Firstyear
firstyear@infosec.exchange
<p>Senior LDAP/IDM Tech Debt Collector <br />@SUSE. Supermarket Thought Leader. Author of Kanidm, concread and webauthn-rs. he/him</p>
Posts
-
Post #4263068
Apparently you can just torpedo the side of a bus with your car and walk out with a $700 fine? https://www.abc.net.au/news/2026-07-30/qld-car-lodges-in-bus-rocklea/106974526
-
Post #4029804
@mike@social.chinwag.org Yeah fair mate. If you ever want to know more lmk, I'm always happy to help out. But generally a pw + totp in a password manager is pretty good in many cases.
-
Post #4029730
@mike@social.chinwag.org Solid response. But it is a lot easier to understand as a high-entropy password that is hot-glued into my password manager. But when I use it I can't be phished and a bunch of other attacks just go away. Generally my advice is engage with passkeys on your terms, not the websites or vendors.
-
Post #4029233
This may come as a shock, but did you know Passkeys are single factor? Why yes, I am causing problems again today. https://fy.blackhats.net.au/blog/2026-07-23-passkeys-are-single-factor/
-
Post #3729342
Oh to be a little lion, enjoying a hanmock #caturday
-
Post #3687444
Count Binface is giving me life, and oh how I wish we had someone like this in Australia.
-
Post #3661049
At this point, I feel like it's actively negligent to have openssl or gnutls in your project as a dependency.
-
Post #3595075
Fuck xml.
-
Post #3293998
My partner got a new electric toothbrush and it seems the head has a pressure relief valve so that if you "suck" on the head you bring in air instead. Im struggling to find the design and engineering why this is part of the design. Any ideas?
-
Post #3154113
Weird rust question: I have a trait T that is implemented by A and B. I want to make a new type C that contains an A (eg C&lt;A&gt;) where C impl T, but without having to redefine every trait method that T has with fn method() { self.a.method() }. Is there a way to &quot;project&quot; an inner types trait to an outer? In my research my current vibe is &quot;no&quot;, so I&#39;m thinking the best option may be to allow C to deref to A, but that breaks dyn.
-
Post #3154112
Something I setup a few years ago that I have never regretted since is an ArchiveBox instance at home - It&#39;s been fantastic as a way to not only bookmark but keep copies of information that I&#39;ve found useful over time. Also cool because it automatically archives links/references too which can be great for preservation.
-
Post #3154111
RE: https://live.acarsdrama.com/@acarsdrama/116683531117865946 Its not commonly known but all 737s have a standard issue furry on board that can be unleashed midflight to resolve technical issues.
- Post #3154110
-
Post #3154109
This might be the most unhinged crate I&#39;ve ever seen https://docs.rs/decrust/latest/decrust/
-
Post #1797665
IMPORTANT! We have released Kanidm v1.9.3 which contains six security fixes, two rated HIGH for remote unauthenticated denial of service. Please upgrade immediately! https://github.com/kanidm/kanidm/releases/tag/v1.9.3
-
Post #1762656
IMPORTANT - In the coming days we will be releasing an important security update for Kanidm which will resolve six issues. Two of these advisories are rated HIGH. You should be ready to upgrade to 1.9.3 / 1.10.0 asap once they are released.
-
Post #1444047
I have been avoiding this for a long time, but once again I have written about the state of passkeys - https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-still-have-problems/
-
Post #978784
Very excited to share what I&#39;ve been working on these past months - Kanidm and 389-ds are both being used in the new SUSEID / OpenSUSE community authentication stack. My colleague Jose spoke about this at CCC https://media.ccc.de/v/5019-suseid-open-by-design-sovereign-by-choice
-
Post #695776
Its been such a fun experience to be using freebsd again, its really brought back some joy of messing with servers to me.