Last synced from Twitter 855d ago
BPF, XDP, Packet Filters and UDP
1
Thomas H. Ptacek
Kurt asked me to make UDP services work on Fly.io so I gave him 3000 words on packet filters from the 1980s. fly.io/blog/bpf-xdp-p…
87d
Interview with Thierry Volpiatto, maintainer of Emacs Helm –
3
Thomas H. Ptacek
The guy who maintains Helm, the most important package in Emacs, is a 57-year old alpine mountain guide who learned to program when he was 42, as a hobby.
126d
FiloSottile/yubikey-agent
yubikey-agent is a seamless ssh-agent for YubiKeys. - FiloSottile/yubikey-agent
1
Thomas H. Ptacek
It’s been a day and Filippo’s yubikey-agent has already improved my life more than anything I’ve installed this year. I can’t believe I put up with gpg-agent as long as I did.
192d
Latacora - Stop Using Encrypted Email
Email is unsafe and cannot be made safe. The tools we have today to encrypt email are badly flawed. Even if those flaws were fixed, email would remain unsafe. Its problems cannot plausibly be mitigated. Avoid encrypted email.
Technologists hate this...
BLAKE3-team/BLAKE3
The BLAKE3 cryptographic hash function. Contribute to BLAKE3-team/BLAKE3 development by creating an account on GitHub.
1
Thomas H. Ptacek
I’m not usually all that lit up about new crypto primitives but BLAKE3 is really, really cool.
372d
building lattice reduction (LLL) intuition | kel.bz
1
Thomas H. Ptacek
This is an extremely good, straightforward writeup on the LLL basis reduction algorithm that I find myself reading for one reason or another a couple times a year and so now you’re reading it too.
407d
Windows will improve user privacy with DNS over HTTPS
Brought to you by Tommy Jensen, Ivan Pashov, and Gabriel Montenegro Here in Windows Core Networking, we’re interested in keeping your traffic as private as possible, as well as fast and reliable. While there are many ways we can and do approach...
1
Thomas H. Ptacek
Microsoft is standardizing on DoH. Chrome and Mozilla are actively supporting DoH. Stick a fork in the DoT/DoH debate; it’s done.
423d
HERETICON
MAY 2020, NEW ORLEANS
4
Thomas H. Ptacek
Peter Thiel is starting “a conference for people banned from other conferences”, “a safe space for people who don’t feel safe in safe spaces”. Extremely on-brand.
472d
[DSCTF 2019] CPU Adventure – Unknown CPU Reversing
or: reverse-engineering a custom, unknown CPU from a single programtl;dr: We reverse-engineered a program written for a completely custom, unknown CPU architecture, without any documentation for th…
Index of /cryptopals/
1
Thomas H. Ptacek
It has come to my attention that it is not at all clear that @spdevlin’s Cryptopals Set 8 is public, and has been for awhile
498d
Latacora - How (not) to sign a JSON object
Last year we did a blog post on interservice auth. This post is mostly about authenticating consumers to an API. That’s a related but subtly different problem: you can probably impose more requirements on your internal users than your customers. The...
1
Thomas H. Ptacek
Startups keep asking us how to sign JSON objects and @lvh got sick of re-explaining and wrote this.
542d
Latacora - The PGP Problem
Cryptography engineers have been tearing their hair out over PGP’s deficiencies for (literally) decades. When other kinds of engineers get wind of this, they’re shocked. PGP is bad? Why do people keep telling me to use PGP? The answer is that they...
Title not found
2
Thomas H. Ptacek
This site is asking you for your Chase bank account number and all your personal identifying information so it can send a postal letter on your behalf.
584d
Pwnie Awards
1
Thomas H. Ptacek
The 2019 Annual Pwnie Awards, recognizing excellent and/or notoriety in the Exploitative Arts, have announced the award categories open this year
594d
CERIAS - Center for Education and Research in Information Assurance and Security
The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world’s leading centers for research and education in areas of information and cyber security that are crucial to the protection...
1
Thomas H. Ptacek
There’s not a whole lot that Spaff says that lights me up, but he’s got RSAC surprisingly well dialed in.
679d
A DNS hijacking wave is targeting companies at an almost unprecedented scale
Clever trick allows attackers to obtain valid TLS certificate for hijacked domains.
1
Thomas H. Ptacek
A DNS hijacking wave “of unprecedented scale” used to misissue TLS certificates… and DNSSEC (surprise!) does nothing to stop it.
735d
QUIC Crypto and simple state machines
If you don't know about QUIC, go read the excellent Cloudflare post about it. If you're lazy, just think about it as:
Google wanted to improve TCP (2.0™️)
but TCP can't really be changed
so they built it on top of UDP (which is just IP with ports,...
1
Thomas H. Ptacek
David has a strong, short post on QUIC’s crypto protocol vs. TLS, based on a strong, short slide deck from AGL on same
756d
Remotely Exploiting Zoom Meetings – Tenable TechBlog – Medium
Hello Everyone,
1
Thomas H. Ptacek
Congrats to David Wells on a really excellent vulnerability. Update your Zoom client, or throw it into a dumpster and light it on fire.
774d
That Time the City of Seattle Accidentally Gave Me 32m Emails for 40 Dollars
1
Thomas H. Ptacek
Today in Matt’s FOIA Adventures: “That Time the City of Seattle Accidentally Gave Me 32m Emails for 40 Dollars”
819d