mastodon 4.7.3Aiven Security Architect
Former two term IETF Security Area Director, IESG
Opensource dev: libreswan, Fedora, etc (see github)
NIST SP800-77 Rev.1 author
RDRonline player
Based on the great work of Antony Green over at redhat for https://github.com/atgreen/block-copyfail which can block copy.fail on a running kernel without reboot, I pacakged up the bpf into a oneshot systemd service you can install and start on many machines https://nohats.ca/ftp/block-copyfail/
RE: @campuscodi@mastodon.social
This is why code that takes untrusted input - like daemons - don’t have permissions to write their own config files
Ohh, I got a cute plaque in RFC format! Thanks #ietf
Here we go again, it's goin' through our heads
Here we go again, we're all wondering when
Here we go again, it's never gonna end
Here we go again, we're going 'til we're dead
Here we go again
People who dislike NIST KEM because of a Kyber hash() removed from hash(prng(x): use wireguard !
Wireguard: session_id = RDRAND(x)
(Bypassing Linux random pool, twice known to crash kernel because failed hwrng on AMD CPUs) multiple session id’s were all zeroes, putting raw random state onto the wire)
“Well known” to be its own incompatible standard and also squatting on the OpenPGP v4 code point. There is no OpenPGP v4, and technically this is a trademark violation of the OpenPGP trademark owned by #ietf
I found Arthur Morgan’s grave! No eagle though so I guess I’m a bad guy
PQ or not PQ, there is no try
Dan Williams was always kind, especially when people became negative which is too common in opensource. He made the opensource world a better place. Helping his family is the least we can do now.
RE: @newsguyusa@flipboard.social
AI has truly taken over the hype lead from blockchain/bitcoin
As I have said before, relying on badly maintained websites for contact information about badly maintained websites is not really secure or useful. Hacked machines will just change it to not alert the real sysadmins.
I’ve already seen so many outdated or 4x errors in these.
There is value in reaching out through alternative channels (social media, LinkedIn, optrust, dns-oarc, mawk, etc)
RE: @olaf@social.secret-wg.org
Cute even I don’t agree with all of it, the essence of the article stands.
No one with the @eff@mastodon.social tool installed in downtown toronto I guess ?
RE: @rfceditor@mastodon.online
This took waaaaay too long for a simple real life needed fix.
“Toronto's Billy Bishop airport could not currently handle the Challenger 650 jet at full capacity, with its 3,988-foot runway. Recently, Ford said his government plans to take over the City of Toronto's stake in the island airport to expand the runway and allow jets to fly in and out.”
I called it! Ford wanted to change the airport only so his own personal government paid jet could take off from downtown.
The same reason why bike lanes had to be removed - because it slows down Your Highness Fnord II
https://www.cbc.ca/news/canada/toronto/doug-ford-jet-airport-runways-9.7172500
Interesting story about accidental trust
Did anyone write a copy.fail exploit yet that does the equivalent of initcall_blacklist=algif_aead_init so that it disabled itself on the running kernel? For those of us with large scale amount of running kernels that take time to replace :)
#fedora Anyone up for a quick re-review of a package that accidentally got orphaned that I'm taking back? Been stalled for a week now :/
Willing to counter-review something too :)
https://bugzilla.redhat.com/show_bug.cgi?id=2460762
RE: @torrentfreak@defcon.social
This was always going to happen. This is why DNS needs to re-decentralize
Wow - th Gravy Plane ride is over ? I think Trump corruption got so bad, Canadians are finally seeing our own version of utterly corrupt (fake thermen, hotels as casinos, science centre rebuild kickbacks, GreenBelt scam)
#topoli I wondered why Ford was mucking with the island airport rules. Since there is basically no construction there, there isn’t any money to hand out to his friends. But then he made Ontario buy himself a private jet and it all made sense
I am looking at you, “Best Buy Marketplace” et all.
