divVerent

Software engineer. Mathematics major. All programming languages are bad.

In free time, game developer; main titles: #AAAAXY, #Xonotic, #Nexuiz.

Super Mario Maker troll fan (i.e. I enjoy watching streamers suffer).

Secondary: @[email protected]

oblomki: https://github.com/divVerent/oblomki/
x: 9
languages: English German Latin Go C++ C TypeScript Haskell Shell Perl Python Ruby Assembler BASIC Pascal Prolog HQ9+
web: https://divverent.github.io
badapple-linux-text-console-only: curl -N http://rm.cloudns.org:21576
badapple-nosound: curl -N http://rm.cloudns.org:21577
latin: quidquid LaTeXe dictum sit, altum videtur
purger: http://github.com/divVerent/misspurge
brlogenshfegle: doesn't lol

🔗 bridged from [email protected] (fediverse)

Public Key

npub1w99yvucwnzh3ju6adrjancd6p4puddmpk4ry3n6wwv2fyd4m05qqkvw4fd

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs8zjjxwv8f3tcewdwk3eweuxaq6s7xkasm23jgea88x9yjx6ah6qqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsgmpjz7

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1w99yvucwnzh3ju6adrjancd6p4puddmpk4ry3n6wwv2fyd4m05qqkvw4fd

Show more details

Last Notes

2026-10-28 11:18:54 GMT

@[email protected] @[email protected] Unless the 300 is actually 300000/1001~ 299.7003

2026-10-28 05:27:21 GMT

@[email protected] They absolutely do have a choice.
They can surrender and then likely not die.
They can also decide, if they die anyway, may as well turn around and shoot their commander...

2026-10-28 04:11:06 GMT

@[email protected] Use a sharpie and label it "Galaxy Note 7".

2026-10-27 07:33:55 GMT

@[email protected] Heißt das, ich darf meinen Handy-Hotspot nicht mehr "dQw4w9WgXcQ" nennen?

2026-10-26 20:05:39 GMT

@[email protected] Und ich halte Kriegsverbrecher in Den Haag für notwendig.
Passiert aber auch nicht.
Wir alle haben unsere Träume...

2026-10-26 06:42:16 GMT

Das hieß mal GeldKarte..

2026-10-26 04:59:26 GMT

@[email protected] @npub193d…ykm5 Ganz ehrlich, in so einer Situation ist es rational, sich zu bewaffnen. UND gleichzeitig Solarpunk zu bauen... denn was nützt dir dein Solar-Zeug, wenn der Großausfall kommt und du der einzige bist mit Strom und warmem Wasser - und die ganze Nachbarschaft weiß auch noch, dass du unbewaffnet bist?
Da wird dann doch sofort geplündert und umgebracht...
Die Nachbarn sollen zumindest denken, du seist bewaffnet, dann erzählen sie viel weniger weiter von deinen Solarerfolgen.

2026-10-26 04:42:49 GMT

@[email protected] How did you manage to find what was broken with multiplication? That must have been an insane debugging session, or a bad solder joint.

2026-10-26 04:35:13 GMT

@[email protected] Heu-te...

2026-10-25 14:22:39 GMT

If you ever wondered who is really running the #USA... #uspol
(and yes, this comes back full circle, as their English names refer to a famous US criminal, and well, look who they are now...)
Also, if you read this and legally can #vote in the US, do so. It may not change a lot, but can we get at least a slowdown of the destruction?
https://minio.libranet.de/misskey-de/msky/fe1302e6-10ed-489f-bdbe-fc1bb0dd6363.webp

2026-10-25 14:00:06 GMT

@[email protected] The worst part is that it's almost a good thing. Democratizing the political process by giving everyone the means to make a political meme that might go viral? That's a GOOD thing!
But that actually was kinda done before. There was tacit acceptance of MS Paint style crap which literally anyone can make. Now that AI is there, daring to post MS Paint stuff would be pointless.
I mean... just look at this awful non-AI creation... I even failed at picking at first who is who so I had to mirror it... but even apart from that, with that low quality no one's gonna laugh anymore, right?
https://minio.libranet.de/misskey-de/msky/e14cde95-5f45-41ae-a7f0-e6edfb0e92b9.webp

2026-10-25 06:16:29 GMT

Ja... da kommt aber noch ein anderer Effekt dazu.
Medien verstärken das Extreme.
Was ist also billiger - im eigenen Land viele Millionen von Leuten an Wasserversorger anschließen, die man erst bauen muss - oder einfach paar Bomben werfen, im Fernsehen als großen Sieg darstellen, und bei der Gelegenheit immer mal wieder Videos von "frierenden Europäern" zeigen (die akzentfreies Russisch sprechen, aber soweit denkt der Zuschauer nicht)?
Menge X an Wert zu zerstören ist nunmal schneller und einfacher als Menge X an Wert zu schaffen...

2026-10-25 06:09:26 GMT

@[email protected] "and make the Mexicans pay for it"
Ja, einfach die USA so schlimm machen, dass Mexiko aus Eigeninteresse die Mauer selbst baut...

2026-10-23 06:26:24 GMT

@[email protected] Bei dem Termin 2029 werden sie sich aber sicher auch...
verspäten.

2026-10-23 05:22:05 GMT

@[email protected] @[email protected] It is obvious, but does it matter? The majority of Americans voted for Putin. They wanted Putin. And got Putin.
Too bad it essentially ended NATO.

2026-10-23 05:07:59 GMT

@[email protected] Probably just vibecoded...

2026-10-23 04:56:18 GMT

@[email protected] Sie müssen ja auf Kinder schießen, denn eingehende Shaheds treffen sie mit ihren tollen Patriots nicht.
Echte 'Murikaner lesen nämlich keine Bedienungsanleitung. Sowas tun nur die Schwächlinge aus der Ukraine.

2026-10-22 18:24:18 GMT

True, but in civil matters it is. An affected person would thus have to seek damages from the company that illegally executed the sanctions, not the employee who pushed the button for the company.
If said employee did it without being told to, though, the company can then in turn recover damages from them.

2026-10-22 18:22:06 GMT

@[email protected] @[email protected] Not a crime here in Germany - companies and people generally are free to pick who they contract with. It however can be a civil matter leading to damages payments, and the EU blocking statute reaffirms and strengthens that.

2026-10-22 18:16:14 GMT

@[email protected] @[email protected] Fun fact, my iPad does it too occasionally since the last update to iPadOS 18.7.10 (yes, is an older device). I tap one app, its app icon gets darkened as usual - but then it opens another app from the same folder.
Is Apple beta'ing the vote manipulation on my iPad? Nah, probably just a bug...

2026-10-22 18:12:31 GMT

@[email protected] Und die würden ihr Geld ja trotzdem noch weiter vermehren. Mehr als 2% Rendite schaffen sie locker.
Die Steuer ist also auch für die nicht wirklich schlimm.

2026-10-22 11:48:43 GMT

@[email protected] Missed chance to include ElePHPant...
https://minio.libranet.de/misskey-de/msky/8e1cf536-e239-480b-8548-a6069a14cd39.jpg

2026-10-22 03:28:30 GMT

@[email protected] @[email protected] Another point is that in America, secrecy of the vote is not even a desired feature. US wants everyone to see what they voted. Thus the party affiliation in the voter registration. The vote itself is a charade, they could just as well just count the registrations...
except then they do not get to manipulate the outcome by putting lots of violent armed people at the polling places while also causing long lines... and voting on a work day that not everyone gets off is another factor of manipulation they do.

2026-10-22 03:25:25 GMT

@[email protected] @[email protected] Then read up on the topic from thise who designed the algorithms. The mathematics for it have been basically finished in the mid 90s.
Well, except that it now has to be rebuilt for PQC. I did find this: https://eprint.iacr.org/2026/1004

2026-10-22 03:21:18 GMT

@[email protected] @[email protected] That is what one fixes by also having a paper trail and doing manual recount for statistical siignificance, like, 10%. Plus, people trust their phones with their bank account, so is it a big leap for them to trust a vote tracking app? Currently most people do not even observe the counting, so this is "trust me bro" as well...
Still ends up saving a lot of work.
But as said, it is all moot as the voting machine manufacturers do not even use the secure voting algorithms. It is pure theory, not because electronic secure voting is impossible, but because there is no market for secure voting as non-secure voting machines already sell.

2026-10-21 18:23:00 GMT

@[email protected] I do seriously wonder how it could happen.
The private key is a random number from 0 to one less than the group order.
The most "underhanded" way I can think of is if they queried the bit length instead of the group order - but given at least in OpenSSL bit length and group order are different types, this confusion is hard to do. Maybe even called the bit length "size"...
Maybe they did it in Python or another bignum by default language? (And I am not implying bignum by default is bad, it is actually one of the few things in Python I like)

2026-10-21 18:14:47 GMT

@[email protected] Sein echter Name ist nicht Wittkoff, sondern Withoutkopf.

2026-10-21 18:14:11 GMT

@[email protected] Er denkt wohl, wenn Islamismus Nicht-Moslems unterwerfen und umbringen ist, dann ist Humanismus Tiere unterwerfen und umbringen. Beim Mampfen eines BigMac dachte er dann, oh, ich habe gerade ein Tier umgebracht, bin also ein Humanist.

2026-10-21 14:41:08 GMT

@[email protected] @[email protected] To be clear, the main issue is "what if I do not trust my own device, or the verification software I downloaded".
With paper voting the issue is similar: "what if I do not trust the poll workers".
For paper voting the solution is to become a poll worker or observer yourself. You won't be able to verify that your vote was counted right, but at least that many are.
For electronic voting, however, this same boils down to "the spec is open, learn to code and write your own verifier implementation". Or at least "use another implementation than the official one", although with that you are just replacing who to trust.
And the core issue is, some can do that, but far from everyone - whereas basically everyone can at least observe the counting and gain some confidence that way.

2026-10-21 14:34:14 GMT

@[email protected] @[email protected] I am not gonna describe the entire algorithms for this, but papers exist and it is based on standard cryptography we all already use. But a proof for every single vote that it was included in the total, without revealing its value (but with the check failing if the vote was counted for a different candidate), is a standard required feature in all those systems.
The one part I do not know whether it exists is a post-quantum variant.

2026-10-21 14:06:22 GMT

@[email protected] @[email protected] Precisely. There are simple means for those as well, and have been implemented by the IACR.
One trick e.g. is that at vote time you set a PIN (can in a 2 candidate vote even be a coin flip), and your ballot proof requires that same PIN - and with another PIN you will basically get a random result.
You can't prove to anyone how you voted as you yourself can give them a wrong PIN that will succeed but tell them the candidate you want them to see.
This is so simple, this can even be done with a printed receipt and manual addition.

2026-10-21 11:22:45 GMT

@[email protected] @[email protected] That is not substance less though, and the recent famous incident about a digital vote failing actually shows that it does work:
https://www.bbc.com/news/articles/c62vl05rz0ko
So it was a secret election, and given secrecy of the vote is one of the most important requirements of democracy, I would even say it succeeded.
But also was set up wrong, as usually one can make it so e.g. 4 out of 5 keys suffice.

2026-10-21 10:03:53 GMT

@[email protected] @[email protected] Are cryptography papers on the topic OK?
Because every single potential problem can be solved.
But AFAIK there are no finished products yet. Due to no interest, because no so secure voting can be sold for the same money...

2026-10-21 05:03:11 GMT

@[email protected] @[email protected] Maybe. Just a bit too clever for typical russian disinfo.
Especially as it would be consistent with not or badly randomizing candidate lists for display + a crappy touchscreen.
I am not an American and not in the US - any chance someone can point me at an online demonstration of the real voting machine UI, or at least trustworthy videos? Especially if of the states named here.

2026-10-21 05:00:30 GMT

@[email protected] @[email protected] There is a way to make digital voting secure.
But it is too expensive for them, and actually, the govt wants it to be broken.

2026-10-20 04:38:38 GMT

@[email protected] @[email protected] Using Ukrainian soldiers, just like Chechen soldiers have been used in Ukraine.
Ever noticed how Russia prefers sending its minority groups to the frontlines? It's not just genocide against Ukrainians - there's also internal genocide, "ethnic cleansing" going on.

2026-10-20 04:37:12 GMT

@[email protected] Also, it's not an "incentive" if he gets the gift first.

2026-10-20 04:36:12 GMT

Ganz ehrlich, ich weiß nicht einmal, ob bei einem Knochenbruch die Notaufnahme oder der ärztliche Notdienst zuständig ist.
Es ist erstmal nicht lebensbedrohlich, also der Notdienst, nicht die Notaufnahme. Aber... wenn der Notdienst nicht röntgen kann, brauche ich da gar nicht erst hinzufahren.
I.d.R. habe ich mich dann eben informiert, ob der zur Zeit zuständige Notdienst laut Website röntgt, und wenn nicht, zur Notaufnahme. So Sachen passieren nämlich nie zu normalen Zeiten....
Aber es wäre eben einfacher, wenn man einfach beides in einem Haus hätte und geschickt wird, wo man hin muss.

2026-10-20 03:39:12 GMT

Wenn es denn nur die armen weißen Männer wären.
Was passiert ist, dass die Überreichen die Medien kontrollieren, und dann wählen sogar die Schwarzen und die Mexikaner ihren Schlächter. Egal, welches Geschlecht. War in den USA super zu sehen...

2026-10-19 07:19:31 GMT

@[email protected] It is just correct. Americans voted for Putin. They wanted Putin for president. They got what they voted for.
Too bad we are all suffering from those morons.

2026-10-19 07:16:08 GMT

@[email protected] I have hope for you :) I just am too pessimistic generally. Might be just me being German.

2026-10-19 06:35:35 GMT

@[email protected] Right. I just doubt you'll actually save much work by the change. IMHO the severity triage is usually the hardest part, not the fix.

2026-10-19 06:29:25 GMT

@[email protected] I think the main thing this needs is an agreement of what is HIGH. Some hypotheticals:
Buffer overrun write of arbitrary length caused by server? Sure, we all agree on that one. Sure HIGH.
curl -O takes path name from remote, including ../, allowing for path traversal? Sure, that's HIGH.
--no-clobber ignored when the output is a dangling symlink? I am starting to have doubts.
More than 16384 long URL from command line (NOT triggerable via redirect) causes overrun? I guess here people can already disagree a lot. I'd vote for HIGH, iff it also happens via libcurl and not just in the commandline parser, MEDIUM otherwise.
Hostname is extracted wrong from the URL, leading to SSL certificates being accepted for the wrong host? Tricky... imagine https://[email protected]/foo.cab allowing an evilhost.com cert, that could be bad. OTOH I can't imagine this ever being exploitable where the attacker can't just use https://evilhost.com/ directly and thus can just skip all the effort of DNS poisoning... thus MEDIUM? But one can also argue for HIGH here, given it'd be a blatant RFC and intent violation and who knows what might happen that I just fail to think of.
So... I suppose part of this must be that curl maintainers should have a quick way to downgrade and publish, if they believe it's MEDIUM even if the report says HIGH.

2026-10-19 06:17:26 GMT

@[email protected] Rechte verwechseln Antisemitismus (also Feindlichkeit gegenüber religiösen, kulturellen oder ethnischen Juden) mit Kritik eines Staates.
Sieht man ja auch daran, wie Republikaner was gegen die so "antisemitischen" Moslems haben, aber all die alten Juden-Vorurteile rauskramen, wenn es um Selenskyj geht - der ist nämlich Jude, aber kein Israeli, also darf man ihn nach rechter Logik mit genau den alten Judenhass-Bildern anfeinden.

2026-10-19 06:12:22 GMT

@[email protected] That'd have been a nice feature for those DOS games. Just insert all the floppies. No more "Insert Floppy 3 and press space"...

2026-10-19 04:51:11 GMT

@[email protected] Yeah, I'd consider it unappealing too, just the very minimum to even talk about it.
What is really needed is an equivalent to the Nuremberg Processes.

2026-10-18 15:16:53 GMT

@[email protected] The conditio sine qua non for even considering this would be russia leaving all Ukrainian territory. Including Crimea. And paying reparations.
Under that condition, one maybe could consider trade relations.

2026-10-18 14:25:35 GMT

@[email protected] Yeah. AGENTS.md can be a nice place to tell agents to go away, or to at least not send any pull requests. But skills/ is definitely always pro-.

2026-09-27 05:56:34 GMT

@[email protected] @[email protected] Den Krieg nicht zu finanzieren, heißt aber #Energiewende. Das wollen sie auch nicht.
Nein, sie wollen aktiv die russische Seite finanzieren.
Welche Seite wollen sie eigentlich bei #USA gegen #Iran finanzieren?

2026-09-25 07:19:47 GMT

@[email protected] The extra weird way is how it's being framed.
So the big corps had their LLMs "accidentally" run wild and "hack others". They then use this as a reason to ban private-run LLMs because "OMG the tech is so dangerous".
So they cause the damage, AND want to be rewarded for it...

2026-09-25 04:11:35 GMT

Worse, the fact that soon neither GCC nor Clang will be slop free can get us into a Reflections on Trusting Trust situation...

2026-09-21 14:29:31 GMT

@[email protected] @[email protected] I read up on that - here in Germany electronic fallback is allowed too, but it must be fully independent from the main brake.
Sadly it might be allowed to connect both to the same internet... I sure hope it is not.

2026-09-21 06:56:30 GMT

@[email protected] @[email protected] My car (electric) has brake by wire with hydraulic fallback - for which the pedal has to be pushed in pretty far.
Isn't that kind of redundancy required by law?

2026-09-21 04:20:40 GMT

@[email protected] Also, the elephant in the room: nothing there is EV specific - modern ICE cars have the same features. Is that all the fossil lobby has to say for themselves?
(That he could not hack the brake probably has the reason that any sensible car manufacturer uses a hydraulic brake directly connected to the pedal (only with a brake booster but even that is engineered for fallback to direct) if all else fails - the electronics may be able to push the brake, but it can't pull the pedal up if your foot is on it; even the ABS is rather limited to prevent attacks like this or simple malfunctions from preventing braking)

2026-09-21 04:12:50 GMT

@[email protected] It is long known that China puts surveillance into their products.
However, so do the US. For John Deere it is well known, but I would not trust any other US brand either. After all, the US too have no privacy laws, and a dictator.
The bigger problem is power. If China surveills me, there is little they can do to me. I am not dumb enough to use Siri, OK Google or whatever. So they can't get into my phone that way. Neither does my country host Chinese assassins waiting to strike (OTOH Russian ones seem to exist), and neither would it extradite me to China if the CCP asks nicely (OTOH to the US it could happen). China also can't get me fired or my bank account closed by putting me on "sanctions lists" - the US can.
As such, for me personally, I'd rather have the Chinese surveillance than the US one. If it has to be any at all.

2026-09-21 03:42:14 GMT

@[email protected] And yet both have the same underlying issue: using AI to deflect blame.
"It was not our fault, AI did that".
No.
You ran that AI. You set its bounds. It is your fault.

2026-09-20 07:07:57 GMT

@[email protected] Und meinetwegen auch alle Parteien auf verfassungsfeindliche Tendenzen prüfen und danach entsprechend behandeln.

2026-09-20 06:58:05 GMT

@[email protected] Now we need a picture of a smoking barefoot pet saying "oh no"...
https://minio.libranet.de/misskey-de/msky/f72c7f27-236a-4d7a-b5c8-c865b1d429c0.jpg

2026-09-19 05:42:03 GMT

@[email protected] Wir brauchen mehr Pandemien.

2026-09-19 05:40:42 GMT

@[email protected] Das ist sowieso verrückt. Ich kann mir doch meinen eigenen Tankrabatt machen. Abstandstempomat auf 100 und gut ist.

2026-07-26 05:26:47 GMT

- reply

@npub1zvr…u20w Challenge accepted.
https://chatgpt.com/?q=[object+Object]