cendyne

cendyne, 8 months ago to random

AI content will answer any and every question with high confidence

cendyne, 8 months ago to security

JWT, the gift that keeps on giving.

https://starlabs.sg/blog/2023/09-sharepoint-pre-auth-rce-chain/

#jwt #cryptography #security #vulnerability

cendyne, 8 months ago to random

Researching / reimplementing a WIP to do registration for Fur Squared next year. This time with modern payment processing.

It is not as simple as getting a nonce anymore and charging it, if you want to support 3DS verification.

The state diagram I drew while figuring this redirect + back channel webhook stuff out feels like OpenID Connect. It is uncanny how the "secure" primitives of web browsing identity is a bunch of redirects and sometimes with back channels.

ryanc, 8 months ago to random

New level of phone tree evil: "press a key every 60 seconds to remain on hold or your call will be dropped".

cendyne, 8 months ago to random

The use case for AI is to spam

cendyne, 8 months ago to random

Really?
Like I know people are getting acclimated to their windows start menu showing ads. But a soap dispenser?

cendyne, 8 months ago to random

Watched the Mario movie

My first thoughts were: The US CSB has educated me on the dangers of entering constrained spaces, especially pipes

My last thoughts were: wow that was a lot of references and nostalgia. It felt like a mass produced cookie: enjoyable in the moment, and forgotten after.

I guess that's what summer movies are supposed to be?

cendyne, 8 months ago to random

Imagine if Google supported anything for a decade

BlurTheFur, 8 months ago to random

Spoons have been depleted, but I'll be going to the symphony later this evening, and that's always an energy boost 💙

soatok, 8 months ago to random

Furry memes be like: "Call a bottom cute to get a secure password"

Meanwhile: https://gist.github.com/soatok/bf85a7e65f98213da0712be11ce35b1b

cendyne, 8 months ago to random

A debate that begins with "what if the vendor runs in us-east-1 and they go down" falls on its face when we only run in us-east-1

cendyne, 8 months ago to random

Someone wants me to die tomorrow by sending an 8th meeting with no prior notice or context

cendyne, 8 months ago to random

Last public release of openssl 1.1.1

Time for Amazon to move 1000000 microservices to a newer version

cendyne, 8 months ago to random

Love to find masters thesis papers that plagiarize Microsoft documentation. Exact match on "The Length field in a TLV triplet identifies the number of bytes encoded in the Value field" in "Digital Certificates and Threshold Cryptography" from 2013.

cendyne, 8 months ago to DEFCON

Domain fronting — a surprise feature or defect where requests can come in for one host (over TLS) while the request (over HTTP) is for another — enables censorship circumvention in #Tor and obscures traffic by malware used against Ukraine.

Charles Miller shared his research in probing for domain fronting hosts at DEF CON's Crypto and Privacy village #defcon #privacy

Within is a summary of his presentation and a reflection on encrypted SNI, security through intentional design, and the reality that censorship circumvention requires dishonest behavior to succeed.

https://cendyne.dev/posts/2023-09-08-domain-fronting-through-azure-and-cloudflare.html

cendyne, 8 months ago to random

"... but can you run kubernetes on a yubikey?"