News for hackers. Stuff that matters.

BlueMatt

BlueMatt on Hacker News

Re:Getting ready to operate GNU Taler in Germany on Thursday October 22, 2026 @08:46PM (#50203137)
Almost a decade ago I had a conversation with a GNU Taler proponent in Germany. I pointed out the risks that come with additional government surveillance of payments in the face of potential future governments that may not value liberty as much as the current one does. His pushback was that the german voters would never elect someone as crazy and corrupt as Trump (this was during his first term) and he can fully trust the future german government. It was a somewhat surreal conversation, and feels more surreal with the current shift towards AfD...

GitHub Banned All CI for Our (OSS) Org Because of Bad Drive-By Contributors

Posted by BlueMatt on Sunday June 21, 2026 @09:35PM
from the self-post dept.

A few weeks ago, Github decided to disable all Github Actions (including self-hosted runners) access for our open source org (lightningdevkit) for some unknown reason. As some of us happen to work for a company with a large Github corporate account, we tried to escalate through our corporate reps, who informed us that the issue appeared to be some drive-by contributors who weren't org members...

( Read More... | 4 comments | 7 points | on HN )
Re:ARIN Public Incident Report – 4.10 Misissuance Error on Sunday December 21, 2025 @01:43PM (#46347104)
It was re-allocated to the new/wrong ARIN customer for seven days before they started announcing it, at which point the OP detected the issue. Prior to that their prefix was routing to them just fine, just without RPKI protection.
Re:Et Tu, Signal? on Wednesday April 07, 2021 @08:00PM (#26733243)
What do you do differently from Stellar or Ripple at the consensus layer which both started out with similar ideas, but quickly found that their validators fall apart due to the strongly-connected validator set requirement not being met? In other words, how do you avoid the exact same fate that both Stellar and Ripple ran into in their consensus models when they also tried to let "node individually choose"?
Re:Signal adds a payments feature with a privacy-focused cryptocurrency on Tuesday April 06, 2021 @01:49PM (#26715041)
The revelations from the Platformer article [1] about how Signal works inside make it pretty clear that Moxie ~= Signal.

[1] https://www.platformer.news/p/-the-battle-inside-signal

Re:Signal adds a payments feature with a privacy-focused cryptocurrency on Tuesday April 06, 2021 @01:36PM (#26714892)
According to coinmarketcap, MobileCoin's "Fully Diluted Market Cap is $15,638,578,369.65". If we take a conservative assumption of a 1% advisor grant (which would be very conservative for a system that has been pitching signal integration as its primary feature for years), then that would put the value of the integration at around $150 million today (or tens of millions a few weeks ago).
Re:How secure is TextSecure? on Saturday November 01, 2014 @07:54PM (#8545052)
Ehh, seems they were talking about different HMAC parameters and I was thinking about the HKDF...sorry (see the moderncrypto discussion for more).
Re:How secure is TextSecure? on Saturday November 01, 2014 @07:48PM (#8545043)
(B) Used to be correct (there were some constants used in the HMAC constants which are supposed to be 1/2, but were actually 0/1, of course this makes no difference practically to security), but this has been changed in more recent versions.