What do they suggest for the secure way to validate the header line?
Let’s say it is Hash: SHA1 and then a million nbsp and then a newline

Is the header line now considered invalid because of arbitrary character limit?
Is it invalid because the maximum length of a known hash function is (insert figure here)?
Should the million nbsp be a part of the text being signed?

At 09:10 - they demonstrate injecting text that does not break signatures - by appending text after manually inserting null terminator.

• Is null terminator a character that can be inserted using any enhanced text editor? How do I do that in vim?
• They go on to say that \v\r is not a new line - but actually I thought that Unix style of text documents end a line that way (\r)?

Am I losing my mind? All magnet links are metadata, no?

Generally true - but multitouch was a real innovation. I’m not familiar with other manufacturers perfecting touch interfaces AND design paradigms optimized for it.

Head-In-Fridge

We’ll see… We’ll see…
* Cue accordion hands *

Shout out to my favorite cover

Any writeup about how this works?