Dmitry Chestnykh ☮️

dchest@mastodon.social

Founder of Coding Robots. Created Mémoires, I Write Like, BlogJet (acquired) and Calcish. Author of Password Authentication for Web & Mobile Apps (<a href="http://dchest.com/authbook/" target="_blank" rel="nofollow noopener" translate="no">http://dchest.com/authbook/</a>).

Posts

Post #4429069
#define avoid [[deprecated]] void avoid func() { ... }
Post #4429068
I hope they had an ad blocker in 1887
Post #4429067
Wrote XAES-256-GCM (+ KC-) implementation in C backed by a choice of CryptoKit+CommonCrypto/OpenSSL/LibreSSL/BoringSSL. I needed it for a project that could be put on the App Store without troubles and decided to extend to other backends. https://github.com/dchest/libxaes256gcm
Post #4429066
Wow: ~~~ Missing MAC validation in wg(4) packet decryption After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. ~~~ https://www.freebsd.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc Wasn&#39;t WireGuard rewritten after the first failed attempt in FreeBSD? Looks like it was caused by result confusion: c...
Post #4429065
RE: https://mastodon.social/@iwritelike/117016251959638054 So gooooood!
Post #4429064
Don&#39;t do drugs and OpenSSL
Post #2716451
Calcish 1.11 released: https://calcish.com/blog/2026/04/25/calcish-1-11-released/
Post #2716450
Hmm, I use Cloudflare Pages for the Calcish website, and it shows up with a strange port number (which works) in DuckDuckGo/Bing. Added rel=canonical, maybe this will fix it.
Post #2716449
I wanted JavaScript documentation without paragraphs of bla-bla, like in Turbo Pascal/Delphi. Made this manually before LLMs, now published online. https://docs.calcish.com/
Post #2716448
RE: https://infosec.exchange/@jvoisin/116494344881867895 I like this carrot disclosure thing.
Post #2716447
Pretty sure death is just a new challenge for Alex Zanardi. He&#39;ll be fine. https://news.sky.com/story/ex-f1-driver-and-paralympic-champion-alex-zanardi-dies-suddenly-13539086
Post #2716446
I like ASCII-preserving encodings, e.g. Fossil delta format (deltas of plain text are plain text): https://fossil-scm.org/home/doc/tip/www/delta_format.wiki Thinking of making an ASCII-preserving variant of LZ4 compression: - token and offset: 4 chars, base64 encoded (originally 1 byte token, 2 bytes for offset) - literal and match overflows: base95 (&#39;cause it&#39;s just addition, no complex decode) Seems to fit perfectly and can be transformed easily to the original spec. Framin...
Post #2716445
Why do we call them Unix-like or *nix instead of “I can’t believe it’s not Unix!”?
Post #2716444
Good point, I don&#39;t know why web servers allow arbitrary query strings by default https://chrismorgan.info/no-query-strings
Post #2716443
gobbledygook? https://blog.google/products-and-platforms/platforms/android/meet-googlebook/
Post #2716442
This is so true: https://justsitandgrin.im/posts/native-all-the-way-until-you-need-text/ There&#39;s still no competitive &quot;native&quot; replacement for web-based tech. This is one of the reasons we have Electron everywhere. Fun fact: the original iPhone text fields were backed by WebKit.
Post #1891230
TIL about SQLite .www mode: $ sqlite3 my.db sqlite&gt; .www sqlite&gt; SELECT * from mytable; Opens the result of select in a browser and shows the table!
Post #1785876
In the 70s they could open Facebook by pressing the Meta key and there were Like and Dislike buttons right on the keyboard.
Post #720962
Most software development best practices and tools are designed for corporate programmers/teams to ensure predictable results. This makes programming boring. Software doesn&#39;t have to be written the way they write it. For inspiration, study Arthur Whitney, Chuck Moore, Niklaus Wirth, Stephen Bourne, Jeremy Howard, D. Richard Hipp, Dan Bernstein, Terry Davis.