@atoponce@fosstodon.org
@atoponce@fosstodon.org avatar

atoponce

@atoponce@fosstodon.org

MSCSIA, cryptography, security, locksport, Linux, programming, mathematics, amateur radio, Buddhism, running, anime, and bibliophilia.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

atoponce, to running
@atoponce@fosstodon.org avatar

#Running the Ogden #HalfMarathon tomorrow.

I've been training to hit 1:25 since my half marathon at St. George last October. My PR is 1:29.

Unfortunately, the training hasn't gone to plan. Despite running hills, threshold intervals, long tempos, and lots of slow easy runs, the best I can probably hope for is 1:28.

However, this course is more difficult having about 1/3 the elevation drop of St. George and some rolling hills. 1:28 would mean a significant fitness improvement.

Here we go.

Infographic showing key performance metrics for running from October 2023 to May 2024. Pace has improved by 0:25 min/mile. Power has improved by 27 watts. VO2 max has improved by 5 mL/kg/min.

atoponce, to running
@atoponce@fosstodon.org avatar

So, this is the first thread I need to dump out of my head.

About a year or so ago, I started qualifying what effort meant while in the run. There are essentially four basic models:

  • RPE
  • Heart rate
  • Pace
  • Power

So I put this infographic together as a simple way to qualify effort.

It uses the popular 5-zone paradigm and standardizes on a field test based on what's referred to as "crest load"—the race pace you can sustain for 40 minutes.

https://imgur.com/a/7CYGOBm

1/n

atoponce, to mastodon
@atoponce@fosstodon.org avatar

Is there a instance dedicated to amateur ? Races, training, etc.

I need to get some thoughts and opinions on training and racing out of my head. I could post them here, but this instance is primarily dedicated to Free Software. Most of my followers are probably either expecting posts related to that or cybersecurity, math, science, cryptography, etc. IE, not running.

Posting to a fitness-dedicated instance probably makes the most sense. Or setting up a blog.

atoponce,
@atoponce@fosstodon.org avatar

@oliviersaraja If you search my timeline, you'll see I've posted intermittently my training and races. But there are some other things I want to discuss that would come up a little more frequently than in the past.

This would possibly turn my timeline into less of a security and software focused timeline, to a more "general" microblog.

Maybe mastodon.social would be the place to set up that account now that I think about it.

atoponce, to random
@atoponce@fosstodon.org avatar

Hey @bitwarden, your passphrase strength game needs work (unsurprisingly).

https://bitwarden.com/passphrase-strength-game/

Screenshot of the passphrase strength game showing "faster higher stronger" as the passphrase. The game claims it would take "centuries" to crack requiring 884.2 trillion guesses.
Screenshot of the passphrase strength game showing "death before dishonor" as the passphrase. The game claims it would take "centuries" to crack requiring 188 trillion guesses.

atoponce,
@atoponce@fosstodon.org avatar

@bitwarden Where to begin?

The first is that this is a password strength meter, and they should not be built. Troy Hunt agrees:

https://www.troyhunt.com/password-strength-indicators-help-people-make-dumb-choices/

Instead, this "game" isn't educating users about why randomness is critical to password security, Instead, it's spreading common misconceptions about password strength through an entertaining game.

As demonstrated, it's not difficult to find trivial 3-word phrases that are obviously weak, but your game says are strong.

1/2

atoponce, to vim
@atoponce@fosstodon.org avatar

I know a joke about . jk

atoponce, to linux
@atoponce@fosstodon.org avatar

Just sent in my first patch to the kernel.

This changes the kernel CSPRNG from ChaCha20 to ChaCha8 providing ~2x performance improvement without sacrificing security.

https://lore.kernel.org/lkml/20240429134942.2873253-1-aaron.toponce@gmail.com/T/#u

atoponce,
@atoponce@fosstodon.org avatar

Got some push back on my kernel patch, which I expected, so I argued my position. Curious to see if others chime in and where the discussion goes, if anywhere. So far though, I would say my patch looks like it probably won't get implemented.

atoponce,
@atoponce@fosstodon.org avatar

Ted Ts'o thinks I'm a shill sent by a nation state, ala Jia Tan of xz infamy, to weaken the RNG. Talk about an immature knee-jerk. Heh.

https://lore.kernel.org/lkml/20240429134942.2873253-1-aaron.toponce@gmail.com/T/#m286677449488f1e0195ba81234e47090a8a3474a

atoponce, to random
@atoponce@fosstodon.org avatar

Passkeys are indeed a shattered dream. Everything in this post is spot on with my experience using them.

In theory, I love the idea. In practice, it's a horrible, horrible, horrible UX.

I'll stick with + security keys/TOTP until this mess gets cleaned up.

https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

atoponce, to random
@atoponce@fosstodon.org avatar

Found a wasp in the server room. Escorted them outside since they didn't have authorized access.

The wasp looked just as confused as I was.

atoponce, to programming
@atoponce@fosstodon.org avatar

Writing good code > your choice of IDE

#programming

atoponce, to math
@atoponce@fosstodon.org avatar

If you keep exponentiating by 2, how long until you reach infinity?

atoponce, to privacy
@atoponce@fosstodon.org avatar

Friends don't let friends use Discord.

Message History of 600 Million Discord Users Can be Accessed For $5

https://80.lv/articles/message-history-of-600-million-discord-users-can-be-accessed-for-usd5/

atoponce, to math
@atoponce@fosstodon.org avatar

atoponce, to random
@atoponce@fosstodon.org avatar

The Mad Dog 357 hot sauce comes with a bullet keychain. I've had this for a while now and had no idea that the bullet contained a little tasting spoon inside.

BWAHAHAHA!

"Feeling tough punk? Dip this spoon into the bottle and have a taste."

image/jpeg

atoponce, to emacs
@atoponce@fosstodon.org avatar

TIL Richard Stallman stole source code from Gosling EMACS, replaced the license headers with his own, and integrated it into his . Over time he eventually replaced all the original code, but only after initially replacing the license headers first.

Why wasn't he sued? How do you sue a homeless man? What do you sue him for?

atoponce,
@atoponce@fosstodon.org avatar

@Mehrad It was a rhetorical question.

atoponce, to linux
@atoponce@fosstodon.org avatar

Never underestimate neckbeards.

atoponce, to programming
@atoponce@fosstodon.org avatar

I had a dream last night about ChaCha20.

> "Here's your 512-bit state array."
> ...
> "Don't forget your quarter round."
> ...
> "Not 20 quarter rounds, 80 you nitwit!"
> ...
> "Yes, increment the counter."
> ...
> "Stop using the all-zero key."
> ...
> "An all-zero nonce isn't any better."

I've been putting it together in JavaScript, just because, so it is on my mind.

atoponce,
@atoponce@fosstodon.org avatar

Speaking of which, why did RFC 8439 pick the nonce as "00:00:00:09:00:00:00:4a:00:00:00:00" when verifying test vectors for the block function?

https://datatracker.ietf.org/doc/html/rfc8439#section-2.3.2

Similarly, "00:00:00:00:00:00:00:4a:00:00:00:00" when verifying test vectors for the encryption function?

https://datatracker.ietf.org/doc/html/rfc8439#section-2.4.2

0x4a is "J" in ASCII. Significant?

atoponce, to random
@atoponce@fosstodon.org avatar

Red Hat wrote an Nvidia driver in Rust called "Nova"

https://lore.kernel.org/dri-devel/Zfsj0_tb-0-tNrJy@cassiopeiae/

atoponce, to random
@atoponce@fosstodon.org avatar

Here's a fun way to comment your C# source code: start it with "https://"

Yup. A URL.

The C# compiler sees "https:" as an unused go-to label and "//" starts a comment for the rest of the line

https://this.is.totally.a.valid.comment.in.c#

atoponce, to random
@atoponce@fosstodon.org avatar

If buying isn't owning, piracy isn't stealing.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • anitta
  • khanakhh
  • mdbf
  • InstantRegret
  • Durango
  • Youngstown
  • rosin
  • slotface
  • thenastyranch
  • osvaldo12
  • ngwrru68w68
  • kavyap
  • cisconetworking
  • DreamBathrooms
  • megavids
  • magazineikmin
  • cubers
  • vwfavf
  • modclub
  • everett
  • ethstaker
  • normalnudes
  • tacticalgear
  • tester
  • provamag3
  • GTA5RPClips
  • Leos
  • JUstTest
  • All magazines
    •