Paul Wouters 🇪🇺🇨🇦
letoams@defcon.social
<p>Aiven Security Architect<br />Former two term IETF Security Area Director, IESG<br />Opensource dev: libreswan, Fedora, etc (see github)<br />NIST SP800-77 Rev.1 author<br />RDRonline player</p>
Posts
-
Post #4310759
RE: https://fedi.lwn.net/@lwn/116970777095776502 Dan Williams was always kind, especially when people became negative which is too common in opensource. He made the opensource world a better place. Helping his family is the least we can do now.
-
Post #4310758
PQ or not PQ, there is no try
-
Post #4310757
People who dislike NIST KEM because of a Kyber hash() removed from hash(prng(x): use wireguard ! Wireguard: session_id = RDRAND(x) (Bypassing Linux random pool, twice known to crash kernel because failed hwrng on AMD CPUs) multiple session id’s were all zeroes, putting raw random state onto the wire)
-
Post #4310756
I found Arthur Morgan’s grave! No eagle though so I guess I’m a bad guy
-
Post #4310755
Here we go again, it&#39;s goin&#39; through our heads Here we go again, we&#39;re all wondering when Here we go again, it&#39;s never gonna end Here we go again, we&#39;re going &#39;til we&#39;re dead Here we go again
-
Post #4310754
RE: https://cyberplace.social/@GossiTheDog/116998541690907335 1) Burn more gas 2) ??? 3) Blame Canada !
-
Post #3026809
RE: https://mastodon.social/@campuscodi/116649022439044971 This is why code that takes untrusted input - like daemons - don’t have permissions to write their own config files
-
Post #3026808
RE: https://mastodon.social/@Daojoan/116649615915296910 I am looking at you, “Best Buy Marketplace” et all.
-
Post #3026807
RE: https://mastodon.nl/@internet_nl/116657868981009205 As I have said before, relying on badly maintained websites for contact information about badly maintained websites is not really secure or useful. Hacked machines will just change it to not alert the real sysadmins. I’ve already seen so many outdated or 4x errors in these. There is value in reaching out through alternative channels (social media, LinkedIn, optrust, dns-oarc, mawk, etc)
-
Post #2198385
RE: https://mastodon.social/@gtbarry/116516432412342194 No one with the @eff tool installed in downtown toronto I guess ?
-
Post #2198384
#fedora Anyone up for a quick re-review of a package that accidentally got orphaned that I&#39;m taking back? Been stalled for a week now :/ Willing to counter-review something too :) https://bugzilla.redhat.com/show_bug.cgi?id=2460762
-
Post #2198383
Did anyone write a copy.fail exploit yet that does the equivalent of initcall_blacklist=algif_aead_init so that it disabled itself on the running kernel? For those of us with large scale amount of running kernels that take time to replace :)
-
Post #2198380
RE: https://flipboard.social/@newsguyusa/116522049424537497 AI has truly taken over the hype lead from blockchain/bitcoin
-
Post #2198379
RE: https://social.secret-wg.org/@olaf/116527430826234510 Cute even I don’t agree with all of it, the essence of the article stands.
-
Post #2198378
RE: https://hachyderm.io/@sash/116526841260403543 Interesting story about accidental trust
-
Post #2120348
Based on the great work of Antony Green over at redhat for https://github.com/atgreen/block-copyfail which can block copy.fail on a running kernel without reboot, I pacakged up the bpf into a oneshot systemd service you can install and start on many machines https://nohats.ca/ftp/block-copyfail/
-
Post #1834733
RE: https://mastodon.online/@rfceditor/116484934482162187 This took waaaaay too long for a simple real life needed fix.
-
Post #1834732
RE: https://defcon.social/@torrentfreak/116487526793996863 This was always going to happen. This is why DNS needs to re-decentralize
-
Post #1700612
RE: https://flipboard.com/@bbcnews/u.s.-and-canada-0m0p8ifgz/-/a-_Xe5Wek9SAS4uPkXn4KjTw%3Aa%3A3199692-%2F0 Wow - th Gravy Plane ride is over ? I think Trump corruption got so bad, Canadians are finally seeing our own version of utterly corrupt (fake thermen, hotels as casinos, science centre rebuild kickbacks, GreenBelt scam)
-
Post #1700611
https://mailarchive.ietf.org/arch/msg/tls/Ydq0hkwliTV7QJROwLeTLpS9qlo/
-
Post #1700610
Ohh, I got a cute plaque in RFC format! Thanks #ietf
-
Post #1700608
RE: https://mstdn.social/@GnuPG/116460320830735967 “Well known” to be its own incompatible standard and also squatting on the OpenPGP v4 code point. There is no OpenPGP v4, and technically this is a trademark violation of the OpenPGP trademark owned by #ietf
-
Post #1570110
“Toronto&#39;s Billy Bishop airport could not currently handle the Challenger 650 jet at full capacity, with its 3,988-foot runway. Recently, Ford said his government plans to take over the City of Toronto&#39;s stake in the island airport to expand the runway and allow jets to fly in and out.” I called it! Ford wanted to change the airport only so his own personal government paid jet could take off from downtown. The same reason why bike lanes had to be removed - because it slows down...
- Post #1426254
-
Post #1426253
Clickhouse using spaces in filenames because the world isn&#39;t bad enough right now
-
Post #1426252
I can&#39;t even ..... https://datatracker.ietf.org/group/iab/appeals/artifact/266 #ietf
-
Post #1426251
RE: https://mastodon.social/@arstechnica/116403846572894118 What took you so long google?
-
Post #1426250
RE: https://mathstodon.xyz/@Paul_Taylor/116393432979937863 I wish I had a answer to this, but the email standard is fully under attack by centralization and by google specifically now with their alternative transports.
-
Post #1426249
#topoli I wondered why Ford was mucking with the island airport rules. Since there is basically no construction there, there isn’t any money to hand out to his friends. But then he made Ontario buy himself a private jet and it all made sense
-
Post #704875
The best thing AI has done for us is lying with such confidence that people are finally getting back to questioning whatever they are being told