Replying to
@rmondello@hachyderm.io the honest version is:
Remote
پویان Pouyan
@i@toot.pouyan.net
I'm into Internet measurements, love DNS(SEC), and use go as my programming language of choice. I care about privacy and data sovereignty.
This is a single-person instance running Akkoma on a tiny VPS (1 vCore / 1GB RAM / 10 GB NVMe). Posts auto-delete after 30 days.
This is a single-person instance running Akkoma on a tiny VPS (1 vCore / 1GB RAM / 10 GB NVMe). Posts auto-delete after 30 days.
25 Followers
209 Following
50 Posts
Replying to
@aral@mastodon.ar.al Actalis has actually comparable services as Let's Encrypt. But it's not as advances or stable as LE in my opinion.
https://www.actalis.com/activate-free-plan
@EUCommission@ec.social-network.europa.eu
Replying to
@billions@metroholografix.ca a classical case of a-certain-country-that-have-difficulties-with-units-that-the-rest-of-the-countries-use-coins-a-linguistic-travesty:
https://www.irishtimes.com/news/science/better-names-needed-for-large-numbers-1.4337492
@hyc@mastodon.social @Beltliner403@mastodon.online @tadbithuman@mastodon.social
Replying to
@txtx@mastodon.social the article is from one year after the ID check was introduced in Germany.
The point is: the proposed law is not going to have the desired effect. The precedence is Germany and many other countries (e.g., Austria) with similar legislation.
@dangillmor@mastodon.social
Replying to
@dangillmor@mastodon.social Beide obvious faschy vibes, it's not even gonna work. Spammers spoof numbers and use voip numbers from abroad.
Replying to
@stiiin@infosec.space to be honest, browsers could just integrate their own caching resolvers. Browsers do all kinds of crazy stuff (DRM, WebRTC, WASM, …), but when it comes to DNS, they are all like "oh no, how can i do this?"
But I'm with you: that extension would be killer argument.
@dalias@hachyderm.io @SRAZKVT@tech.lgbt
Replying to
@dalias@hachyderm.io I have my own conspiracies as to why browsers don’t support DANE. But I’ll keep them for myself.
Replying to
@dergrobi nice graph. where are the data sourced from?
EDIT: found the answer in your comments. Thanks!
Replying to
@masek I tried to summarize it here:
https://toot.pouyan.net/objects/ba27d4f4-385d-4369-ad30-8c93edfbf349
even for not so tech savvy people :)
Replying to
@gazebo_c@chaos.social ich kaufe mittlerweile immer die vonDecathlon. Wenn ich mich nicht irre, die hatten auch gute Bewertungen bei Tests.
Replying to
@0x63 wahrscheinlich nicht. Doch. Oh.
https://chuuchuu.com/journeys?from=8096003&to=8000191&fromName=BERLIN&toName=Karlsruhe%2520Hbf&date=2026-07-13T12%3A00&tripType=departure&options=%257B%2522transfers%2522%253A-1%252C%2522transferTime%2522%253A0%252C%2522accessibility%2522%253A%2522none%2522%252C%2522bike%2522%253Afalse%252C%2522longdistance%2522%253Atrue%252C%2522regional%2522%253Atrue%252C%2522suburban%2522%253Atrue%252C%2522local%2522%253Atrue%257D
@chuuchuu
Replying to
@0x63 habe mich gestern bei Lidl gefragt: “sind die Barcodes signiert?”. Scheint nicht der Fall zu sein :) werde welche sammeln und schauen was genau kodiert ist.
@jackryder is that you?
@autonomysolidarity
Replying to
@mcdanlj Right, Fedora doesn’t install it by default. The funny part is, that “middle click paste” is the first option that you see, when you open tweaks.
Replying to
@nixCraft I retracted my application last that they asked for an introduction video. GTFO with your whole circus crew, it’s just a job!
Replying to
@stf I think this memo went lost on a lot of politicians. At the same time it was a lesson for the smarter ones: remove consequence from the equation, specially for your opponents, so you can stay safe yourself.
@newsguyusa@flipboard.social
Israelis kill an Iranian. Pakistanis get angry.Americans kill Pakistanis.
Strange times indeed.
RE: https://flipboard.social/@newsguyusa/116164600979334988
Quoting
(Reuters) — US Marines opened fire on demonstrators during the storming of the Karachi consulate over the weekend. https://www.reuters.com/world/asia-pacific/us-marines-fired-protesters-storming-consulate-karachi-officials-say-2026-03-03/
Open quoted postReplying to
@af@cas.social @alvar@freude.social bei mir, Telekom DSL resolver, hat es gestern auch nicht funktioniert. Also die scheinen doch irgendwas mit DNSSEC zu machen.
Replying to
@freci@piaille.fr @dalias@hachyderm.io Google always argues with round-trips, latency, etc. Adam Langley also wrote this about DANE back in 2015:
we probably still wouldn’t implement this aspect of DANE because each extra lookup is more latency and another chance for packet loss to cause an expensive timeout and retransmit.
It was a decade ago, yet 15 years into Google Ads filling the web with ads, burning bandwidth, latency and adding round-trips.
Whenever I see arguments by Google in context of #DNSSEC, I assume it’s in bad faith.
@stiiin@infosec.space @SRAZKVT@tech.lgbt
Replying to
@filippo @matthew_d_green I’d also love to see a physicist take part. This is getting really wild!
Replying to
@campuscodi I used to use open snitch, but it was a one man developer software and eventually I got so frustrated with it that I removed it altogether.
#nix / #nixos is killing me slowly. Many tutorials that I’m finding online assume a solid understanding of the ecosystem, which I’m lacking. I understand the programming language but struggle with workflows and cannot always follow who is calling what or how data is passed around. There is a lot of “convention over configuration” going on, that is unclear to me.
Replying to on chaos.social
@MenschZwoNull@chaos.social immerhin hat die Sparkasse keine Angst vor US-amerikanische Vergeltung, wenn es um rechtsextreme geht:
https://www.hessenschau.de/panorama/gerichtsentscheidung-die-heimat-darf-bei-sparkasse-wetzlar-ein-konto-eroeffnen-v1,kurz-heimat-100.html
Das gleiche habe ich nun mit Hilfe von @0x63@chaos.social für Lidl gemacht:
https://blog.pouyan.net/de/post/2026/2026-04-30-lidl-umstaendlich-verlassen/
Und @Thumas@berlin.social hat einen Online-Generator dafür bereitgestellt:
https://get-out-of-self-checkout-free.tiiny.site/
Interessant ist, dass die Barcodes zur Öffnung der Ausgangsschranke bei Lidl nicht signiert oder auf sonstige Weise kryptografisch gesichert sind. Dadurch kann jeder ganz einfach einen Barcode generieren.
Replying to
@txtx@mastodon.social it does not. Here's a homeless person registering ~200k SIM cards for the ISIS back in 2017:
https://www.wiwo.de/unternehmen/it/terrorabwehr-telekom-will-prepaid-karten-beschraenken/19209268.html
@dangillmor@mastodon.social
Replying to
@aral@mastodon.ar.al indeed. But you need orgs like these and other PKI operators to be able to create a CA that can compete with LE.
Let's Encrypt founding sponsors and partners include Cisco and Akamai. They are also sponsored ATM by Google, Microsoft, etc.
@EUCommission@ec.social-network.europa.eu
Replying to
@david_chisnall what about quantum gates? Aren’t they as important as the number of required bits?
@yacc143 @jornfranke @filippo
Replying to
@jd it’s really ironic, because IRI has a similar clock that counts down to Israel’s destruction:
https://en.wikipedia.org/wiki/Palestine_Square_Countdown_Clock
Israel claimed to have destroyed it during the war last year, but it seemed that they failed:
https://www.france24.com/en/tv-shows/truth-or-fake/20250625-france-24-verifies-is-tehran-s-israel-doomsday-clock-still-ticking
Replying to
@dalias@hachyderm.io @SRAZKVT@tech.lgbt to be fair. DANE would only replace domain validated certs. If a cert contains any other data, e.g. company name, I'd still prefer a trusted third party that can verify and vouch for the correctness of that info. I'm not saying that CAs are doing a good job on that front, but I'd argue that EV certs have their own merits.
Replying to
@schnur@mementomori.social den Bluesky-Beitrag kann ich nicht sehen:
This author has chosen to make their posts visible only to people who are signed in.
Ich habe gesucht, aber konnte die Rede nicht finden. Nur ein Video von Nyke selbst auf Facebook. Ich hätte gern das Originalvideo archiviert.
Replying to
@phileas@infosec.exchange @pid_eins@mastodon.social podman quadlets are also integrated with systemd. I've using them for a while an am really happy.
Replying to
@txtx@mastodon.social one big LOL. Even if we forget that the legal situation was similar to Germany at that time (that's how they found the buyer), you basically argue that no (homeless) person can register a phone number and pass it on to someone else in Germany. Right? Well your search machine of choice has some bad news:
https://www.wiwo.de/unternehmen/it/sim-karten-betrug-bundesnetzagentur-illegale-sim-karten-sind-ein-ungeloestes-problem-/29881776.html
There are literally more than enough examples showing that such do not have the effect they propose.
@km@mastodon.babb.no do you mind me asking if you have any data on de in your mongers database?
Replying to
@G33KatWork@infosec.exchange on GNOME? Either by using the Tweaks app (GUI) or in the command line
gsettings set org.gnome.desktop.interface gtk-enable-primary-paste true
Replying to
@zackwhittaker@mastodon.social I’m not sure you can call it a hack. You can change the app pin from outside the app if you have access to the phone and it’s unlocked.