cendyne

cendyne, 8 months ago to random

For you wide screen folks
I have a floating table of contents now
No Javascript
This is all CSS!

Might add js in the future for progress tracking

cendyne, 9 months ago to DEFCON

Ready for quantum stuff? At the Quantum Village, I attended a debate about how advances in quantum technology would improve or harm privacy. In the end, I felt there was a lot of hopes, dreams, dear, uncertainty, and doubt — I had hoped for some substance.

(Look forward to the post quantum cryptography article in 12 days!)

#defcon #blog #quantum

https://cendyne.dev/posts/2023-08-30-the-quantum-debates.html

cendyne, 9 months ago to random

More blog technology!

Reading times are now calculated and added in CI.

The date is also rendered as Today, Yesterday, or a date on the edge.

cendyne, 9 months ago to random

Working on a post quantum cryptography article.

I have like 30 notes to write up into their own paragraph. This is taking a lot of energy.

(Even so, I have articles queued up. Expect 3 this week)

cendyne, 9 months ago to DEFCON

Another DEF CON talk: "Attacking Decentralized Identity". It introduced and clarified DIDs and verifiable credentials in approachable language. Here's my distillation of that introduction.

@cadey also had something to share at the end too

https://cendyne.dev/posts/2023-08-25-attacking-decentralized-identity.html

#DEFCON #identity

cendyne, 9 months ago to security

A short one! At DEF CON, one of the talks shared how to enumerate permissions on AWS without leaving useful events in CloudTrail.

AWSs responses were mixed on repairing these security defects. Security researchers are encouraged to find more undocumented APIs, non-production endpoints, and change the protocol on requests to AWS to find reportable issues.

https://cendyne.dev/posts/2023-08-23-evading-logging-in-the-cloud-bypassing-cloudtrail.html

#security #defcon

geerlingguy, 9 months ago to random

My desk right now... testing ALL the bandwidth!

cendyne, 9 months ago to security

Passkeys align security with the individuals it benefits. Apple, Google, and Microsoft provide their own passkeys now, but the cross platform story remains underserved. Third party password managers have been good enough for many people, I believe it is okay to have passkeys come from those too as they serve individuals across platforms.

https://cendyne.dev/posts/2023-08-21-passkeys-in-password-managers-is-okay.html

#webauthn #security

cendyne, 9 months ago to random

OpenSea won't pay royalties anymore to artists as part of the transactions

Technologists
Keeping Promises
Not even once

cendyne, 9 months ago to DEFCON

First time seeing the orb and it's weird as heck at #DEFCON

cendyne, 9 months ago to random

He looks a lot more menacing at this angle

cendyne, 9 months ago to random

Hey so when is NPM, a Microsoft property, going to add OIDC authentication to publish packages with GitHub, also a Microsoft property?

cendyne, 9 months ago to random

Why do CG anime horses always move so poorly

filippo, 9 months ago to random

Ok I need some help, if I build a library on top of libsodium.js, how am I supposed to handle the annoying sodium.ready promise, or browser ready callback?

Take sodium as an argument to every constructor / exported function?

Make all functions async and await sodium.ready in them?

Do nothing and document (and check) that the caller needs to await sodium.ready?

Assume I want this to work in the browser, too, even if I have not yet figured out how to publish for that.

cendyne, 10 months ago to random

Recalling the time when I reverted work that marketing got into the product: links that automatically log people in through unsolicited campaign emails. These magic links had lifetimes of months and went into a third party email marketing provider. Anyone with access, including interns, could use the links that went into that third party's email merge tables.

Does this give you anxiety? Does it give you vibes?

Nearly unrestricted access to impersonate any user and purchase items with their saved credit cards flayed my mind.

cendyne, 10 months ago to random

Search how to generate password with bash
The first suggestion in the first result is... hash the date

NOOO DO NOT HASH THE DATE

cendyne, 10 months ago to random

Oh goodie, the proof came in!
Gave some feedback to the artist.
If I don't have it complete and delivered by DEF CON I'll be wearing this

cendyne, 10 months ago to random

Life is sad
Pinball from win98 didn't need telemetry

Why does calc need it today

cendyne, 10 months ago to Blog

Here it is! My most precious side project is the very blog that I write on!

So much goes into performance to keep the edit-and-refresh cycle time low.

It was a static site, and while it still builds like one, what you see is really something else.

https://cendyne.dev/posts/2023-07-10-a-precious-side-project.html

#blog #engineering #webdev #typescript

jerry, 10 months ago to random

Quick reminder that infosec.exchange will be down for maintenance later this morning US time to apply some security updates (do not require downtime) and to overhaul the database/redis infrastructure (does require downtime - at least for mere mortals like me)

cendyne, 10 months ago to random

There's a phishing scam spreading like a worm throughout Telegram right now.

One of my friends lost their account and several others nearly fell for it.

Included are instructions to recover your account, how the phishing scam works, and what you can do to combat this threat:

https://cendyne.dev/posts/2023-07-04-help-a-friend-scam-on-telegram.html

cendyne, 11 months ago to random

NIST to withdraw 800-67 R2

In other words, yeet :blobfoxyeet: 3DES for further encryption.

Decryption, key unwrapping, and verification of existing MACs to remain.

#cryptography
https://content.govdelivery.com/accounts/USNIST/bulletins/362a68f

cendyne, 11 months ago to random

I found a video with "No views"

Maybe it is less than 10? Or could it truly be 0?

IETF CFRG meeting notes must not get a lot of ad revenue.

emc2, 11 months ago to fediverse

ITT: open-source, #FediVerse, and how it can influence private sector and create change.

Note up front: I'm going to use words like "decommodify", "consumerism", "capital", and "rentierism" a lot here, because I need the vocabulary. I am not a Marxist or some other kind of radical, nor wholesale anti-capitalist, and certainly not a revolutionary. I'm a social democrat, progressive, and reformist. Keep that in mind if you reply to me.

#OSS #FOSS