← Feed

Posts

• View post

  Guile-GnuTLS v5.0.2 #guile https://lists.gnupg.org/pipermail/gnutls-help/2026-June/004930.html

• View post

  ”Exploiting ML-DSA bugs” - graphing risks with ML-DSA vs Ed25519+ML-DSA. https://cr.yp.to/papers/mldsa-20260601.pdf

• View post

  “Monitors 36 window.__oai_so_* properties tracking keystroke timing, mouse velocity, scroll patterns, idle time, and paste events. A behavioral biometric layer running underneath the fingerprint.” - how about saying that more clearly: Cloudflare installs a key logger in your ChatGPT browser session. Keystroke timing has been used to discover password, longer texts would be more predictable and easier to reconstruct. https://www.buchodi.com/chatgpt-wont-let-you-type-until-cloudflare-reads-your-re...

• View post

  Contrary opinion: go.sum is a generated non-source file and should not be stored in any git repository.

• View post

  Great talk from @bunnie about the hardware supply-chain as a threat model in https://media.ccc.de/v/38c3-iris-non-destructive-inspection-of-silicon which is similar to my thinking about security dongle safety in https://blog.josefsson.org/2023/04/27/a-security-device-threat-model-the-substitution-attack/ - so I “had” to buy a couple of Baochip-1x and you should consider sponsoring that too! https://www.crowdsupply.com/baochip/dabao

• View post

  ”Cryspen’s Approach to TLS: A Critical Analysis” https://symbolic.software/blog/2026-03-07-cryspen-tls/ - I feel less confident about OpenSSH’s ML-KEM libcrux approach now

• View post

  Please welcome age-plugin-tpm to Debian! @Foxboron https://tracker.debian.org/pkg/age-plugin-tpm

• View post

  Reproducible Guix Container Images #guix #containers #docker #podman #reproduciblebuilds https://blog.josefsson.org/2025/12/07/reproducible-guix-container-images/

• View post

  Interested in SSH and Post-Quantum Crypto? Come to the #PQCSA workshop on Friday afternoon before #FOSDEM and hear my thoughts on the topic! https://www.esat.kuleuven.be/cosic/events/pqcsa-workshop-pqc-migration/

• View post

  Anubis, haphash... did people forget the '“Proof-of-Work” Proves Not to Work' paper? OTOH I still use X-Hashcash in my e-mails. https://www.cl.cam.ac.uk/~rnc1/proofwork2.pdf

• View post

  Interested in Guix containers? In an hour I will be talking in the #fosdem Declarative & Minimalistic Computing devroom https://fosdem.org/2026/schedule/event/ZELSB8-guix-containers/ #guix #gnu

• View post

  ”Reports of Telnet’s Death Have Been Greatly Exaggerated” https://www.terracenetworks.com/blog/2026-02-11-telnet-routing

• View post

  Please welcome Guile Hoot in Debian #guile https://tracker.debian.org/pkg/guile-hoot