大喵喵和小喵喵的转发频道。 No endorsement implied投喂请前往附属群
Please stop hashing the public key first (or: ML-DSA's µ annoys me) Comments via blog.erincandescent.net via tris
what I read: 1pass stream parser + verifier is hard to write with sign(hash(pk || msg), sk)
但是实践中感觉这不是个问题，比如 ClientHello 在 quic 里面本来就是有 bounded size 的，也不大
而且用现代哈希算法的话，pk 放 msg 后面问题应该也不大（文章里有提 len ext atk）
Forwarded From Lobste.rs
Please stop hashing the public key first (or: ML-DSA's µ annoys me)
Comments
via blog.erincandescent.net via tris
blog.erincandescent.net
Please stop hashing the public key first (or: ML-DSA's µ annoys me)A goal one might have when designing a signing algorithm is to prevent signing a message one has not seen. Signing a message one hasn't seen might sound difficult at first, but most classical signature algorithms , as commonly used, sign a hash of the message…
Forwarded From Hacker News
11 year old unsoundness bugs found in Rust borrow checker (🔥 Score: 156+ in 1 hour)
Link: https://readhacker.news/s/7784d
Comments: https://readhacker.news/c/7784d
GitHub
struct's lifetime requirements can be bypassed via covariant field assignment · Issue #164250 · rust-lang/rustIn the following code: use std::sync::Mutex; static KEPT: Mutex<Vec<Box<dyn std::any::Any + Send>>> = Mutex::new(Vec::new()); struct Q<T: 'static + Send>(Option<T>...
https://x.com/n_emduck/status/2109603436014821532
X (formerly Twitter)
emduck (@n_emduck) on X#Artnose
Forwarded From Hacker News (yahnc_bot)
Codex CLI installs a persistent, self-updating background daemon by default https://github.com/openai/codex/issues/48195
GitHub
CLI: make `daemon_auto_start` opt-in — a persistent, self-updating background daemon shouldn't be the default · Issue #48195 ·…What variant of Codex are you using? CLI — 0.157.0, installed via npm install -g @openai/codex, Linux (WSL2) What feature would you like to see? Please make daemon_auto_start opt-in (default false)...
https://youtu.be/TumxO2glmPQ
就业选择+1
YouTube
Why robots still can't pick strawberriesAt Wilkin & Sons in Tiptree, a city boy gets impressed by agriculture, and meets some robots that work better than others. | AD: 💼 Find a fulfilling career that also helps the world: https://80000hours.org/tom | 🗺️ England series map: https://www.tomscott.com/england/…
https://x.com/manidrawings/status/2109120553026285721
X (formerly Twitter)
mani🖌️🎨 (@manidrawings) on Xひっぱって起こしてぇ～ #鏡音リン
https://x.com/SONOJINOJI/status/2109271971146187234
X (formerly Twitter)
その字＠SONOJI (@SONOJINOJI) on XOC
一些暴论：我很讨厌根据 stdout 是不是一个 PTY 去决定输出格式的程序。ls 是个典型例子。今天发现 sqlite 也是，直接写 inline query 的话如果输出到 terminal 里面，会做自动截断
这个环境下写脚本太痛苦了
Forwarded From Hacker News (yahnc_bot)
LineageOS 24.0 https://lineageos.org/Changelog-32/
Lineage
Changelog 32 - Slick Seventeen, Awesome Applications, Universal USB ToolsYou know what's funnier than 24?
https://github.com/FreneticLLC/KeyboardChatterBlocker
洗过机械键盘后就一直有这样的问题，今天总算忍不住了，修一下
GitHub
GitHub - FreneticLLC/KeyboardChatterBlocker: A handy quick tool for blocking mechanical keyboard chatter.A handy quick tool for blocking mechanical keyboard chatter. - FreneticLLC/KeyboardChatterBlocker
https://sqlite.org/vec1/doc/trunk/doc/vec1.md
Vec1 is an SQLite extension that provides approximate nearest-neighbor (ANN) vector search using SQLite's virtual table interface. Euclidean (L2) and cosine distances are supported. Vec1 is implemented in portable C and has no external dependencies. It uses AVX2 on x86 and NEON on ARM.
Vec1 uses IVFADC (Inverted File with Asymmetric Distance Computation) with OPQ (Optimized Product Quantization).
https://x.com/VRC_mio_oim/status/2108860105106284924
X (formerly Twitter)
mio_oim (@VRC_mio_oim) on X˖ ݁✦.エクちゃんお誕生日おめでとう.✦ ݁˖
#Eku3D
Forwarded From Solidot
Cloudflare 收购 Deno，Deno 停止开发
2026-10-10 14:01 by 最后的守护者
Cloudflare 收购了开源 JS 运行时项目 Deno，Deno 宣布该项目将停止开发，但会继续维护一年时间，期间会释出 bug 修复和安全更新，但不会有新功能，一年之后终止支持。它欢迎其他人接手该项目。使用 Deno 的一个知名项目是 YouTube 视频下载工具 yt-dlp，它是在 2025 年宣布选择 Deno 作为其 JavaScript 运行时，但随着 Deno 终止支持它可能需要再次选择新的运行时。
https://deno.com/blog/cloudflare
#开源
Forwarded From Hacker News (yahnc_bot)
Triple-A Minesweeper https://minesweeper.mikelacher.com/
Mikelacher
Triple-A MinesweeperSweep to survive in the action-packed, AAA reboot of the classic puzzle game.
https://x.com/k4rakaru/status/2108180985716326686
X (formerly Twitter)
Caracal (@k4rakaru) on X#絵かゆ
#holoctober Day 8
兴业银行：你这个（bofa）的账号被总行列入风险名单了，可能是虚拟号什么的，兴业是肯定汇不出去了，线下也不行，也终身无法移出。 我就不能理解了，我在中国银行系统里第一次用这个被付款账户，就被标记敏感，我线下能拿着我银行卡和开户证明去，也没办法移出黑名单，兴业怎么这么多人吹的？
电话客服态度也不好，业务水平也不行。但是客服提供了一个很好的建议，“建议用他行”
兴业银行：你这个（bofa）的账号被总行列入风险名单了，可能是虚拟号什么的，兴业是肯定汇不出去了，线下也不行，也终身无法移出。
我就不能理解了，我在中国银行系统里第一次用这个被付款账户，就被标记敏感，我线下能拿着我银行卡和开户证明去，也没办法移出黑名单，兴业怎么这么多人吹的？
https://x.com/MIT/status/2107945104321208752
X (formerly Twitter)
Massachusetts Institute of Technology (MIT) (@MIT) on XWe’ve lost an icon. Margaret Hamilton, a computer science pioneer best known for her work at MIT leading development of the flight software for the Apollo missions to the moon, has died at 90. Rea…
