Just wrap it in wireguard. WG won't respond to any incoming handshake without a valid and authorized client key, it's essentially invisible.

This is one of the laziest false comments that I have ever read.

See also: a "font" that only people high on drugs can read!

https://qri.org/blog/psycrypto-contest

https://www.youtube.com/watch?v=oD4nV0CMkBI

Of course, the psychedelic hidden message is reversible with some video processing techniques for everyone else to see. And calling it cryptography is a mis-use of the term. Still an interesting use of the effect.

I don't think "ghost font" will work as well as the author claims.

> WASM has strong tried and proven sandboxing. We basically can build on nearly 30 years of experience. The decoders don't need a lot of access, they can basically be pure functions.

I've heard that kind of sentiment many times before. It's not a good (thought-terminating) mindset to have for any secure software.

There are several WASM implementations, WASM is just a format. "Pure functions" are pure at a superficial level. Many people say that they don't mutate global state, but they do ... it's just hidden. The decoders "not needing a lot of access" doesn't matter if the WASM engine is pwned through arbitrary code execution inside the environment, or if it's contorted to bypass the access control you are mentioning through various side-effects.

> The conclusion I’m currently at is that I don’t know and probably can’t ever know.

I think about this quote often, straight from Data's voice module in another episode:

'The most elementary and valuable statement in science, the beginning of wisdom, is, "I do not know".'

In other words, Cloudflare requires you to substantially increase your browser’s attack surface in order to visit websites.

You're not quite going far enough. Cloudflare requires that you allow it to attack your browser, as a sort of virtual hazing ritual, before you're allowed into the club. That this hazing makes your browser vulnerable to attacks by others too is a side effect that bothers them not at all.

Ah yes, the TSA of the internet.

It is very similar to kernel modules for game anti-cheats. Soon, websites will work on unmodified Windows and Mac computers only, with a signed cloudflare kernel driver installed. :/ They are completrly destroying the web.

> "Blue pill" attacks on Vista and Xen [...] Her work demonstrated that hardware virtualization is not in fact the security panacea we wish it was, but that it too is vulnerable to attack just like any other layer of the stack.

Blue-pilling is a method for malware to hide from the OS by virtualizing it, not an attack on VMs. That's why it's called "blue pilling". I do agree though that VMs are not airtight and VM escapes have been demonstrated.

Yes, but when you blue-pill the hypervisor it becomes an attack on VMs. Her demonstrating the blue pill attack on Xen was really the "oh crap, these aren't as safe as we thought" moment.

KeepassXC can also be configured to allow / deny when a browser extension requests a password.

Why not both approaches? Creativity is not just making the most use of what you have but also the most of what you are.

The other side of this is that we can still make software more efficient, and make better use of the old hardware than we had ever thought possible.

I’m doing more with a decade old GPU, which was manufactured before “Attention is all you need“, than I could 5 years ago, when quantization techniques were implemented.

I’m holding on to my 32 bit machines.

Most linux distributions dropped support for them (for good reason). But at the end of the day these machines are a fabric of up to ~ 4 billion bytes that can be used in a myriad of ways, and we only covered a fraction of the state space before we had moved on.