News for hackers. Stuff that matters.

Keyb0ardWarri0r

Re:Iroh 1.0 on Tuesday June 16, 2026 @09:13AM (#48554793)
Congrats!

I think you should highlight more the IoT use case, It's a really great solution for devices that need to talk over multiple transports (Lora + IP) and to avoid the need for a VPN.

I'm always surprised how bad ideas spread faster than good ideas among our rulers. Here is a map of countries where an ID is required (or not) https://www.comparitech.com/blog/vpn-privacy/sim-card-regist...
From what I understand, some camera modules for ESP32 have built-in video encoding, so basically the ESP32 will only have to manage the encryption + network.

If you are interested, take a look at what SeeedStudio are doing. I think It's worth exploring for very cheap cameras, but yeah, no AI (without an additional accelerator).

RSIC-V based are probably the most widely available microcontrollers / dev boards, but they unfortunately don't have AES accelerators. On the other hand, ChaCha20 (or ChaCha12) run great on them.
This is great, congrats!

Do you think it would be possible to use ESP32 (RISC-V CPUs) based cameras?

Both for cost reduction and availability of the hardware reasons.

Maybe with a ChaCha20-based cipher instead of AES?

ESP32-S3 may be the worse model to run Rust on due to the XTensa cores that makes the toolchain unnecessarily complicated.

The newer model, C3, C6, C5 all have RSIC-V cores which make it a dream to run Rust (basically: rustup target add riscv32imac-unknown-none-elf).

Here is a good introduction: https://kerkour.com/introduction-to-embedded-development-wit...

Interesting construction, thank you for sharing!

But:

- More and more people see ChaCha20 as wasteful (too many rounds)

- Poly1305 is "hard" to implement

- ChaCha12 + BLAKE3 can fulfill all the symmetric cryptography needs (MAC, AEAD, Hash, RNG...), which is untrue of ChaCha20 + Poly1305, therefore simplifying the deployment of secure cryptography

- ChaCha12 + BLAKE3 both scales with the width of SIMD vectors, opening the door to really really fast cryptography on general-purpose hardware, especially with ARM SVE & SVE2

- SIV construction requires to decrypt the entire payload before being able to verify the authentication tag, which can be costly and may lead to DoS attacks due to the asymmetry of the cost of attack / cost of defense

Show HN: Markdown Ninja: open-source alternative to Substack, Mailchimp, Netlify

https://markdown.ninja

Hi HN,I've just Open Sourced Markdown Ninja (https://markdown.ninja), a Markdown-first CMS to publish blogs, documentation websites and newsletters. Our motto is simple: focus on what matters, we take care of all the technical details. Websites, Newsletters, privacy-first analytics, SEO optimizations, headless CMS. Everything is built into a single, unified platform.I've launched a few projects...

( Read More... | 4 comments | 9 points | on HN )
Re:Minimum Viable Blog on Saturday May 03, 2025 @12:13PM (#43880015)
Take a look at https://markdown.ninja

It lets you create a blog and a newsletter with Markdown and publish directly from the command line (or the web editor). You get the offline-first workflow of Markdown, but with beautiful themes like substack.

It's like a mix between Wordpress, netlify and substack.

Re:Ask HN: What are you working on? (April 2025) on Monday April 28, 2025 @02:45AM (#43818339)
https://markdown.ninja

A Markdown-first CMS and website builder for blogs, newsletters and documentation websites.

I've been blogging since more than 10 years, and the only thing that made it possible is Markdown. That's why I've decided to build a complete publishing platform to replace the complex and fragile setups of bloggers and startups. Do you really need a CI/CD pipeline, static site builder, hosting, CDN and analytics just for a website? :/

The platform is currently 100% operational and I'm now working to Open Source it.

The best thing? You can publish directly from the CLI:

$ mdninja publish

Re:Memory Safety for Web Fonts on Wednesday March 19, 2025 @12:09PM (#43413876)
But can't be embedded in other projects as easily as Rust (FFI, WASM).
Re:Memory Safety for Web Fonts on Wednesday March 19, 2025 @11:57AM (#43413702)
This is the true power of Rust that many are missing (like Microsoft with its TypeScript rewrite in Go): a gradual migration towards safety and the capability of being embedded in existing project.

You don't have to do the Big Rewrite™, you can simply migrate components one by one instead.