The headline should mention that they’re breaking 22-bit RSA, but then it would get a lot less clicks.

A different group of Chinese researchers set what I think is the current record when they factored a 48-bit number with a quantum computer two years ago: https://arxiv.org/abs/2212.12372

I guess the news here is that now they’ve reached 22 bits using the quantum annealing technique which works on D-Wave’s commercially-available quantum computers? That approach was previously able to factor an 18-bit number in 2018.

🥂 to the researchers, but 👎 to the clickbait headline writers. This is still nowhere near being a CRQC (cryptanalytically-relevant quantum computer).

i can’t help but wonder if there isn’t some more useful science that these scientists could be doing (i write, while reading garbage on the internet)

All two-letter TLDs are ccTLDs.

However, several of them are not in ISO 3166-1.

Copying my comment from another thread about this:

They’re going to be “sovereign” over the whole archipelago, but only as long as they don’t exercise their sovereignty over the largest island in it which constitutes more than half of its total land area (30 km² of 56.13 km²).

From today’s Joint statement between the governments of the Republic of Mauritius and the United Kingdom of Great Britain and Northern Ireland concerning the Chagos Archipelago, including Diego Garcia:

Today’s political agreement is subject to the finalisation of a treaty and supporting legal instruments, which both sides have committed to complete as quickly as possible. Under the terms of this treaty the United Kingdom will agree that Mauritius is sovereign over the Chagos Archipelago, including Diego Garcia. At the same time, both our countries are committed to the need, and will agree in the treaty, to ensure the long-term, secure and effective operation of the existing base on Diego Garcia which plays a vital role in regional and global security. For an initial period of 99 years, the United Kingdom will be authorised to exercise with respect to Diego Garcia the sovereign rights and authorities of Mauritius required to ensure the continued operation of the base well into the next century.

The treaty will address wrongs of the past and demonstrate the commitment of both parties to support the welfare of Chagossians. Mauritius will now be free to implement a programme of resettlement on the islands of the Chagos Archipelago, other than Diego Garcia, and the UK will capitalise a new trust fund, as well as separately provide other support, for the benefit of Chagossians.

It will also herald a new era of economic, security and environmental partnership between our two nations. To enable this partnership the UK will provide a package of financial support to Mauritius. This will include an indexed annual payment for the duration of the agreement and the establishment of a transformational infrastructure partnership, underpinned by UK grant funding, to deliver strategic projects generating meaningful change for ordinary Mauritians and boosting economic development across the country. More broadly, the UK and Mauritius will cooperate on environmental protection, maritime security, combating illegal fishing, irregular migration and drug and people trafficking within the Chagos Archipelago, with the shared objective of securing and protecting one of the world’s most important marine environments. This will include the establishment of a Mauritian Marine Protected Area.

Nice touch making a new “Marine Protected Area” in the process; the current “Chagos Marine Protected Area” was created entirely to, well… lets let this 2009 US diplomatic cable published by WikiLeaks explain:

1. (C/NF) Summary. HMG would like to establish a “marine park” or “reserve” providing comprehensive environmental protection to the reefs and waters of the British Indian Ocean Territory (BIOT), a senior Foreign and Commonwealth Office (FCO) official informed Polcouns on May 12. The official insisted that the establishment of a marine park – the world’s largest – would in no way impinge on USG use of the BIOT, including Diego Garcia, for military purposes. He agreed that the UK and U.S. should carefully negotiate the details of the marine reserve to assure that U.S. interests were safeguarded and the strategic value of BIOT was upheld. He said that the BIOT’s former inhabitants would find it difficult, if not impossible, to pursue their claim for resettlement on the islands if the entire Chagos Archipelago were a marine reserve. End Summary.

I wonder how the “treaty will address wrongs of the past”; somehow I doubt it will involve any mention of the CIA torture site there.

yep, the concept of a “personal carbon footprint” was literally invented by an advertising agency working for British Petroleum https://www.theguardian.com/commentisfree/2021/aug/23/big-oil-coined-carbon-footprints-to-blame-us-for-their-greed-keep-them-on-the-hook

I wrote a comment here about why sealed sender does not achieve what it purports to.

Formally.

I really don’t get how its different than a search engine

Neither did this guy.

The difference is that LLM output is (in the formal sense) bullshit.

If copyright holders want to take action, their complaints will go to the ISP subscriber.

So, that would either be the entity operating the public wifi, or yourself (if your mobile data plan is associated with your name).

If you’re in a country where downloading copyrighted material can have legal consequences (eg, the USA and many EU countries), in my opinion doing it on public wifi can be rather anti-social: if it’s a small business offering you free wifi, you risk causing them actual harm, and if it is a big business with open wifi you could be contributing to them deciding to stop having open wifi in the future.

So, use a VPN, or use wifi provided by a large entity you don’t mind causing potential legal hassles for.

Note that if your name is somehow associated with your use of a wifi network, that can come back to haunt you: for example, at big hotels it is common that each customer gets a unique password; in cases like that your copyright-infringing network activity could potentially be linked to you even months or years later.

Note also that for more serious privacy threat models than copyright enforcement, your other network activities on even a completely open network can also be linked to identify you, but for the copyright case you probably don’t need to worry about that (currently).

adding all compiled file types including .pyc to .gitignore would fix it

But in this case they didn’t accidentally put the token in git; the place where they forgot to put *.pyc was .dockerignore.

At my workplace, we use the string @nocommit to designate code that shouldn’t be checked in

That approach seems useful but it wouldn’t have prevented the PyPI incident OP links to: the access token was temporarily entered in a .py python source file, but it was not committed to git. The leak was via .pyc compiled python files which made it into a published docker build.

rare meta w

python -c 'print((61966753*385408813*916167677<<2).to_bytes(11).decode())'

$ python
>>> b"Hello World".hex()
'48656c6c6f20576f726c64'
>>> 0x48656c6c6f20576f726c64
87521618088882533792115812
$ factor 87521618088882533792115812
87521618088882533792115812: 2 2 61966753 385408813 916167677

Mattermost isn’t e2ee, but if the server is run by someone competent and they’re allowed to see everything anyway (eg it’s all group chat, and they’re in all the groups) then e2ee isn’t as important as it would be otherwise as it is only protecting against the server being compromised (a scenario which, if you’re using web-based solutions which do have e2ee, also leads to circumvention of it).

If you’re OK with not having e2ee, I would recommend Zulip over Mattermost. Mattermost is nice too though.

edit: oops, i see you also want DMs… Mattermost and Zulip both have them, but without e2ee. 😢

I could write a book about problems with Matrix, but if you want something relatively easy and full featured with (optional, and non-forward-secret) e2ee then it is probably your best bet today.

two weeks later: GitLab confirms it’s removed Suyu, a fork of Nintendo Switch emulator Yuzu

sad to see their new git hosting is behind cloudflare 😢

that was predictable

It’s a mild pain and definitely not what we were promised

I think this is precisely what the ActivityPub model of federation promised, actually 😅

💯 points for the name.

They should make it use the sosumi sound for something so that maybe they can get sued by Apple Inc too 😂

Poor choice of git hosts though; won’t gitlab.com take down anything that a big company asks them to?

i wonder how waydroid is these days. i still haven’t gotten around to trying it but I just looked again and I see its downloads are still hosted on Sourceforge 😖

apparently there was a proof-of-concept of it working on windows before Microsoft’s thing that died today had even been released. if many people actually used Microsoft’s thing I imagine some will turn their attention to waydroid now.