Remote

Adrian Offerman

@adrian@mastodon.offerman.com

mastodon 4.6.5

IT/technology communication, knowledge and technology transfer, internet and open source specialist, infosec, digital engineer, embedded systems, tinkerer.

Posting in English, occasionally in Dutch (tip: set a language filter if Dutch is abracadabra to you).

#foss #opensource #linux #InternetSecurity #infosec #cybersecurity #internet #dnssec #ipv6 #tfr #fedi22

119 Followers

206 Following

9 Posts

Joined February 05, 2022

Website:

https://www.offerman.com/

Pixelfed:

https://pixelfed.offerman.com/offerman

PeerTube:

https://peertube.offerman.com/video-channels/adrian

PGP key:

0x30F7F2DD464C375B

Posts

Adrian Offerman @adrian@mastodon.offerman.com · May 23, 2026

Cat crossing... 🐾

#xingcat #caturday

Adrian Offerman @adrian@mastodon.offerman.com · May 22, 2026

Used the Dream Prompter plugin to connect my GIMP install on Fedora Linux to Replicate, giving me direct access to ten AI models for generating and editing images. Replicate's library did have some issues with Python version 3.14, but I managed to solve these using Claude.AI 😅 (let me know if you want a copy of the updated files).
So far things seems to work fine.

#DreamPrompter #GIMP @GIMP@floss.social #Replicate #AI

Adrian Offerman @adrian@mastodon.offerman.com · May 08, 2026

Just installed & configured LineageOS 23.2 on my new Google Pixel 8 Pro.

This to replace my old Samsung Galaxy S20+, which was running an unofficial version of LineageOS, as support for the S models has dried up over the last five years.
Isn't it ironic that the best option now to degoogle your mobile life is to buy a Google device?

@LineageOS@fosstodon.org #LineageOS #degoogle

Adrian Offerman @adrian@mastodon.offerman.com · Apr 29, 2026

Replying to @adrian@mastodon.offerman.com

Even though the use of self-signed certificates pinned with a DANE/TLSA record probably is a closed chapter now — browser builders declined to support it due to lagging DNSSEC adoption — I still think it's a better (additional) solution, especially for non-enterprise users wanting to manage their own domains and hosts. Furthermore, it keeps control over domains and certificates where it naturally belongs: locally in the distributed DNS hierarchy. (6/6) #DNSSEC #InternetSecurity #selfhosting

Adrian Offerman @adrian@mastodon.offerman.com · Apr 29, 2026

Replying to @adrian@mastodon.offerman.com

Forcing users to automate their certificate management is one thing — it will make WebPKI safer — still we should never have allowed Big Internet — in this case Apple, Google, Microsoft, and the other browser builders — to take control of the public internet certificate infrastructure. After making self-signed certificates practically useless, everyone has now been brought under their regime and has been forced onto their highly centralized Certificate Transparency (CT) infrastructure. (4/6)

Adrian Offerman @adrian@mastodon.offerman.com · Apr 29, 2026

The 47-day certificate: faster treadmill, same broken foundation

Managing TLS certificates has become pretty crazy: Over the years validity was cut down from several years to two years to one year to half a year now. In a few years it will be only a little more than one month, with the additional requirement to basically continuously prove domain control.

(1/6)

https://offerman.com/en/blog/the-47-day-certificate-faster-treadmill-same-broken-foundation

#TLS #PKI #LetsEncrypt #ACME #DANE #DNSSEC #InternetSecurity #rant #selfhosting

offerman.com

The 47-day certificate: faster treadmill, same broken foundation - Offerman Consulting

IT/technology communication, knowledge and technology transfer, internet and open source specialist, infosec, digital engineer, embedded systems, tinkerer.

Adrian Offerman @adrian@mastodon.offerman.com · Apr 29, 2026

Replying to @SwiftOnSecurity@infosec.exchange

@SwiftOnSecurity Bought me a Brother MFC-L8390CDW a few months ago. Best choice ever: works flawlessly with Linux, quality of both hardware and prints is great. And all of that for only EUR 320. Reminds me of the days of the LaserJet IIIPS printer I bought when HP still was a decent company selling decent printers. Back then every Sun workstation came with a large box filled with documentation, including the PostScript books. So I started programming my diagrams directly in PostScript 😍

Adrian Offerman @adrian@mastodon.offerman.com · Apr 18, 2026

Entertaining 'How I Built This' podcast episode with Colin Angle, one of the founders of iRobot: On how they started out of MIT's AI Lab as a consulting company and military contractor, then after selling this branch off entered the consumer market starting with the Roomba vacuum cleaning robot. And on how the company was bought up by the Chinese manufacturer of the Roomba after an attempted acquisition by Amazon would not be approved.
https://wondery.com/shows/how-i-built-this/episode/10386-irobot-colin-angle-how-the-roomba-became-a-household-icon/

#iRobot #Roomba #robotics #podcast

Adrian Offerman @adrian@mastodon.offerman.com · Apr 16, 2026

Replying to @joebeone@techpolicy.social

@joebeone@techpolicy.social I thought this issue had already been solved in International English (or is it international English? 🤪 -- at least to my satisfaction: Write 'Internet' with a capital 'I' when referring to The One-and-Only Worldwide Internet; use a lowercase 'i' instead when referring to the technology, e.g. 'internet connectivity'. Some sources: https://en.wikipedia.org/wiki/Capitalization_of_Internet https://www.chicagomanualofstyle.org/qanda/data/faq/topics/Capitalization/faq0119.html

Remote instance

mastodon.offerman.com

Open on original server

Adrian Offerman

Posts

The 47-day certificate: faster treadmill, same broken foundation - Offerman Consulting

Remote instance

Media