DaKnOb @DaKnObCS

I do cool things that matter ;) @[email protected] blog.daknob.net Zürich, Switzerland Joined June 2009

Tweets

43K
Followers

938
Following

430
Likes

5

Tim Geoghegan @SIGTIM

3 years ago

ISRG is hiring an SRE to help keep the world’s largest certificate authority running. Come join our team and help us make the internet safer for all. abetterinternet.org/careers/le-sre…

0 6 12 892 0

View Details

After a constructive engagement with @ThreemaApp during responsible disclosure, this is unexpectedly dismissive. We broke their protocol 6 ways. They updated it, thanks to our work (breakingthe3ma.app). So of course our work applies to an old version.

Threema @ThreemaApp

3 years ago

There’s a new paper on Threema’s old communication protocol. Apparently, today’s academia forces researchers and even students to hopelessly oversell their findings. Here’s some real talk: threema.ch/bp/new-paper-o…

36 31 118 369K 11

5 96 322 94K 23

View Details

kennyog @kennyog

3 years ago

We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema

5 118 300 139K 44

View Details

NYTPitchbot @DougJBalloon

3 years ago

It takes a good six-year-old with a gun to stop a bad six-year-old with a gun.

102 2K 27K 1.1M 144

View Details

Fernando Gont @FernandoGont

3 years ago

GitHub on finally deploying IPv6.... 😊🤗 (docs.github.com/en/enterprise-…)

2 40 115 12K 3

View Details

dragosr @dragosr

3 years ago

Don't dump LastPass because of 7 breaches, dump them for crap crypto: Padding oracle vulns, ECB pass len leaks, switch to CBC for new vaults not old ones, vault key uses AES256 but only 128 bits entropy, key webui leak, silent KDF downgrade, KDF hash log leak, keys left in mem.

6 171 701 113K 81

View Details

DaKnOb @DaKnObCS

3 years ago

@Scott_Helme @troyhunt @Yubico @Cloudflare The blue keys that are cheaper are perfectly fine for 2FA and to some degree as Passkeys / for Passwordless login. The black keys are only needed for the Nano form factor, the Lightning connector, or their other applications (PIV, GPG, etc.).

0 0 0 144 0

View Details

BGP.Tools @bgptools

4 years ago

🎉 bgp.tools has passed 500 Online BGP sessions! Thanks to the networks that have made this possible We now have really quite good routing visibility in EU and a lot of the US, But isn't the whole world! The focus is now Africa, APAC, and LATAM!

0 11 56 0 6

View Details

Jameson Lopp @lopp

4 years ago

This video of cops in Nevada searching a suspect and finding a seed phrase is pretty wild. Imagine having your seed phrase become part of public record due to it being captured by an officer's body camera!

480 771 4K 2.9M 333

View Details

Jeffrey Goldberg 🌻 @jpgoldberg

4 years ago

Svaq zr ba Znfgbqba nf [email protected]

0 1 3 822 0

View Details

Jon Callas 烏 @joncallas

4 years ago

1 23 95 10K 2

View Details

DaKnOb @DaKnObCS

4 years ago

@aris_ada I have a little bit more, 1/5th, however it’s just one specific set of people mostly, which means Mastodon now is not covering everything I used to see here. I used fedifinder.glitch.me to find everyone and add them on Mastodon so I can begin the migration.

0 0 0 23 0

View Details

SwiftOnSecurity @SwiftOnSecurity

4 years ago

POV: You're a security consultant hired to be embedded in a web development team

11 64 455 76K 43

View Details

Bart Groothuis @bgroothuis

4 years ago

Europe’s new cyber security legislation NIS2 officially signed! 🥂

38 49 151 0 0

View Details

🧗‍♂️ Matt Holt @mholt6

4 years ago

@DaKnObCS Oh yeah, forgot about that. I'm pretty sure we have the plumbing for this, let me see if we expose it.

0 1 0 0 0

View Details

DaKnOb @DaKnObCS

4 years ago

@mholt6 It seems to be working just fine: crt.sh/?q=sl.daknob.n… We just need more CT Logs to make this sustainable ;)

0 0 0 0 0

View Details

DaKnOb @DaKnObCS

4 years ago

@mholt6 Google Trust Services supports setting the notBefore and notAfter via ACME so you can specify the exact duration, for up to 90 days. I’ve been using it with this patch: go-review.googlesource.com/c/crypto/+/454… Works fine, and I added it as “requested” to convey the fact that it may not happen.

2 0 0 0 0

View Details

DaKnOb @DaKnObCS

4 years ago

@mholt6 I’ve gotten some of my certs down to 3 days and daily renewals without problems. Would you consider adding support for custom validity to Caddy / your libraries to request them via ACME? I would be happy to trial 3 or 7 day certs with Caddy!