Soatok Dreamseeker

He/him. Gay/demi dhole (Cuon Alpinus) furry.

Blogger, programmer, security engineer, cryptography nerd. 30+

Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)

I don't represent any company, individual, or community.

Public Key

npub17uyfsxsnfgg6dgqazlfjv2gdl235mq0dug9wq6kjq9ngzh6pdyese4305p

NIP-05 Address

soatok@furry-engineer.mostr.pub

Profile Code

nprofile1qqs0wzycrgf55ydx5qw305ex9yxl4g6ds8k7yzhqdtfqze5ptaqkjvcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsfzv2aw

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub17uyfsxsnfgg6dgqazlfjv2gdl235mq0dug9wq6kjq9ngzh6pdyese4305p

Show more details

Last Notes

2026-06-03 05:13:26 UTC

By the way, I know a lot of folks struggle with mental heatlh in various ways, so:
Know that the fact that people interact with you at all, and are part of your life even in very loose ways, means your presence matters and you're irreplaceable.
It won't always feel like it, but people do appreciate you. Most just don't know how to express it very well, and no one really does a good job of teaching that. I'm no better than anyone on this point.
But really, whatever community you have is irrefutable evidence that you're not alone. They're the ones that will appreciate you.
There's no incentive structure to Fedi. Nobody follows you just to increase some metric or trick you into following back to win some game tied to capitalism here. They follow you because you're interesting or cool. Or both.
This probably doesn't help with the myriad other, more materail causes for your suffering. Money be damned.
But you'll never be alone if you don't want to be. And it can get better.

2026-05-22 02:21:02 UTC

I fucking hate TikTok speak
"dih" just say "dick"
FFS I hate how advertisers have control over language. They do not deserve that power.

2026-05-18 15:20:48 UTC

Since May is halfway over, I think my timeline projection was wrong, but the AI companies are certainly playing with fire.
They're currently doing what might be called "enshittification" if they were any other SaaS: lower usage limits, pricing restructuring to capture more value for themselves, etc.
This isn't the sort of thing that will kill off the use of LLM technology or even generative AI as a whole. So-called "local models" will likely persist the AI bubble pop.
But what won't survive is the service model where AI users' data is funneled into a third-party service provider and processed by an LLM.

2026-05-17 16:39:29 UTC

- reply

@nprofile…uw8a @nprofile…637m
https://furry.engineer/system/media_attachments/files/116/590/899/079/686/397/original/2d09a11282be92f5.jpg

2026-05-17 16:36:27 UTC

- reply

@nprofile…uw8a All I can see is the @nprofile…637m fire image in my mind

2026-05-11 15:33:51 UTC

- reply

@nprofile…qntz The pejorative?
Probably the "car bro" that thinks they're the protagonist of a Need for Speed side-story.

2026-05-05 18:56:36 UTC

Some of y'all give up on your dreams too quickly

2026-05-02 16:20:53 UTC

We should seriously make and spread a satire product that replaces the C-Suite of a corporation with LLMs
Cite how expensive business leadership is in terms of worker pay
Actually build a tool that integrates with LLMs but has a system prompt to automatically acquiesce on the formation of Unions or any other pro-labor activities
Laugh when it outperforms actual CEOs if anyone is crazy enough to adopt it

2026-04-29 20:14:06 UTC

"I don't understand why you're banning me from the council while necromancy is permitted!" the alchemist complained.
The council representative coughed. "Look, the problem isn't the work you did. A potion that bottles the health benefits of walking a hundred miles is revolutionary. But the name is..."
In his hands, he holds a bottle labelled "Pedo Phial"
"It's simply unmarketable."

2026-04-26 18:43:55 UTC

Post-quantum cryptography landed in PHP before GnuPG
https://news.ycombinator.com/item?id=47907018

2026-04-20 04:23:48 UTC

- reply

(Yeah, I know AI slop has totally killed the emoji headers thing for most people, but my web design skills are calcified squarely in the last 2010s era, so please bear with me until I commission an artist to replace them with gay furry stickers.)

2026-04-20 04:22:13 UTC

After a long weekend, I've finally updated https://publickey.directory to reflect the current state of affairs for the Public Key Directory which brings Key Transparency to the Fediverse, as part of the effort to build End-to-End Encryption (E2EE) for ActivityPub.
https://publickey.directory
This project now supports* Post-Quantum Cryptography! (We're shipping ML-DSA-44 now and will consider new algorithms in the future.) HPKE also uses mlkem768x25519 (a.k.a. X-Wing).
* The only part that doesn't currently require post-quantum cryptography is RFC 9421 (HTTP Message Signatures), because no one has bothered to specify an IANA codepoint for it yet. I'm planning to write a C2SP spec soon if no one beats me to it. For the interim, Ed25519 is still allowed there, but in v2 I plan to drop it.

2026-04-16 20:53:16 UTC

The cool thing about bsky being down practically all day is I didn't have to accidentally observe completely untagged content for other people's kinks that squick me, which (due to not being tragged) bypasses my muted word list.
So who's to say if it's good or bad?

2026-04-16 05:31:14 UTC

lol no https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

2026-04-14 19:31:14 UTC

I guess I should get back to work on that damn key management blog post after all.

2026-04-13 15:11:18 UTC

Hybrid Constructions: The Post-Quantum Safety Blanket
The funny thing about safety blankets is they can double as stage curtains for security theater. Art: CMYKat "When will a cryptography relevant quantum computer exist?" is a question many technologists are pondering as they stare into crystal balls or entrails. Two people I admire recently made a public long bet about that question, with a $5000 donation to charity as stakes.
http://soatok.blog/2026/04/13/hybrid-constructions-the-post-quantum-safety-blanket/

2026-04-11 16:03:23 UTC

Not in the mood for stupid bullshit today
Yet my mentions were filled with it when I woke up
Where's the hammer?

2026-04-10 22:49:28 UTC

Work Slack notification:
Company-wide shout-out for doing a great job
Me, filling out my self-assessments:
3 out of 5, dead middle of the road

2026-04-09 20:05:40 UTC

Oh what? https://www.youtube.com/watch?v=h--ReEmXTCg

2026-04-08 21:30:16 UTC

"You're so kneady when you wanna be bread"

2026-04-07 21:13:58 UTC

I feel SEEN
https://kind.social/@BasiliskXVIII/116364543600845350

2026-04-06 14:22:43 UTC

Another day, another annoying person to block

2026-04-06 11:13:09 UTC

I'm quite amused that ML-DSA-44 public keys are 1312 bytes.

2026-04-05 16:12:32 UTC

- reply

If you want to use some character (Superman, Jesus, the sexy werewolves from that Van Hellsing movie, whatever) as an abstract ideal to strive for, okay, sure.
But the first step towards committing atrocity is failing to recognize one's own capacity for harm.

2026-04-05 16:09:31 UTC

- reply

The biggest problem with the kinds of Democrats that fall for this nonsense is this unfounded belief that we're somehow The Good Guys.
Exhibit A:
https://www.inc.com/don-reisinger/jeff-bezos-says-big-tech-companies-should-ignore-employee-outcry-partner-with-us-government.html
This might be a subtle point but they're not arguing "We're the guys who only perform good actions, or actions in service of goodness", they're saying "goodness is inherent to your [national] identity", which lets them turn a blind eye to bad actions that conflict with their self-image.
MAGA shatters their illusion.
There are no "good guys". There are only good and bad choices, if you're lucky.
The belief of Goodness as an identity is best avoided.

2026-04-05 16:03:31 UTC

The "2024 election was stolen" conspiracy theories are just a rehash of the "2020 election was stolen" conspiracy theories and this is both sad and frustrating.
People choose to believe these narratives because they validate feelings and beliefs about how unfair the outcome of the election is; because they are profoundly ignorant of how the elections are conducted, secured, and validated; because it's easier than looking at America for what it really is.
If you see these kind of posts and can't help but notice the presentation style has a certain "FOX News" aesthetic, yeah, that's kind of deliberate.
https://furry.engineer/system/media_attachments/files/116/352/903/325/872/931/original/86544f9995f13829.jpg

2026-04-03 06:23:05 UTC

- reply

@nprofile…d0wl @nprofile…kxet Signal doesn't do self-hosted, no.
Upside: Your k-anonymity is "everyone that uses SIgnal", rrather than "the dozen or so people that connect ot this self-hosted server" directly.
I reviewed their cryptography code last year, fwiw: https://soatok.blog/2025/02/18/reviewing-the-cryptography-used-by-signal/

2026-04-03 02:42:36 UTC

- reply

@nprofile…d0wl @nprofile…kxet I got flooded with people needling me with requests to give free audits to various projects and decided not to look at most of them

2026-04-02 23:50:48 UTC

- reply

@nprofile…kxet @nprofile…d0wl I found and disclosed a bunch of Conversations vulns a month or so ago, if that counts

2026-04-02 18:09:38 UTC

Jeez, what a mess.
https://www.404media.co/a-secure-chat-apps-encryption-is-so-bad-it-is-meaningless/

2026-04-01 04:35:41 UTC

- reply

If anyone goes to non-furry events with 1000+ attendees, pitch this to their board.
Let's make every event offer harm reduction.

2026-03-31 10:28:20 UTC

- reply

@nprofile…s8h3 @nprofile…8e36 I'd like @nprofile…d8vz to do this for the hacking community, but I don't know what the logistics are like re: Las Vegas.

2026-03-31 01:06:32 UTC

If you see someone posting a photo of a sign at a furry convention that advertises HIV / STI testing while sounding offended, it's a queerphobic dogwhistle.
Spread this to your friends/families to inoculate them from bad memes.
https://soatok.blog/2024/09/30/why-are-furry-conventions-offering-hiv-testing-to-attendees/

2026-03-26 16:32:17 UTC

The most disgusting part of writing cryptography and security blogs is you inevitably get some truly heinous websites in your referrer logs :\

2026-03-24 15:03:32 UTC

The real reason furries cannot be trusted with power is the yearning for a dog-eat-dog world #vore

2026-03-23 22:04:12 UTC

Gee thanks, Blizzard.
https://furry.engineer/system/media_attachments/files/116/280/748/653/609/010/original/d33ab84a1809b3ea.png

2026-03-22 23:47:25 UTC

- reply

A lot of security rituals you hear about from folks online are like this.
This is the kind of culture that leads to giving blanket paranoid security advice without threat modelling first.

2026-03-21 14:58:16 UTC

- reply

Sorry, I meant to say Microslop.
https://www.windowslatest.com/2026/03/02/microsoft-gets-tired-of-microslop-bans-the-word-on-its-discord-then-locks-the-server-after-backlash/

2026-03-21 14:52:56 UTC

Gonna make a Microsoft version of The Elder Scrolls IV: Oblivion that replaces the speechcraft "Not now, not later, not ever" response with "Ask me again in 3 days"

2026-03-19 03:27:55 UTC

There are probably grown-ass adults who cannot get laid entirely because they're getting dating/relationship advice from ChatGPT.
And if this will probably become an increasingly prevalent issue.

2026-03-18 12:13:19 UTC

Banned from the Linux user group for saying "so this is like a kink thing, right?"
#FreeAsInFreeUse

2026-03-06 04:16:35 UTC

I'm not gonna say it
Just read this story
It says more about my point than I ever could
https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

2026-03-03 23:35:54 UTC

- reply

I guess I should just tap the sign whenever I encounter this sort of personality:
https://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/

2026-03-03 14:33:56 UTC

- reply

@nprofile…zaxj @nprofile…v2v2 @nprofile…2a0g
To be fully transparent: I have turned down job offers before because I do not feel comfortable writing C. Almost everyone I've met that believes they can write secure C code is overconfident, and that scares me. So I'm certain that a better patch is possible.
That said:
You're going to get an invalid output if you proceed with invalid parameters. Silently aborting immediately versus allowing stack corruption is a losing position to be in.

2026-03-03 14:23:20 UTC

- reply

@nprofile…zaxj @nprofile…v2v2 @nprofile…2a0g Yeah, the existing codebase is not amenable to good programming practices. I'm going to recommend libhydrogen instead.

2026-03-03 13:52:41 UTC

- reply

@nprofile…v2v2 @nprofile…t3h7 @nprofile…2a0g Yeah but https://github.com/LoupVaillant/Monocypher/issues/285#issuecomment-3991233186 lol

2026-03-03 13:17:52 UTC

- reply

@nprofile…a8rk Our Threat Model is "You must only accept secure inputs if you want secure outputs".

2026-03-03 13:12:12 UTC

tfw you report issues, get dismissed by the maintainer, and then several other people go "wtf?" to the maintainer so you don't feel alone

2026-03-02 19:45:34 UTC

Loup-Vaillant wrote this on Lobste.rs:
Personally I would actively avoid the check,
Hmm. What a weird thing to say.
Loup-Vaillant wrote a cryptography library called Monocypher, which famously had an EdDSA vulnerability mostly caused by their insistence on rolling their own custom EdDSA variant to avoid SHA512.
"I wonder how Monocypher holds up in 2026?"
Who said that? Well, anyway:
https://github.com/LoupVaillant/Monocypher/issues/285

2026-03-01 02:45:47 UTC

https://squirrelly.blog/2026/02/28/alice-fucks-bob-with-help-from-amis/
Looks like my "disclose 0days via furry porn" idea has legs

2026-02-27 17:08:53 UTC

- reply

@nprofile…44dh Anonymous credentials are a well-studied area of cryptography. If they balk at them, I dunno what to say lol

2026-02-27 17:03:28 UTC

- reply

@nprofile…44dh I wrote about the cryptography needed to build a solution a while ago: https://soatok.blog/2025/07/31/age-verification-doesnt-need-to-be-a-privacy-footgun/
The usability on top of the cryptography is a whole 'nother can of worms, though.
And even if you use good cryptography for privacy, if your endpoint leaks your credentials anyway, you still put users at risk.
Further, even if a good solution existed, the ways the laws and regulations that are being written about these verification requirements are often shitty on top of all that.
There's not an easy answer. But there should be.

2026-02-26 16:37:24 UTC

But still not physically old enough to have enough years of experience for most "entry level" job listings lol

2026-02-26 15:16:49 UTC

"This is not a security issue"
"There is no impact"
And Other Ways To Green-Light Public Disclosure to Vulnerability Researchers

2026-02-25 22:10:33 UTC

- reply

@nprofile…dc70 Actually, Avi Douglen said this better than I could:
https://security.stackexchange.com/a/6116

2026-02-25 21:57:41 UTC

Cryptography engineering has an intrinsic duty of care.
http://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/

2026-02-25 16:11:36 UTC

- reply

God dammit, I'm gonna get nerdsniped, aren't I?
Sigh.

2026-02-25 16:05:20 UTC

- reply

starts writing on the chalkboard, Bart Simpson style
"I will NOT get nerdsniped into another cryptography side-project.*

2026-02-25 15:57:48 UTC

- reply

The frustrating part about attack papers like this is how much they step on the same rakes that were deemed hazardous for more than 20 years.

2026-02-25 15:44:59 UTC

- reply

My heuristic from 2023 still rings true lol
https://soatok.blog/2023/01/21/how-you-respond-to-security-researchers-says-everything-about-you/#password-managers

2026-02-25 15:44:05 UTC

https://eprint.iacr.org/2026/058
Wow

2026-02-25 13:42:11 UTC

Failed to make an omelette
Successfully made scrambled eggs

2026-02-25 02:42:56 UTC

Y'know what's funny?
I spend a lot of time thinking about and working on technology to make it easier for folks to have privacy in their comms,
But most of my chats are like:
"awawawawawa"
[furry sticker]
[furry sticker]
[furry sticker]
"why are compilers, man?"

2026-02-23 20:43:18 UTC

What should I do with a remotely exploitable DoS in Synapse server?
(No, I'm not talking about their setup instructions.)

2026-02-22 21:28:37 UTC

- reply

If you care about FIPS (you probably shouldn't), you can't really use STREAM. But you can use FLOE.
https://github.com/Snowflake-Labs/floe-specification

2026-02-22 21:27:59 UTC

- reply

If you're wondering what would be better, it's called STREAM.
Libsodium implements it:
https://libsodium.gitbook.io/doc/secret-key_cryptography/secretstream

2026-02-22 21:24:16 UTC

Fun Matrix fact:
Attachments are encrypted with unauthenticated AES-CTR mode.
The only reason this can't get attacked is they store a SHA256 checksum (yes, really) in the Olm-encrypted message, and while the bottom layer of this is badly designed, it's protected from tomfoolery by higher layers.
Defense-in-depth? Never heard of 'er.
Matrix, probably

2026-02-22 05:30:02 UTC

- reply

What about JSON Web Tokens?
Listen: If you can make JWTs secure without reinventing Macaroons or PASETO, you deserve a Levchin fucking prize.

2026-02-22 05:27:48 UTC

- reply

But I like Matrix/PGP/MTProto and want it to be better!
Then: Get good.
I literally blog about applied cryptography for free. If you steal the info I've shared and use it to benefit projects I hate, I'll be none the wiser.
But if you do this, please don't fucking tell me about it.

2026-02-22 05:24:20 UTC

- reply

It's like PGP.
If I see a thing uses OpenPGP in any capacity, I immediately bail out.
Because I do not want even a second of my life to be wasted on helping spread the misconception that anyone should be using PGP.
Nor do I want to inadvertently make something built on PGP accidentally more secure by the nature of looking at it.
I'd rather it burns to the ground.

2026-02-22 05:10:39 UTC

Let me just put this out here:
If you're coming to me hoping to "mediate" between Matrix or even "win Soatok over"
You're wasting your fucking time.

2026-02-22 02:30:22 UTC

- reply

When this rolls out, your private messages on ActivityPub will be encrypted using post-quantum cryptography, if I have any say in the matter:
https://github.com/swicg/activitypub-e2ee/issues/59

2026-02-22 02:28:08 UTC

- reply

I think the only things really left to do to make them ready for real world deployments are:
Improve documentation
External work
External work meaning:
Write a FASP
Ensure other plumbing is in place for this to land
FEP-521a with Ed25519
RFC 9421 everywhere
And then I can shift gears to MLS-related work so folks can actually encrypt once they have public keys exchanged :D

2026-02-22 02:25:04 UTC

Tagged new releases for every repository in the Public Key Directory project
More test coverage
Found minor specification gaps and filled them
More robust deployments with SQLite
https://publickey.directory

2026-02-20 13:49:44 UTC

- reply

@nprofile…6cmr I refuse to prop up RSA or PGP.

2026-02-20 13:47:18 UTC

- reply

If you don't meet people where they already are, and don't have billions to spend on experiential marketing to train them, you're setting yourself up for disappointment.

2026-02-20 13:45:39 UTC

- reply

I'm trying to solve this problem differently: https://publickey.directory
Key Transparency inverts the responsibility model. It ensures everyone has the same view of the relationships between Actors and Keys at every point in time.
It accomplishes this with an append only data structure.
If anyone is being disciplined or paranoid, and therefore witnessing updates, they can assure the entire protocol is being followed honestly. And most people need to take no action other than use the software normally to be secure.
If power users want to verify fingerprints on top of this, fine, I'm not here to kinkshame.

2026-02-20 13:40:22 UTC

- reply

This is a proposal for how to ensure keys aren't tampered with in group chats:
https://github.com/swicg/activitypub-e2ee/issues/43#issuecomment-3929554771
Some power users might find this useful, or even comforting.
This will not help Johnny encrypt. It demands perfect discipline and training from everyone at all times.

2026-02-20 13:36:54 UTC

If you're designing E2EE in 2026
And your expectation for the user experience is that even half your users will
manually verify key fingerprints, safety numbers, etc.
know whay to do when these mechanisms fail
Then you have not been paying attention to the research at all!
That isn't the normal behavior for how we use software.
When's the last time someone you kmow that doesn't know what "TCP" is inspected a webzite's certificate before sending it their password?

2026-02-20 07:27:08 UTC

Something vexing:
I've got a lot of ideas for improving things, but they're mostly infrastructure / ecosystem projects.
It's very difficult to connect any of them directly to the things people insist they need today.
For example:
Key Transparency for the Fediverse
E2EE for ActivityPub can leverage this
AuxData is useful for other protocols
It's difficult to get most people to know or care about this!
But if you want a federated Discord replacement that can be easily self-hosted without making the host a juicy target for privacy invasions, and you don't want to require users to manually verify keys, this work is essential.

2026-02-20 07:03:22 UTC

- reply

@nprofile…e7lf I read this toot in the style of George Orwell lol

2026-02-20 07:02:52 UTC

- reply

The sword and spear were included mostly because my first doodles (circa 2011) looked like this:
https://furry.engineer/system/media_attachments/files/116/101/670/791/439/876/original/c809d68ea9b4eb0c.jpeg

2026-02-20 07:00:33 UTC

Speaking of which, did I ever share my reference sheet?
Artist: https://bsky.app/profile/ankey.bsky.social
https://furry.engineer/system/media_attachments/files/116/101/652/189/983/806/original/9e007cde61e50784.png

2026-02-20 06:54:32 UTC

If you've decided to follow me because of recent events, beware that I'm mostly not that interesting
I talk about my projects, privacy tech, and furry stuff.
I boost a lot of furry art. I make no apologies for this.

2026-02-20 04:06:49 UTC

- reply

You wanna see a fucking threat model?
Here: https://github.com/fedi-e2ee/public-key-directory-specification/blob/main/Specification.md#threat-model
And this is for an ActivityPub service that just stores data in immutable plaintext and serves it over HTTPS!

2026-02-20 04:04:12 UTC

- reply

Now, am I saying that they're lying or deliberately misleading?
No. I'm describing the incentives they're operating under!
This could be entirely subconscious or even unconscious decisionmaking and/or behavior for all I know.
But it's really suspicious to insist that the specific attack I keep describing is handwaved as "outside our threat model" when their public threat model is so frustratingly incomplete that it might as well just say Cryptography: Vibes.
I mean, look at it: https://spec.matrix.org/v1.17/appendices/#security-threat-model

2026-02-20 04:01:29 UTC

- reply

@nprofile…h7sh It's built on OpenPGP, so I immediately bail out

2026-02-20 03:58:01 UTC

- reply

An F in cryptography is aes-js / pyaes, as this Trail of Bits blog by Opal Wright explains:
Mistakes in cryptography are not a sin, even if they can have a serious impact. They’re simply a fact of life. As somebody once said, “cryptography is nightmare magic math that cares what color pen you use.” We’re all going to get stuff wrong if we stick around long enough to do something interesting, and there’s no reason to deride somebody for making a mistake.
What matters—what separates carelessness from craftsmanship—is the response to a mistake. A careless developer will write off a mistake as no big deal or insist that it isn’t really a problem—yadda, yadda, yadda. A craftsman will respond by fixing what’s broken, examining their tools and processes, and doing what they can to prevent it from happening again.
Does this sound familiar?

2026-02-20 03:55:33 UTC

- reply

But what about "don't make perfect the enemy of good"?
If your cryptography isn't damn near-perfect, it's shit. There aren't many cryptographic solutions that get a C+ in the world. It's either an A, A-, or an F.

2026-02-20 03:52:42 UTC

- reply

Matrix has many incentives to lie or mislead. Their leadership includes the CEO of a company whose product is a Matrix client. There's active political talks about the EU investing heavily in Matrix. He's got a vested interest in looking good, even at the expense of doing or even being good.
On the other hand, I have nothing to gain. If everyone switches to Matrix tomorrow, nothing in my life changes. If Matrix self-implodes and everyone goes back to XMPP tomorrow, nothing in my lfie changes.
The only things I want are:
End-to-end encryption to be better.
End-to-end encryption to become ubiquitous for communication protocols and apps.
The large tech companies whose business models involve privacy violations and stealing from artists and other creative workers to burn down so gloriously that society forgets the word "billionaire" in twenty years.

2026-02-20 03:46:53 UTC

I've had a few people ask why I didn't post the full Matrix email on my Fedi thread. There are two reasons:
It would fit.
Listen carefully:
Y'know how "just getting caught cheating on your monogamous partner" isn't the right time to discuss exploring ethical nonmonogamy?
In a similar vein, asking for information while dismissing a report as "no practical security impact" is still dismissing the goddamn report.
I excerpted the part of their email where they dismissed my report. That was the part that initiated the immediate disclosure. The inciting turn of phrase.
It doesn't matter how much you piss on my leg, I'm not going to believe it's raining.

2026-02-19 17:40:27 UTC

- reply

@nprofile…vnlz @nprofile…uvmw Nope, Barrett reduction is good here

2026-02-19 16:24:58 UTC

- reply

@nprofile…fsuf The actual implementation below uses unwrap() too! I just picked the first one on GitHub's UI to comment on.

2026-02-19 16:18:44 UTC

Matrix continues to suck:
https://github.com/matrix-org/vodozemac/pull/298#discussion_r2828796097

2026-02-19 15:35:57 UTC

- reply

@nprofile…uvmw laughs in constant-time code

2026-02-19 14:14:44 UTC

I see the Matrix leadership's propaganda is convincing the most annoying people to speak
https://bsky.app/profile/soatok.bsky.social/post/3mf7rjhuuk223
https://furry.engineer/system/media_attachments/files/116/097/701/217/320/617/original/35f91d777652e781.jpg

2026-02-19 14:08:43 UTC

- reply

@nprofile…t99y @nprofile…j369 I apprrciate the shitpost fact checking :3

2026-02-19 05:21:18 UTC

Stolen from a hellsite user
https://furry.engineer/system/media_attachments/files/116/095/612/433/571/649/original/685d06e64a9339fe.png

2026-02-19 05:00:46 UTC

- reply

@nprofile…4pdu lol oops

2026-02-19 04:45:36 UTC

- reply

Is there some paychological element I'm missing here?
"I survived the hazing ritual of unreliable software, now it's essential to my identity"?
Like, do we need to consider cult deprogramming tactics to reintegrate them into society or something?
I do not understand their brainworms.