Aaron Toponce ⚛️:debian:

Finalized my pacing strategy for Saturday. It's optimistic, but "PR or ER" as they say.

Race start is 7:00 AM.

#running #RunnersOfMastodon #marathon

I've got a #marathon race on Saturday. With all the training behind me, curiosity gets the best of me and I want to know what the various models think.

My PR currently is 3:12:09 and to qualify for Boston, I need to run under 3:15:00.

- Suunto (my watch): 3:15:28
- V.02 (based on a 10K TT): 3:21:00
- Yasso 800s (3 weeks ago): 3:22:45
- Stryd (based on my PDC): 3:27:58

Suunto has always been remarkably accurate for me while Stryd has always been too conservative.

#running #RunnersOfMastodon

Ugh. None of these work yet they all meet the minimum requirements.

.1J7iq[-H='U$:5NdF+m
Jc6ndIb}KDJrs*ShZd~L
me5;^h-A_D?3iP&NE&0!
#LdSzNQS%R@25:R+E'])
(%iQ*ufGgReKi1*lnL]a
,)H:c\omjw3Y\?TDh#-?
S(=wJ>%HM77a?#RaR|~9
}5]T;a$zoW"op@[email protected]}(
VBa]v)Jx8zZ`K?CT[\*2
z\Lc_?*3Zn2E`-nw5dy|

Fucking hate this shit. This is why we can't have nice things.

Maybe I should only include [0-9a-z] instead. EG:

8vh1t7rv8ws3llwgji7k

#passwords

As part of my marathon training, I ran a 15K time trial in my long run today.

#Stryd's PDC model suggested running 294 W, which felt a little low. But I guess it was decently accurate.

15 km: 1:08:56, 296 W, 4:36/km, 149 bpm

When I started, my found my rhythm quickly, which had me slightly nervous I was over-cooking. But I managed to hold the effort just fine.

Finishing, I felt there was still a touch left in the tank though. Perhaps I could have run 300 W.

#running #runnersOfMastodon

I'm a huge fan of #AeroPress #coffee. I've been using one since 2015. It's my daily driver. But $170 USD for a double-walled stainless steel AeroPress? Hard pass.

TIL #coffee lord and savior James Hoffmann is running and training with the #Stryd power meter.

Kick ass James! Welcome to the nerd side of #running!

https://www.reddit.com/r/strydrunning/comments/1p2uonx/adaptive_training_experience_3_weeks_in/

TIL #PicoCrypt has been archived. That's a shame. It's very solid software that I've recommended to many people as a simple file encryption tool with a GUI.

Sure, there's Cryptomator, VeraCrypt, and some others. But they don't quite capture the simple elegance PicoCrypt did.

https://github.com/Picocrypt/Picocrypt/issues/134

#crypt #Cryptography

I'm trying to understand the hesitation many runners have towards #running power, especially #Stryd.

Some say different shoes give drastically different watts for the same effort/pace. This hasn't been my experience though, across many different types and brands of shoes.

Some say it's horrible at wind and hills. Again, I cannot confirm. In light breezes to stiff wins, the watts remains predictable and reliable. Same with shallow to moderately steep hills.

1/n

#RunnersOfMastodon

Jim Sanborn is auctioning off the solution to Kryptos K4.

https://www.rrauction.com/jim-sanborn-kryptos-k4-solution-auction/

#Kryptos #k4 #codes

Despite the claims made otherwise, #Strongbox is not #OpenSource software.

https://github.com/strongbox-password-safe/Strongbox/issues/784

This is Internet Gold.

> "... it is important to note that the compression algorithm used by lzip only discards the unimportant data. And if it was unimportant before, what makes it so important now? Huh? In fact, many users may find that compressing their entire file system and then restoring it will be a good way to learn what is truly important."

https://web.archive.org/web/20010608045914/http://lzip.sourceforge.net/faq.html

#compression #AprilFools #opensource #lzip

How many words can you type using only characters on the home row of your keyboard using different layouts? Using /usr/share/dict/words on my machine:

% cd /usr/share/dict
% wc -l words
104334 words

% grep -Pci "^[asdfghjkl;-]+$" words #Qwerty
188

% grep -Pci "^[anisfdthor]+$" words #Maltron
1276

% grep -Pci "^[aoeuidhtns-]+$" words #Dvorak
2059

% grep -Pci "^[ashtgyneoi']+$" words #Workman
2415

% grep -Pci "^[arstdhneio']+$" words #Colemak
5090

For the #RunnersOfMastodon who train with #Stryd, they just dropped a new article from an Olympic coach who uses Stryd with his athletes.

It dives into the weeds with the detailed metrics Stryd provides, what they are, average ranges, and what you can do to improve them.

This is probably, single-handedly, the best article they've released to date IMO. It answers the question "how can I be a better runner with all these metrics?"

https://learn.stryd.com/improve-running-efficiency

#running

8,192 French #Diceware word list for use with computers.

#passwords #passphrases

https://theworld.com/~reinhold/wordlist_fr_8192.txt

For the most part, I enjoy the #Codeium extension for #VisualStudio. More often than not, it auto-completes code and comments that I want.

But just now, I'm typing out weeks in comments:

// Nov 4 - Nov 10
...
// Nov 11- Nov 17
...
// Nov 18 - Nov 24
...

And it just completed for me:

// Nov 25 - Nov 31

Last I checked, there aren't 31 days in November.

#programming

Looks like Arnold Reinhold's home directory ~reinhold/ no longer exists on The World, even though the ISP is still online.

This means the #Diceware page is no longer accessible.

Anyone know what's going on?

#passwords

https://theworld.com/~reinhold/

Did you know the #Diceware word list has the following words?

35413 kkk
35416 klan
35425 klux

#passwords

I don't know why I haven't searched for this before, as I'm a huge #hp48 nerd, but here is x48ng, an #opensource HP48GX emulator project.

https://github.com/gwenhael-le-moine/x48ng

HP1973 project brings the HP-45 back to life, not only with full emulation, but showing the ROM workings under the hood.

Beautiful.

#hpcalc

https://hackaday.com/2023/07/24/hp1973-project-highlights-workings-of-hp-45-calculator/

The #LastPass password generator uses a userspace #RC4 generator.

Here's their #JavaScript:

dogenerate() -> lpCreatePass() -> get_random() -> rng_get_bytes() -> rng_get_byte() -> prng_newstate() -> ARC4init(); ARC4next()

As RC4 is insecure, you would be wise not to use their web-based password generator.

Further, it seems likely they're using the same code in their password manager. You would be wise not to use it there also.

#cryptography #passwords

https://www.lastpass.com/features/password-generator

#PassGAN isn't really doing anything new we haven't already been doing with Markov chains when it comes to password cracking. Don't buy into the hype.

#passwords

https://arstechnica.com/information-technology/2023/04/the-passgan-ai-password-cracker-what-it-is-and-why-its-mostly-hype/

OpenSSL merged the Argon2 KDF

#cryptography #OpenSSL #Argon2

https://github.com/openssl/openssl/pull/12256

#Twitter will adopt #SignalProtocol for encrypted DMs, according to Jane Manchun Wong. Unfortunately, she deleted her account due to racist attacks against her.

#e2ee #cryptography

https://www.tesmanian.com/blogs/tesmanian-blog/twitter-will-adopt-the-signal-protocol-for-encrypted-dms-says-security-researcher

SHA-3 buffer overflow

#cryptography #sha3 #cryptanalysis

https://mouha.be/sha-3-buffer-overflow/

@[email protected] and I are having a friendly debate on lobster.rs about #JavaScript #cryptography libraries (I have a lot of respect for Soatok). So I'm curious.

If you were to implement a JavaScript cryptography library, which would you choose, and why?

#OpenPGP #NaCl #libsodium