Statistically Speaking, We Should Have Heard from Aliens by Now – Universe Today (universetoday.com)

Some may not remember BitKeeper being used to maintain the Linux kernel source code and how a discrepancy was found (22 years ago) between that repo and the CVS repo. This kind of led to git and signed commits that we have today, etc.

Here's a short write up: https://blog.citp.princeton.edu/2013/10/09/the-linux-backdoo...

jmclnx · 3h ago

Seems this is related to SHA1 being used on gnupg. Will be interesting on how this plays out when SHA1 in gpg is obsoleted. I am not looking forward to that.

Then there is the added complexity of git using SHA1, I do not know if that has been changed yet.

Fun times ahead.

FWIW, I changed my git commit signing to ssh-ed25519 from gnupg about a month ago.

freeopinion · 3h ago

Didn't GPG change its default to ed25519 four years ago?

https://lists.gnupg.org/pipermail/gnupg-announce/2021q2/0004...

kpcyrd · 1h ago

ssh-ed25519 is different from a gnupg ed25519 key, since it doesn't have any of the technical baggage that gnupg has. Even with ed25519, sha1 is still hardcoded into RFC4880, the standard that gnupg implements. Fingerprints are typically 40 characters long since they are hex sha1 hashes. There's RFC9580 that changes this to sha256, but it's still very new and currently being finalized.

But even then, when using ed25519+sha256 to generate a signature, you're still going to do this over a sha1 hash because of the way git works.

arccy · 39m ago

or... gpg gets obsoleted along with sha1

NooneAtAll3 · 2h ago

> since more than 20 years.

a bit sad that "since for time_points, for for time_duration" grammar rule isn't as well known as it should

crote · 1h ago

It's his second language. I think we can cut him some slack.

NoahKAndrews · 51m ago

It's not like that's even a common mistake, in my experience

Tomte · 2h ago

German. "seit" for both.

Generative AI and the War on Writing [video] (youtube.com)

Show HN: One-click security scanner for web, code, and AI vulnerabilities (zachkepe.com)

Talking to Peter Farkas of FerretDB on Talking Postgres Podcast (talkingpostgres.com)

Proposed law would require Apple and Google to verify your age to use app stores (cnn.com)

Orders for Pahalgam satellite images from US firm peaked 2 months before attack (theprint.in)

The female body is not the problem (thecritic.co.uk)

Giving V8 a Heads-Up: Faster JavaScript Startup with Explicit Compile Hints (v8.dev)

Writing a Social Insect Civilization (centauri-dreams.org)

Ive used deepwiki from devin.ai to document my project and its awesome (devin.ai)

Statistically Speaking, We Should Have Heard from Aliens by Now – Universe Today (universetoday.com)

Saliva Is a Critical but Underestimated Bodily Fluid (medscape.com)

Girls on the Run Northern Arizona Direct Give Fundraiser 2024-2025 (pinwheel.us)

Ghana Reaps the Fruits of Science Investment (physics.aps.org)

President Trump Fires Librarian of Congress Carla Hayden (apnews.com)

Detecting if an expression is constant in C (nrk.neocities.org)

UCSD Pascal: In depth 1/n – markbessey.blog (markbessey.blog)

'Orwellian': planetary scientists outraged over deletion of research records (nature.com)

Silicon Valley is coming for The Pentagon's $1T budget (bloomberg.com)

EU SST closely monitors upcoming re-entry of space object Cosmos-482 Descent (eusst.eu)

Man 'Disappeared' by ICE Was on El Salvador Flight Manifest, Hacked Data Shows (404media.co)

Show HN: Bumble Bee Flower Finder (bumblebeeflowerfinder.info)

Inspection Fact Sheet (fcc.gov)

GrapheneOS's auto reboot feature for Linux laptops (debugging.works)

Epic Games says it has submitted Fortnite to the U.S. App Store for review (9to5mac.com)

F. William "Bill" Lawvere Archives (lawverearchives.com)

IBM Stretch: Building the Fastest Computer [video] (youtube.com)

How I Lost the Silicon Lottery (jadarma.github.io)

The Half Life of Empire (economicsfromthetopdown.com)

Visualizations Powered by Trusted Data (trytako.com)

awesome-startup-postmortems – A list of startup postmortems to learn from (github.com)

ProxiCycle: Passively Mapping Cyclist Safety for Near-Miss Detection (programs.sigchi.org)

How I Learned to Be Blind (wsj.com)

Narva castle facing Russia hangs Putin-Hitler banner on Russia's 'Victory Day' (news.err.ee)

Researchers Have Mapped the Evolution of Every Known Bird Species (scitechdaily.com)

Newly Discovered Algae May Speed Melting of Antarctic Ice (eos.org)

Google Search Now Uses Gemini AI, Is This the End for Perplexity?

DOJ's extreme proposals will hurt consumers and America's tech leadership (blog.google)

25 Years of Dining in New York City (nytimes.com)

A StarlingX explainer: what it is and what it's good for (windriver.com)

Fiverr.com is fraught with errors, maybe needs moar AI (devcodehack.com)

Composition: The feature I've wanted in Flox since I joined the company (tinkering.xyz)

Happiness – did we get it right? (growingfearless.substack.com)

Can Germany rein in its academic bullying problem? (nature.com)

Six ways we could find new physics beyond the standard model (2023) (newscientist.com)

China has spent billions developing military tech (cnn.com)

Spent 9,400,000,000 OpenAI tokens in April. Here is what we learned (old.reddit.com)

Show HN: Computer use copilot that autocompletes your work in real time [video] (youtube.com)

Apple Lisa Pascal sources – Pascal for small machines (pascal.hansotten.com)

Microwriter – Computer Ads from the Past (computeradsfromthepast.substack.com)

A founder's guide to moving abroad (medium.com)

The Linux Kernel's PGP Web of Trust

Comments (9)