Mark Eichin

Mark Eichin

@eichin.bsky.social

https://mastodon.mit.edu/@eichin https://www.thok.org/bloggery/ https://www.flickr.com/photos/eichin/

473 followers274 following1.4K posts

Making another attempt at apple crisp ice cream. Two refinements: 2x as much streusel per apple, and apples diced much smaller (since they are eaten baked soft, but frozen.)

(Will do the ice cream part in the morning; a friend described it as "inside out apple pie à la mode", so I'm planning on just vanilla again, but adding reduced apple cider might be good too...)

Ooh, I got *some* shiny autumn leaves today and yesterday but nothing quite this vibrant (just inside 495; I think we got colder cold snaps earlier which "starts the clock" for at least some of the trees.) Maybe I should head inward and hit Mt Auburn Cemetery this week :)

Jenn@jennmaitri.bsky.social

Was able to get out on this gorgeous day. Forest Hills Cemetary was so peaceful and full of vibrant colors - the pictures don't do the leaves justice. For my peeps who are not able to get out, this is for you 💜 @universalhub.com @conciergeboston.bsky.social @migrainechat.bsky.social

23 new pix http://flic.kr/p/2sJjLbR [Massachusetts,Acton,Assabet River Blue and Green Trail,autumn,leaves,great blue heron,colors,Reflections,In flight,Red-winged blackbird,Knox Trail Road,canada goose,camouflage,silhouette,cormorant,boardwalk,Raccoon,flock,bench,trail,sky]

23 new pix http://flic.kr/p/2sJ8qu3 [Mass Wildlife's Delaney Wildlife Management Area,Massachusetts,Stow,colors,leaves,autumn,trail,bluebird,Reflections,scenery,lake,rusty blackbird,parking lot,silhouette,equipment,preening,Harvard,sunset,border,moon,sign,Road,Rock]

21 new pix http://flic.kr/p/2sHXh8T [Great Meadows National Wildlife Refuge,Massachusetts,autumn,leaves,canada goose,In flight,Red-winged blackbird,colors,composition,sunset,flock,Wood Street,mallard,ducks,moon,woolly bear caterpillar,great blue heron,Concord River,album cover,Reflections...]

Mark Eichin reposted

Jaju Pierogi is coming to Gracie’s in Union Square, Somerville on Tues 10/27 from 5-7pm for a pierogi pop up. And the best part? We made a sour cream and chive ice cream to put on top. (Or on the side). $15 for 4 pierogi and a scoop of the tangiest sour cream and chives ice cream you ever had.

10 new pix http://flic.kr/p/2sHxNvm [Wood Street,Concord,sunflowers,seedlings,trailcam,infrared,night,recipes,porch,apple crisp ice cream,ice cream machine,coffee ice cream,french press,coffee milk,measurement,birdfeeder,woodpecker,whole milk,cuisinart,squirrel,bluejay,opossum,sparrow,Rabbit...]

Huh, the "4" thing triggered a *deep* memory from the early 1990s. Hanging out at SIPB, reading mailing lists and noticed a message with a non-PGP signature-like thing and commented on it - Jeff Schiller happened to be around, glanced at it and asked for a copy...

View full thread

So he just had a list of all 256 private keys :-) The bug itself had long been fixed, but apparently somehow not all of the (dozens of?) users had heard about it and regenerated keys (they didn't have the modern "blow up on bad keys" idea yet.)

(I'm pretty sure Jeff got in touch with them privately about fixing the problem - if you were doing anything *at all* with security at that era of the internet you knew who he was, whereas I was just some random :-)

Huh, the "4" thing triggered a *deep* memory from the early 1990s. Hanging out at SIPB, reading mailing lists and noticed a message with a non-PGP signature-like thing and commented on it - Jeff Schiller happened to be around, glanced at it and asked for a copy...

Not only had he recognized it (I *think* it was S/MIME which dates it to 1995ish) but as more of a "digital packrat" that even I am, he rummaged through some old files, ran a little code and then highlighted a string of characters on his screen: "That's their private key."

Turns out there was an early implementation (by RSADSI themselves?) of S/MIME that had a poorly constructed bit of C code that meant that they only had 256 distinct keys. (ISTR it wasn't just a single byte, but it might have been the byte repeated - definitely only 8 bits of entropy, anyway.)

Mark Eichin reposted

If you don’t know what these words mean don’t ask your LLM to implement your crypto idea for you Am I being elitist? Sure, in the same sense that I’m being elitist when I tell you not to cover yourself in gasoline and light a cigarette

Mark Eichin@eichin.bsky.social

(Flashbacks to implementing krb4 in pure perl. Then dawning horror that coding LLMs are so unselective that they've ingested it)

On a technicality, my shortest job (and longest interview cycle) was Apollo - Interviewed, they "went dark" leading up to the HP acquisition, I got an actual offer six months later - I ended up working for Apollo for about a week before becoming an HP employee :-)

This post is unavailable.

8 new pix http://flic.kr/p/2sF9oej [Massachusetts,Mass Wildlife's Delaney Wildlife Management Area,Stow,colors,Wheeler Field,Concord,leaves,autumn,Reflections,sunset,birds,Red-winged blackbird,canada goose,silhouette,Pine cones,nest box,landing,sparrow,clouds]

mmm, there's Not Enough Popcorn for this one :)

Randy Milholland@choochoobear.bsky.social

Adobe: "Artists are just going to have to accept AI as a part of our products." ArtCraft: "We used Claude to basically rebuild all Adobe products and we're just putting it online for you to download." Adobe: "No not like that." arstechnica.com/ai/2026/10/s...

Mark Eichin reposted

To the person noting there is not enough money in the world to license every piece of intellectual property stolen for "AI" training: you're sooooo close to the point, friend, keep going, you'll get there if you try

16 new pix http://flic.kr/p/2sDLqD5 [Massachusetts,Great Meadows National Wildlife Refuge,Concord,great blue heron,canada goose,feeding,In flight,mallard,ducks,fish,flap,parking lot,Whole Foods,camouflage,wood duck,formation,pouncing,tricycle,nest box,Bedford,berries,autumn,colors,leaves,shiny...]

Mark Eichin reposted

Replying to @kevinr.free-dissociation.com

We have understood these principles for a very long time in network security. Giving a software-and-cybersecurity-genius-that-can-move-at-superhuman-speed a command prompt and a network connection is not a "sandbox" it is a "launchpad".

Mark Eichin reposted

Engineering ethics are complicated and imperfect, but I will always vividly remember how my Materials Science professor opened the course by showing us pictures of the Hyatt Regency walkway collapse and then walking through the free body diagram diagramming the exact mistake that caused the disaster

This post is unavailable.

I love that this wasn't security research or formal audit, but [the author's] "deranged quest to run a Radicle node inside a browser tab" by "reading heartwood’s source(opens in a new tab) line by line and rewriting it in TypeScript, byte for byte".

Kostis Maninakis 妙祇@maninak.bsky.social

The cat's out of the bag: what I discovered is that #Radicle has a major security vulnerability. That's a first of that magnitude and a learning experience for me. I hate everything about it, but shit happens. Better now than later. I wrote the whole story at 👇 maninak.com/blog/radicle...