TODO.md: add ff ToU nonsense, fast math ideas

1 files changed, 32 insertions, 12 deletions

diff --git a/TODO.md b/TODO.md
index d5abb05..ed72533 100644
--- a/TODO.md
+++ b/TODO.md
@@ -25,10 +25,7 @@
 - fast document search: postgres fts, `pg_trgm`, and tika (git/test/sift)
   (richard asked about this on 2019-07-22, so +1)
   - sqlite3 fts search
-- pi notes
-- k3 notes
 - compiler surprises: https://godbolt.org/z/ZQbZ2R
-- meson-junit
 - pwasm
 - RewriteMap/docker (gist)
 - ev-crash-course (~/git/ev-crash-course)
@@ -188,6 +185,9 @@
   - nullable in code/db (see also: <https://carlineng.com/?postid=sql-critique#blog>)
   - mutable variables
   - fallthrough in switch
+  - returning null vs array
+  - nullable parameters
+  - defer (go, c proposal) vs manual freeing
 - create openssl 3.x provider, see:
   https://www.openssl.org/docs/manmaster/man7/provider.html
   (could use pt-aes, pt-chacha20, md4, md5, sha2, etc)
@@ -254,12 +254,12 @@
 - chacha20 intel intrinsics
 - good book: primes: a computational approach (crandall primes)
 - pi-apalooza (pis found while looking for ethernet spool)
-- flex bookworm update (details in notes)
 - z3-sudoku (github sudoku-solver)
 - c impls of poly1305, siphash
 - post like this talking about renewable stuff (solar, heat pump,
   water heater, dryer): https://gizmodo.com/emission-impossible-two-reporters-tried-to-ditch-natur-1851362650
-- enshittification
+- enshittification (some of these are rug pulls)
+  - f2p games
   - extjs (sencha)
   - docker (podman)
   - chrome (firefox)
@@ -267,6 +267,7 @@
   - terraform (opentofu)
   - hudson/jenkins, openoffice/libreoffice
   - redhat (centos, rocky, almalinux)
+    - jeff geerling: https://www.jeffgeerling.com/blog/2023/dear-red-hat-are-you-dumb
   - vim (neovim)
   - windows (11, telemetry)
   - sorta: elasticsearch (opensearch), redis
@@ -293,10 +294,11 @@
     - go
     - ruby
     - c
-    - python
+    - python (matplotlib, sympy, sagemath)
     - assembly
     - js (es2015)
-- svgbob and ollama
+- sagemath, jupyterlab
+- ollama
 - compare signify, age, and minisign:
   https://flak.tedunangst.com/post/signify
   https://blog.gtank.cc/modern-alternatives-to-pgp/
@@ -312,6 +314,10 @@
   <https://support.mozilla.org/en-US/questions/1292122>
 - firefox privacy-preserving nonsense
   - name idea: "trickle-down privacy"
+- firefox terms of use nonsense
+  https://arstechnica.com/tech-policy/2025/02/firefox-deletes-promise-to-never-sell-personal-data-asks-users-not-to-panic/
+  https://lwn.net/Articles/1012430/
+- firefox tab groups (new in firefox 136)
 - problems w/ tracking apis:
   - orwellian name (does not preserve privacy)
   - analogies for folks to understand correlation: clue, sudoku, wordle
@@ -319,7 +325,7 @@
     uniquely identify someone
   - commenter on lwn: history shows tracking apis are additive (it
     accretes)
-  - my tirade in LWM comments: <https://lwn.net/Articles/981334/>
+  - my tirade in LWN comments: <https://lwn.net/Articles/981334/>
   - <https://connect.mozilla.org/t5/discussions/remove-quot-privacy-preserving-attribution-quot-ad-measurement/m-p/62638/highlight/true#M22002>
   - <https://arstechnica.com/gadgets/2024/07/google-will-not-disable-tracking-cookies-in-chrome-after-years-of-trying/>
   - summary, good tips: <https://blog.zgp.org/turn-off-advertising-features-in-firefox/>
@@ -438,7 +444,7 @@
   - <https://github.com/openssl/openssl/issues/22105>
 - final version of fip203 and fips204
   - explanation of math for both?
-- my post about ml-kem:
+- "hard problems": my post about ml-kem:
   https://arstechnica.com/security/2024/09/microsoft-adds-quantum-resistant-algorithms-to-its-core-crypto-library/?comments=1&comments-page=1
 - simplicity:
   - dbus vs varlink for systemd:
@@ -455,8 +461,21 @@
 - dovecot-fts-imap setup (see notes in k3.txt)
   - (debianisms, issues with indexing speed)
 - ml-kem private key frackas (nist standardized both, ietf agrees to
-  seed, openssl disagrees w/ ietf):
+  seed, openssl disagrees w/ ietf)... "the key issue":
   https://openssl-library.org/post/2025-01-21-blog-positionandplans/?utm_source=atom_feed
+  https://mailarchive.ietf.org/arch/browse/spasm/?q=draft-ietf-lamps-kyber-certificates
+- fast modular arithmetic
+  - good book: primes: a computational approach (crandall primes)
+  - hacker's delight
+  - ridiculous fish article (don't have url)
+  - https://h14s.p5r.org/2023/02/bitwise-division.html
+  - stuff from fips203ipd (barrett reduction parameters)
+  - montgomery reduction:
+    https://jeffhurchalla.com/2022/04/28/montgomery-redc-using-the-positive-inverse-mod-r/
+- signing: random (ecdsa), deterministic (eddsa), hedged (ml-dsa)
+  - bad rng vs side-channel
+  - rng: (ps3)
+  - side channel: not just theoretical (roca)
 
 ## linkdump (2022-08-10):
 - css bg fade:
@@ -482,6 +501,7 @@
 - https://carlineng.com/?postid=sql-critique#blog
 - https://www.openssl.org/blog/blog/2022/08/24/FIPS-validation-certificate-issued/
 - constant-time fibonacci: https://specbranch.com/posts/const-fib/
+- https://fabiandablander.com/r/Fibonacci.html
 - https://specbranch.com/posts/common-perf-numbers/
 - (reminds me of "tyranny of metrics"): <https://old.reddit.com/r/programming/comments/x37u7k/be_goodargumentdriven_not_datadriven/>
 - chebyshev, taylor series: <https://specbranch.com/posts/faster-div8/>
@@ -666,5 +686,5 @@
     <https://arstechnica.com/gadgets/2024/09/ftc-urged-to-make-smart-devices-say-how-long-theyll-be-supported/>
 - temperature sensors (see SA post, add bit about "meat"): https://forums.somethingawful.com/showthread.php?threadid=3468084&userid=0&perpage=40&pagenumber=176#post494884256
 - sensortron
-- block ai slop:
-  - https://robotstxt.com/ai
+- block ai slop: <https://robotstxt.com/ai> (added to site-backend)
+- flex bookworm update (details in notes)