← Feed

Posts

• View post

  Ifyou want a slop-free identity manager, then consider giving https://github.com/kanidm/kanidm a look

• View post

  I need some advice on flashing a bare esp32-c3-12f board - with probes I can get a flasher to connect to serial and read it booting, but there are connectivity issues and it wont flash or reset. Pretty likely ive wired it wrong, but there is so much slop these days I cant find the wiring needed. Any help is welcome :)

• View post

  Four word horror story: "Vibe coded certificate authority" Im sorry.

• View post

  Does anyone happen to know if Alpine is slop free still?

• View post

  Apparently you can just torpedo the side of a bus with your car and walk out with a $700 fine? https://www.abc.net.au/news/2026-07-30/qld-car-lodges-in-bus-rocklea/106974526

• View post

  @mike@social.chinwag.org Yeah fair mate. If you ever want to know more lmk, I'm always happy to help out. But generally a pw + totp in a password manager is pretty good in many cases.

• View post

  @mike@social.chinwag.org Solid response. But it is a lot easier to understand as a high-entropy password that is hot-glued into my password manager. But when I use it I can't be phished and a bunch of other attacks just go away. Generally my advice is engage with passkeys on your terms, not the websites or vendors.

• View post

  This may come as a shock, but did you know Passkeys are single factor? Why yes, I am causing problems again today. https://fy.blackhats.net.au/blog/2026-07-23-passkeys-are-single-factor/

• View post

  Oh to be a little lion, enjoying a hanmock #caturday

• View post

  Count Binface is giving me life, and oh how I wish we had someone like this in Australia.

• View post

  At this point, I feel like it's actively negligent to have openssl or gnutls in your project as a dependency.

• View post

  Fuck xml.

• View post

  My partner got a new electric toothbrush and it seems the head has a pressure relief valve so that if you "suck" on the head you bring in air instead. Im struggling to find the design and engineering why this is part of the design. Any ideas?

• View post

  Weird rust question: I have a trait T that is implemented by A and B. I want to make a new type C that contains an A (eg C<A>) where C impl T, but without having to redefine every trait method that T has with fn method() { self.a.method() }. Is there a way to "project" an inner types trait to an outer? In my research my current vibe is "no", so I'm thinking the best option may be to allow C to deref to A, but that breaks dyn.

• View post

  Something I setup a few years ago that I have never regretted since is an ArchiveBox instance at home - It's been fantastic as a way to not only bookmark but keep copies of information that I've found useful over time. Also cool because it automatically archives links/references too which can be great for preservation.

• View post

  RE: https://live.acarsdrama.com/@acarsdrama/116683531117865946 Its not commonly known but all 737s have a standard issue furry on board that can be unleashed midflight to resolve technical issues.

• View post

• View post

  This might be the most unhinged crate I've ever seen https://docs.rs/decrust/latest/decrust/

• View post

  @jerry@infosec.exchange Yeah passkeys are really prone to this as they bake in the domain name now so youre locked in. Not surprised they made a schmozzle out of it.

• View post

  @fastmail@mastodon.social Its a real shame your passkey impl has flaws as it attempts to force platform only keys.

• View post

  IMPORTANT! We have released Kanidm v1.9.3 which contains six security fixes, two rated HIGH for remote unauthenticated denial of service. Please upgrade immediately! https://github.com/kanidm/kanidm/releases/tag/v1.9.3

• View post

  IMPORTANT - In the coming days we will be releasing an important security update for Kanidm which will resolve six issues. Two of these advisories are rated HIGH. You should be ready to upgrade to 1.9.3 / 1.10.0 asap once they are released.

• View post

  I have been avoiding this for a long time, but once again I have written about the state of passkeys - https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-still-have-problems/

• View post

  Very excited to share what I've been working on these past months - Kanidm and 389-ds are both being used in the new SUSEID / OpenSUSE community authentication stack. My colleague Jose spoke about this at CCC https://media.ccc.de/v/5019-suseid-open-by-design-sovereign-by-choice

• View post

  Its been such a fun experience to be using freebsd again, its really brought back some joy of messing with servers to me.