iii
@iii@mander.xyz
- Comment on Fast, private and secure (pick three): Introducing CRLite in Firefox | The Mozilla Blog 1 day ago:
Ribbon filters have O(1) query times and save roughly 1/3 of memory compared with Bloom filters.
From the facebook paper.
Ribbon filters are constructed by solving a linear system given by hash functions applied to a set of keys. Each row in the linear system expresses that querying as some key, which involves XOR-ing the values at some set of array indices, must yield a prescribed value to indicate it is “in” the set of keys.
What mozilla did is optimise this datastructure specifically for certificates.
- Comment on Fast, private and secure (pick three): Introducing CRLite in Firefox | The Mozilla Blog 1 day ago:
Quite impressive
CRLite is a low-bandwidth, low-latency, privacy-preserving mechanism for distributing certificate revocation data. A CRLite aggregator periodically encodes revocation data into a compact static hash set, or membership test, which can can be downloaded by clients and queried privately. We present a novel data-structure for membership tests, which we call a clubcard, and we evaluate the encoding efficiency of clubcards using data from Mozilla’s CRLite infrastructure. As of November 2024, the WebPKI contains over 900 million valid certificates and over 8 million revoked certificates. We describe an instantiation of CRLite that encodes the revocation status of these certificates in a 6.7 MB package. This is 54% smaller than the original instantiation of CRLite presented at the 2017 IEEE Symposium on Security and Privacy, and it is 21% smaller than the lower bound claimed in that work. A sequence of clubcards can encode a dynamic dataset like the WebPKI revocation set. Using data from late 2024 again, we find that clubcards encoding 6 hour delta updates to the WebPKI can be compressed to 26.8 kB on average—a size that makes CRLite truly practical.
- Comment on The World Will Enter a 15-Year AI Dystopia in 2027, Former Google Exec Says 1 week ago:
There’s only 2 arguments in the article as far as I can tell, and they’re not novel:
- “AI”’s disruption of the labor market.
- “AI” as magnifier of existing problems: fake news, scamming, military applications, domestic surveillance.
- Comment on Texas enacts age-verification law for app stores 2 months ago:
“For the children”
- Comment on Google, antitrust enforcement and the future of European digital sovereignty. 4 months ago:
I work in the sector
- Comment on Google, antitrust enforcement and the future of European digital sovereignty. 4 months ago:
EU has been for a long time investing in innovation
Small copies of existing products aren’t novelty nor innovation.
- Comment on Google, antitrust enforcement and the future of European digital sovereignty. 4 months ago:
Tech companies, and the EU today imports 80% of its digital technology. In September 2024, the Draghi Report issued a stark warning to bloc leaders, (…) Strong measures from the White House in retaliation for European antitrust and regulatory enforcement might just give this process additional impetus. President Trump cannot make European tech great again, because it never was great. But his policies may unintentionally help make it so.
Doubt it. EU is a centrally planned economy, which is antithetical to innovation. The mechanisms they employ (high taxes on every company, then subsidies for select large employers with established lobbying interest), makes sure that novel ideas are better of elsewhere.
Rather a slowed decline, than having to adapt to a changing world.
- Comment on European Parliament tells staff to use three US communication services for security reasons 5 months ago:
(1) MS teams
(2) Cisco jabber
(3) signal - Comment on Microsoft is cracking down on people upgrading to Windows 11 on unsupported hardware 6 months ago:
2025 year of the linux desktop I tell ya
- Comment on small upgrade to my steam deck 7 months ago:
Probably option 1
- Comment on small upgrade to my steam deck 7 months ago:
How did you take this picture? 🤔
- Comment on EU puts TikTok on watch over election security 8 months ago:
“Widespread concern”?
I think it’s mostly politicians that are concerned.
- Comment on Netflix used to not have ads, now it’s ‘celebrating’ two years with them 9 months ago:
There’s dozens of us
- Comment on Law enforcement operation takes down 22,000 malicious IP addresses worldwide 9 months ago:
And servers that use dynamic IPs
- Comment on Law enforcement operation takes down 22,000 malicious IP addresses worldwide 9 months ago:
Let me unplug my router, then plug it back in. I’ll have a new IP address.
This is stupid reporting.
- Comment on Law enforcement operation takes down 22,000 malicious IP addresses worldwide 9 months ago:
Law enforcement took down 1 000 addresses.
That title doesn’t make any sense.