I've been using my Phosphor Notes project for about a month now as a replacement for Loqseq / Obsidian, and I've got to say, building something custom was the right call. This is working out really well. The long-form writing support is so much better than what Logseq offers. https://github.com/adcaudill/phosphor-notes
Adam Caudill
Security Engineer, Researcher, & Developer. Formerly at 1Password, BSI / AppSec Consulting, Numorian, etc.
For users of YAWAST / yawast-ng: The project has moved to a new location, and will have a major feature update next week, with plugins, new injection testing, automation & performance improvements, and more. It'll be the biggest release in years. https://github.com/adcaudill/yawast-ng
@zak@infosec.exchange @Em0nM4stodon@infosec.exchange I was thinking about this as well. Trying to figure out how to do this in a way that's both privacy protecting and abuse resistant would be an interesting challenge.
@krypt3ia@infosec.exchange A quick frequency analysis on the largest section I was willing to type (which is fairly small), shows a distribution that's fairly similar to English. It's not random, and characters like A, E, N, R, S, T, etc. match the expected counts.
After a (very) few minutes of looking, my gut feeling is that it's more reordered than substitution.
I was watching a video on Russia rushing to move from Starlink to other satellite internet options, including a Gazprom-owned system using satellites in geosynchronous orbit. I wonder how long it'll be until we start seeing countries de-orbit enemy satellites?
There's an upcoming mission to boost a NASA satellite via a new satellite that'll dock & boost the target, for a fairly cheap $30M. There's no reason I can see that the opposite wouldn't work. Using the same techniques to disturb or de-orbit an enemy satellite.
I would assume that collision avoidance would complicate this, but have to wonder if these communication satellites are manoeuvrable enough to avoid a dedicated satellite built to find and grapple a target. For a country like Ukraine, financing such a mission could have massive ROI. (Though lots of complications for the launching country.)
I have a bad habit of forgetting about holidays - so I took advantage of the fact that I'm building a PKM app to add a banner to daily journal notes for holidays. Simple & thoughtful touches like this can make software so much more useful.
@zak@infosec.exchange Luckily, I use oh-my-zsh, so enabling it was just adding the name of a plugin to the .zshrc - less than a minute from start to finish. That'll pay for itself within a day or so.
@zak@infosec.exchange Thanks for posting this - after several years of using this particular MBP, I finally got around to enabling per-directory history in zsh.
This exact thing has been driving me nuts lately, but I hadn't realised how annoying it was until I started to type a reply.
Rough morning for the GitHub folks. And everyone trying to work.
For those that enjoy my short stories, here's the latest: "Sweet Dreams" - an exploration of technology & human motivations, and the nature of escapism. https://adamcaudill.com/writing/2026/02/07/sweet-dreams/
If you use a PKM tool (Logseq, Obsidian, etc), what do you like? What do you hate? What needs do you have that aren't being met? I'm working on a new PKM, and I want to make sure that I'm hitting the key points early in development.
