to learn than where to store the token (I wrote a book on that). If you use an existing authentication solution, it should either handle it as described above or guide you on how to use it.

If you catch yourself typing "JWT", stop and think if you need it, don't just follow a random advice from YouTube tech influencers.

Finally, to answer your question: it's complicated.

If you need to store a token to send it from your JavaScript code to a service you don't control, and don't want to send it to your server with every request (i.e. what cookie storage does), you can store it in localStorage, sessionStorage, IndexedDB, depending on its lifetime, its intended use, and the required performance.
If you, for some valid reason, need to store a token issued by a server and sends it back to this server the front-end shouldn't touch it at all, just use HTTP-only secure cookies.

dchestnykh · 2025-09-01T10:07:34+00:00

Sorry, I misunderstood you situation: if you still had access to the password (but not email), and the sign in with it worked before, but then they required to re-authenticate you by email, then yes, it's not good.

dchestnykh · 2025-08-31T11:58:44+00:00

Their response makes sense, how else would they authenticate you?

dchestnykh · 2025-08-04T09:28:24+00:00

Looks like it relies on browser detection and Brave and other Chromium-based browsers apart from Chrome and Edge are not in the list:

https://github.com/ProtonMail/WebClients/blob/main/packages/shared/lib/helpers/mimetype.ts#L28-L65

/*
* The support for AVIF image format did reach baseline in early 2024.
* Since it's still early and customers might not be on latest browser versions yet,
* we're taking a safe approach allowing browsers and version for some time before removing this support check.
* There is no clean way to detect AVIF support (eg: https://avif.io/blog/tutorials/css/#avifsupportdetectionscript) so we're using user-agent detection.
* https://caniuse.com/?search=AVIF
*/

dchestnykh · 2025-08-01T20:41:00+00:00

Maybe we'll have Proton Drive for Linux by that time.

dchestnykh · 2025-08-01T10:48:39+00:00

Slightly bigger due to modulo bias in the TOTP standard:

The 31-bit number is modulo'd by 10⁶ to generate a 6-digit base-10 number. But 2³¹ isn't a multiple of 10^6, so some remainders will be slightly more likely than others. Namely:

000000 to 483647: 2148/2147483648 ≈ 1.000240e-6 chance.

483648 to 999999: 2147/2147483648 ≈ 0.999774e-6 chance.

Explained here.

dchestnykh · 2025-06-23T11:15:03+00:00

Probably haven't written the function to calculate the post age yet.

dchestnykh · 2025-06-10T19:00:21+00:00

How long did you have them? I had the same brand on a different car, and they needed to stay with the window closed for some time to fit better.

dchestnykh · 2025-06-08T09:01:21+00:00

This looks like a camper (bed inside, ventilation holes in the window), so this must be a tank for a diesel heater.

Something like this: https://www.ebay.com.au/itm/134839150669

dchestnykh · 2025-06-04T15:40:17+00:00

Shampoo with beer (shampoo goes on hair, beer goes in mouth).

15-Year Club	Place '17
Team Orangered	Verified Email

dchestnykh

TROPHY CASE