Turn Dependabot off
I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.
We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.
Visit words.filippo.io → RSS feedOn Hacker News Jan 2022 – Oct 2026
Security & Privacy 20Programming Languages 5Software Engineering 4Open Source 4Math & Algorithms 4Tools & Productivity 3
I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.
I updated the whoami.filippo.io dataset! I explain how it works, and how I fetched the new data.
Encrypting files with passkeys, using the WebAuthn prf extension and the TypeScript age implementation.