← Feed

Posts

• View post

  Judging from how folks talk about a fur that passed away recently, as heartwrenchingly sad as that is, it's also a little inspiring. If one could touch even a hundredth the number of lives he did, in such a positive and uplifting way? Then you're doing incredibly goddamn good.

• View post

  https://soatok.blog/2026/02/17/cryptographic-issues-in-matrixs-rust-library-vodozemac/ #Matrix #infosec #vulnerabiltiy #cryptography #privacy

• View post

  Seeing Werner Koch's lame response on oss-sec is absolutely confirming my suspicions about the GnuPG team

• View post

  Suppose, hypothetically, you discovered a 0-click RCE in Omarchy. What would be the maximally funny thing to do with this knowledge? ("Never disclose it to DHH" being table-stakes.)

• View post

  I'm constantly torn between two positions: Nobody with a modicum of sanity should be forced to read Dario Amodei's essays. (The Anthropic CEO.)It would be really funny to gather a group of experts to Mystery Science Theater 3000 them. I've shared these thoughts among some of my friends, and I can't get a consensus from them, either. It always splits the room.

• View post

  Am I annoying?

• View post

  In 2027, I'd like to be done with my current project and move onto newer ones.

• View post

  About to suit up and head down #megaplex2026

• View post

  Had a dream I was talking to someone and they told me their middle name was "Sunday" but they were thinking of changing it to "Bureaucratic Friday" I woke up trying to figure out which way they intended the joke

• View post

  The title of this video did not disappoint https://www.youtube.com/watch?v=6zLCZ_Ic1hI

• View post

  I get some weird emails. How do I break it to them that "Barkane Arts" is a joke organization name that I came up with as a play on the term "computer wizardry" (but with more furry) rather than an LLC registered in any state?

• View post

  Every time the Red Cross declares a different level of alarm over blood shortages, my gay ass who is excluded from donating blood is like "Hmm, do I want to abstain from gay sex for a full calendar year in order to help fix a problem for a system that discriminates against people like me?" and then I shrug.

• View post

  I suspect someone's using an LLM to scrape all of my writing whenever I see anomalies like this.

• View post

  This week, something reminded me of a weird experience I've had over the years. I was probably intending to blog about it at some point, but it's a difficult topic to cover without sounding weirdly self-congratulatory, and I kind of hate that tone. I dunno, maybe it's from years of working in tech? :V One of the hazards you'll face if you share any of my hobbies or interests is other people--well-meaning, honest, and usually very kind people--praising your apparent "intell...

• View post

  I don't drink alcohol but at furry room parties I'm known to ask for something stiff

• View post

  The prevalence of spaghetti code in core infrastructure is clearly a homage to the Church of the Flying Spaghetti Monster.

• View post

  RE: https://furry.engineer/@soatok/116925912306713260 I made a rather important update to this post for folks who hadn't been chewing on the threat model of E2EE for the past 4+ years. https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee/#public-key-profile

• View post

  https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee

• View post

  The Long Tail of Work Left Until ActivityPub Has E2EE Separate from my proposal for key transparency for the Fediverse (which I've certainly blogged about a lot), the W3C has been…... http://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee/

• View post

  Amazon can't help themselves when it comes to including "Simple" and "Managed" in a new service name because, looking at their warehouses, the upper management is clearly into S&M.

• View post

  Me, months ago: "Wow, there's nothing I feel like writing about. Work is extremely busy. I'll put it off." Me, now: "Wow, there are so many things to write about that it's hard to choose which one to finish first. Work is extremely busy. I'll put it off."

• View post

  Vaguely incorrectly remembering the time when @sophieschmieg@infosec.exchange : "The empty string is the prefix to all strings" People doing domain separation wrong:

• View post

  looking at IETF mailing list Boy, Jacob Appelbaum's understanding of KEMs is as shallow as his apparent understanding of boundaries and consent, huh?

• View post

  Since the EU has made Chat Control 1.0 a thing, I should remind everyone that even having a plaintext mode at all is gross negligence for an E2EE system https://www.patrick-breyer.de/en/eu-parliament-greenlights-chat-control-1-0-breyer-our-children-lose-out/

• View post

  OK, help me settle a debate. Is ASN.1 Turing complete? (Accidentally Turing Complete counts. Proofs of concept are welcome.)

• View post

  The specification for Post-Quantum signature algorithms for HTTP Message Signatures (IETF RFC 9421) is now live. http://c2sp.org/httpsig-pq@v0.1.0

• View post

  I understand why they're important/useful/whatever for businesses, but I hate doing self-assessments. At the end of the day, if I were a bullshit artist, I could spin my past six months as 10/10 on pretty much all metrics. But I am not so arrogant.

• View post

  RE: https://mastodon.scot/@kim_harding/116878280185730300 It would be so fucking funny if they lose

• View post

  Hey, reminder if you're new here: https://soatok.blog/2024/09/09/doesnt-matter/

• View post

  Well, shit. Signal now lets group admins delete for everyone. So now you can curate your discussion groups and delete messages that aren't welcome.