TODO.md: s/^\( *\)\*/\1-/

1 files changed, 80 insertions, 80 deletions

diff --git a/TODO.md b/TODO.md
index 3e0bf0f..07a411b 100644
--- a/TODO.md
+++ b/TODO.md
@@ -17,36 +17,36 @@
   <https://bulma.io/documentation/start/migrating-to-v1/>
 
 ## post ideas
-* fast document search: postgres fts, `pg_trgm`, and tika (git/test/sift)
+- fast document search: postgres fts, `pg_trgm`, and tika (git/test/sift)
   (richard asked about this on 2019-07-22, so +1)
   - sqlite3 fts search
-* pi notes
-* k3 notes
-* compiler surprises: https://godbolt.org/z/ZQbZ2R
-* temperature sensors (see SA post, add bit about "meat"): https://forums.somethingawful.com/showthread.php?threadid=3468084&userid=0&perpage=40&pagenumber=176#post494884256
-* sensortron
-* meson-junit
-* pwasm
-* RewriteMap/docker (gist)
-* ev-crash-course (~/git/ev-crash-course)
-* pocket-jim
-* ccs/nuclear/hydrogen is a scam
-* thoughts on "relevance of classic fuzz testing"
-  * https://neverworkintheory.org/2021/10/01/the-relevance-of-classic-fuzz-testing.html
-  * "law of small numbers": http://psychology.iresearchnet.com/social-psychology/decision-making/law-of-small-numbers/
-  * full paper: https://neverworkintheory.org/2021/10/01/the-relevance-of-classic-fuzz-testing.html
-  * legacy debian (hamm): http://archive.debian.org/debian/dists/hamm/main/binary-i386/base/
-  * things i noticed:
-    * possible small set giving extreme outliers
-    * dash is not /bin/sh on all linuxes (only debian-based distros)
-    * wonder about overall size of base installs (base rate fallacy)
-    * summary of rust conclusion seems suspect and different than
+- pi notes
+- k3 notes
+- compiler surprises: https://godbolt.org/z/ZQbZ2R
+- temperature sensors (see SA post, add bit about "meat"): https://forums.somethingawful.com/showthread.php?threadid=3468084&userid=0&perpage=40&pagenumber=176#post494884256
+- sensortron
+- meson-junit
+- pwasm
+- RewriteMap/docker (gist)
+- ev-crash-course (~/git/ev-crash-course)
+- pocket-jim
+- ccs/nuclear/hydrogen is a scam
+- thoughts on "relevance of classic fuzz testing"
+  - https://neverworkintheory.org/2021/10/01/the-relevance-of-classic-fuzz-testing.html
+  - "law of small numbers": http://psychology.iresearchnet.com/social-psychology/decision-making/law-of-small-numbers/
+  - full paper: https://neverworkintheory.org/2021/10/01/the-relevance-of-classic-fuzz-testing.html
+  - legacy debian (hamm): http://archive.debian.org/debian/dists/hamm/main/binary-i386/base/
+  - things i noticed:
+    - possible small set giving extreme outliers
+    - dash is not /bin/sh on all linuxes (only debian-based distros)
+    - wonder about overall size of base installs (base rate fallacy)
+    - summary of rust conclusion seems suspect and different than
       content of paper itself
-    * detailed results are interesting
-* buttcoin:
-  * https://www.theonion.com/man-who-lost-everything-in-crypto-just-wishes-several-t-1848764551
-  * tulip mania
-  * nerd sniping
+    - detailed results are interesting
+- buttcoin:
+  - https://www.theonion.com/man-who-lost-everything-in-crypto-just-wishes-several-t-1848764551
+  - tulip mania
+  - nerd sniping
   https://www.jwz.org/blog/2022/01/mozilla-blinked/
   https://www.wired.com/story/theres-no-good-reason-to-trust-blockchain-technology/
   (nicholas weaver article)
@@ -59,11 +59,11 @@
   https://www.dailykos.com/stories/2022/9/30/2126181/-Bitcoin-mining-is-just-as-bad-for-the-environment-as-burning-gasoline-new-study-finds
   https://theintercept.com/2022/10/26/matt-damon-crypto-commercial/
   <https://www.vox.com/the-goods/23466433/sbf-ftx-zuckerberg-elon-musk-billionaires-lies>
-* syzkaller/syzbot:
+- syzkaller/syzbot:
   https://www.youtube.com/watch?v=YwX4UyXnhz0
   https://clangbuiltlinux.github.io/CBL-meetup-2020-slides/glider/Fighting_uninitialized_memory_%40_CBL_Meetup_2020.pdf
   http://www.antipope.org/charlie/blog-static/2022/11/decision-fatigue.html
-* bpf:
+- bpf:
   https://ebpf.io/
   https://www.brendangregg.com/blog/2021-07-03/how-to-add-bpf-observability.html  https://qmonnet.github.io/whirl-offload/2021/09/23/bpftool-features-thread/
   https://github.com/iovisor/bcc
@@ -71,25 +71,25 @@
   https://pkg.go.dev/github.com/cilium/ebpf
   https://github.com/dropbox/goebpf
   (plus kernel docs)
-* gpg keys, 2021:
+- gpg keys, 2021:
   https://musigma.blog/2021/05/09/gpg-ssh-ed25519.html
-* compression: huffman coding vs arithmetic coding versus asymmetric
+- compression: huffman coding vs arithmetic coding versus asymmetric
   number system compared to shannon entropy (`H(X) = -Σ p(x) log_2(p(x))`)
   https://neptune.ai/blog/lossless-data-compression-using-arithmetic-encoding-in-python-and-its-applications-in-deep-learning
   (zstd rfc, which uses ans)
   (zlib compression doc)
   https://kedartatwawadi.github.io/post--ANS/
-* fun paradoxes:
+- fun paradoxes:
   condorcet paradox
   simpsons paradox
   anscoms quartet
   base rate fallacy
   "law of small numbers" from "thinking fast and slow": http://psychology.iresearchnet.com/social-psychology/decision-making/law-of-small-numbers/
   selection bias (elections and polling)
-* retro gaming handhelds: psp, 2dsxl, rg350m, rgb10 max
-* lvm thin provisioning (see notes from x1.txt and linked gist)
-* log4j and dependency usefulness as a function of time for projects
-* postgres tiny tricks
+- retro gaming handhelds: psp, 2dsxl, rg350m, rgb10 max
+- lvm thin provisioning (see notes from x1.txt and linked gist)
+- log4j and dependency usefulness as a function of time for projects
+- postgres tiny tricks
   - CTEs as optimization barrier:
     https://old.reddit.com/r/programming/comments/suyidt/a_hairy_postgresql_incident/hxdvwl4/
   - `~* ANY(string_to_array(?))` (comment in reddit w/json array)
@@ -102,14 +102,14 @@
   - timestamptz, long timezone names aware of DST
   - RETURNING
   - GENERATED STORED tsvector (bookman)
-* compare and contrast cyclonedx vs spdx
+- compare and contrast cyclonedx vs spdx
   - (at the moment i like cyclonedx more, it seems less ad-hoc)
   - https://cyclonedx.org/docs/1.4/json/
   - https://github.com/spdx/spdx-examples/blob/master/example3/spdx/example3-bin.spdx
   - go parsers for both are available:
     - https://github.com/spdx/tools-golang
     - https://github.com/CycloneDX/cyclonedx-go
-* needed in a package manager
+- needed in a package manager
   - organizational namespacing
     scoped gems: <https://github.com/rubygems/rfcs/pull/40>
   - signing and/or global subdb
@@ -130,8 +130,8 @@
     <https://github.com/golang/go/discussions/55090>
   - motherfucking package managers
     <http://michael.orlitzky.com/articles/motherfuckers_need_package_management.xhtml>
-* radare2, ghidra
-* what would git look like with modern hash (sha-512/256/blake3), data
+- radare2, ghidra
+- what would git look like with modern hash (sha-512/256/blake3), data
   formats (msgpack/protobuf), compression (zstd), language (rust,
   go), and crypto (ed25519)?
   https://lwn.net/Articles/898522/
@@ -142,7 +142,7 @@
   https://fossil-scm.org/home/doc/trunk/www/fossil-v-git.wiki
   bad ideas:
   https://matt-rickard.com/what-comes-after-git/
-* f2p nonsense:
+- f2p nonsense:
   <https://old.reddit.com/r/gamedev/comments/vqlcx9/game_devs_who_have_earned_have_you_found_more/>
   <https://en.wikipedia.org/wiki/Star_Traders:_Frontiers>
   https://www.rockpapershotgun.com/star-traders-frontiers-review#comments
@@ -151,29 +151,29 @@
     https://bitbucket.org/brucelet/space-trader/src/master/app/src/main/java/com/brucelet/spacetrader/
   and the 70s one w/ source:
     https://en.wikipedia.org/wiki/Star_Trader
-* markovian (golang markov chain generator)
+- markovian (golang markov chain generator)
   (~/git/test/go/markovian)
-* hq (~/git/hq)
-* secure C wiki is confluence!?!?
+- hq (~/git/hq)
+- secure C wiki is confluence!?!?
   <https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Coding+Standard>
-* fuzzing (afl)
+- fuzzing (afl)
   <https://www.fuzzingbook.org/>
   <https://wfuzz.readthedocs.io/en/latest/>
-* update mathyd add link to texbox/texoid:
+- update mathyd add link to texbox/texoid:
   <https://pypi.org/project/texoid/>
-* golang opencl:
+- golang opencl:
   https://eli.thegreenplace.net/2021/a-comprehensive-guide-to-go-generate/
   https://github.com/KhronosGroup/OpenCL-Docs/blob/main/xml/cl.xml
-* duktape vs quickjs (vs mujs?)
+- duktape vs quickjs (vs mujs?)
   - lots of mujs stuff on nvd
-* math: multinomial (stars and bars, # of moves on a chess board,
+- math: multinomial (stars and bars, # of moves on a chess board,
   multinomial coefficient, etc), de moir dice problem
   <https://en.wikipedia.org/wiki/Stars_and_bars_(combinatorics)>
   ref: Introduction to Probability with Statistical Applications, ch 2.5
   1e10/81 (1234567890.1234567890)
   gambler's ruin (intro to prob, ch 3.5)
   constant-time fibonacci
-* fzf, ripgrep
+- fzf, ripgrep
 - https://krebsonsecurity.com/2022/08/the-security-pros-and-cons-of-using-email-aliases/
   (email aliases, suggest whitelist instead of blacklist)
 - bad defaults:
@@ -379,36 +379,36 @@
   <https://llvm.org/devmtg/2020-09/slides/Using_the_clang_static_ananalyzer_to_find_bugs.pdf>
 
 ## done
-* add project folders
-* add redirect for old rss links (check error.log)
-* sidebar: github
-* sidebar: other sites
-* post: model 3
-* post: https://pmdn.org/password-strength/
-* tensorflow/docker/libvirt setup (see v4-notes)
-* raspberry pi tensorflow benchmark results
-* bev ranges (github bev-ranges repo / chart)
-* sha2 (https://git.pablotron.org/sha2/, maybe push to github?)
-* pi4-bench (https://pmdn.org/pi4-bench/)
-* keybase (sidebar only)
-* mathy
-* stm32f103c8t6 fun
-* weather-sage
-* nft setup (pmdn, laptop)
-* table shortcode (`hugo-shortcode-table`)
-* removed `script-src unsafe-inline`, A+ score on securityheaders
-* fix RSS to show full feed
-* feedbloater
-* wireguard notes
-* birthday paradox
-* mathyd (repo + examples)
-* really tiny docker images, based on this post:
+- add project folders
+- add redirect for old rss links (check error.log)
+- sidebar: github
+- sidebar: other sites
+- post: model 3
+- post: https://pmdn.org/password-strength/
+- tensorflow/docker/libvirt setup (see v4-notes)
+- raspberry pi tensorflow benchmark results
+- bev ranges (github bev-ranges repo / chart)
+- sha2 (https://git.pablotron.org/sha2/, maybe push to github?)
+- pi4-bench (https://pmdn.org/pi4-bench/)
+- keybase (sidebar only)
+- mathy
+- stm32f103c8t6 fun
+- weather-sage
+- nft setup (pmdn, laptop)
+- table shortcode (`hugo-shortcode-table`)
+- removed `script-src unsafe-inline`, A+ score on securityheaders
+- fix RSS to show full feed
+- feedbloater
+- wireguard notes
+- birthday paradox
+- mathyd (repo + examples)
+- really tiny docker images, based on this post:
   https://forums.somethingawful.com/showthread.php?noseen=0&threadid=2389159&perpage=40&pagenumber=865#post520151251
   https://nathanotterness.com/2021/10/tiny_elf_modernized.html
   (created repo: https://github.com/pablotron/tiny-binaries)
-* rust 1.59.9 stripped binaries (update)
+- rust 1.59.9 stripped binaries (update)
   - https://blog.rust-lang.org/2022/02/24/Rust-1.59.0.html#creating-stripped-binaries
-* CSP-friendly golang coverage reports (see note from k3-notes.txt about
+- CSP-friendly golang coverage reports (see note from k3-notes.txt about
   relaxing CSP for `pmdn.org/coverage/`)
   - https://cs.opensource.google/go/go/+/master:src/cmd/cover/html.go
   - "replace `style='display: none` with `.hide` (shrink html, improve
@@ -425,8 +425,8 @@
 - go-import support <https://go.dev/ref/mod#vcs-find>
 - solar panels
 - jqueries (pablotron/jqueries)
-* site: comment idea: http://donw.io/post/github-comments/
-* site: enable mathjax for articles:
+- site: comment idea: http://donw.io/post/github-comments/
+- site: enable mathjax for articles:
   <https://bwaycer.github.io/hugo_tutorial.hugo/tutorials/mathjax/>
   <http://docs.mathjax.org/en/latest/output/svg.html>
   (alternative, render mathjax as SVG via CLI) (this is what i'm doing,
@@ -454,7 +454,7 @@
 - dark mode: <https://livecodestream.dev/post/a-better-approach-to-dark-mode-on-your-website/>
   quick: <https://gist.github.com/pablotron/4a9a63434a61334f044c8922c48fe8ed>
   ref: <https://bulma.io/2019/10/15/light-dark-colors/>
-* switched to duckduckgo.com (covered in firefox article)
+- switched to duckduckgo.com (covered in firefox article)
   (fast, configurable, dark mode, better privacy)
 - animated svg, another example here (added in site-backend):
   - <https://old.reddit.com/r/programming/comments/t45aqe/5_things_you_dont_need_javascript_for/>
@@ -476,7 +476,7 @@
   - build hooks?
   - go-import support <https://go.dev/ref/mod#vcs-find>
   - rel=me for mastodon
-* use svgmin and imagemagick (webp/avif) (in site-backend, sorta)
+- use svgmin and imagemagick (webp/avif) (in site-backend, sorta)
   convert -quality 100 -define webp:lossless=true llvmweekly-new.{png,webp}
   convert -quality 100 -define heic:lossless=true llvmweekly-new.{png,avif}
 - using matplotlib for charts (added in site-backend)