Clemens

MacPorts Developer, PPL/A, Works at Red Hat on Cryptography

searchable

Public Key

npub1l7pqkehh4u2cez7a0dsuea4keegn39jctll9lykx8rdtthqq7kqswunh7h

NIP-05 Address

neverpanic@chaos-social.mostr.pub

Profile Code

nprofile1qqs0lqstvmm679vv30whkcwv76mvu5fcjev9lljljtrr3k44msq0tqgpz9mhxue69uhkummnw3eryvfwvdhk6mxfca6

Publishing to

nostr21.com

Author Public Key

npub1l7pqkehh4u2cez7a0dsuea4keegn39jctll9lykx8rdtthqq7kqswunh7h

Show more details

Last Notes

2025-05-25 15:03:45

- reply

@nprofile…nhea Ah, die waren bis vor kurzem meine Haus- und Hofbahn ins bayerische Oberland. Für Dieselzüge sind die tatsächlich angenehm leise und bequem. Vermutlich ein Fall von "wenn's in die Landeshauptstadt fährt können wir uns nicht die Blöße geben dass es stinkt und kracht, kauft mal was ordentliches"

2025-05-09 07:21:19

- reply

@nprofile…qxwu @nprofile…dca0 Binary Eye, IMHO bester QR-/Barcode-Scanner.

2025-04-25 20:01:42

Does anybody have a User Agent string for a current #Opera #OperaBrowser for me?
Asking to fight an #AICrawler spam wave.

2025-04-25 19:28:37

More logfile analysis for MacPorts Trac today to fight the #AICrawler spambot wave… some 500-600 requests from PowerPCs running Mac OS X 10.6, 10.7, 10.8, 10.9, 10.10, 10.11, and 10.12.
I must have missed the memo from Apple on the extended OS support for PPC chips!

2025-04-17 19:42:20

- reply

@nprofile…nhea Herrlich. Top Unterhaltung, gerne wieder!

2025-04-15 06:59:25

- reply

@nprofile…8nxg so now we're one Sophos Unauth RCE away from Bingo, too?

2025-04-15 06:36:00

- reply

@nprofile…nhea hatte das mal im Feierabendverkehr: Induktionsschleife komplett hinüber, Ampel aber nur Bedarfsgeschaltet. 5 Minuten warten ja, aber was dann? Muss dann jeder Verkehrsteilnehmer seine eigenen 5 Minuten an der Ampel warten, oder dürfen dann gleich alle? Diese Regelung ist so realitätsfremd...

2025-04-11 14:19:52

- reply

@nprofile…wwe7 Yeah, I looked at something like that a while ago because I wanted a high-resolution PNG of https://www.openaip.net/map spanning multiple countries to use in a video editor to overlay an animated GPS track, and arrived at the same conclusion that I'd probably have to render it myself and gave up because the tooling docs are bad.
I ended up stitching tile DBs into a large PNG, and then stitching countries together (since tile DBs are by country). Saw some projection(?) issues at the borders.

2025-03-30 09:35:21

- reply

@nprofile…kjmn @nprofile…xkcd Sorkin had it right when he wrote "American Taliban" for the Tea Party in The Newsroom.

2025-03-04 12:06:45

- reply

@nprofile…dun3 @nprofile…nvxe I have no records, but the various flight data recording websites do — they typically only make historical data available to paying members, though.

2025-03-04 10:59:25

- reply

@nprofile…dun3 I think you're reading into things here. I've actually seen these flights fairly regularly over the last year or two, occasionally also with two A400M in formation. How do I know? Their route passes right in front of my office window.
Always with ADS-B on, always without a NOTAM.

2025-01-17 21:53:09

- reply

@nprofile…fvmu @nprofile…xdc3 Ist mein Plan. Trotzdem bleibt der Eindruck, dass das Gesetz handwerklich schlecht gemacht ist und hier eine Ausnahme fehlt. Oder aber das ist Absicht, dann ist's mir völlig unverständlich.

2025-01-17 21:10:19

- reply

@nprofile…fvmu @nprofile…xdc3 Nicht für Dritte, oder nicht für Dritte gegen Bezahlung? Ersteres würde ich gern weiterhin tun.

2025-01-17 20:47:36

- reply

@nprofile…xdc3 @nprofile…fvmu Trotzdem scheint mir hier eine Ausnahme für Kleinanbieter zu fehlen. Ist mein eigener DNS-Server der für meine 3 Zonen authorativ ist ausgenommen? Nach Art. 2 Satz 2 nicht, und unter Art. 6 Nr. 20 b fällt der auch.
Einziger Ausweg wäre hier wenn ich kein Anbieter nach Anhang I od. II wäre, aber wo beginnt das? Wenn ich eine Domain für meine Geschwister hoste? Für meine Nachbarn? Für den lokalen Musikverein?

2025-01-08 22:12:22

- reply

@nprofile…nhea wouldn't a container with an old version and an old crypto library achieve that, and not break?

2024-12-16 13:58:01

Popular projects on GitHub, clustered by who starred them, organized as a map: https://anvaka.github.io/map-of-github/
Neat!

2024-12-11 19:29:15

- reply

@nprofile…5k2y in many jurisdictions automatic e-call crash reporting now requires a SIM anyway so there are no cars without connectivity anymore. Your best bet in modern cars are possibly European manufacturers because GDPR requires them to ask for consent for tracking, but even that is limited due to what the manufacturers are declaring as legitimate interest.

2024-11-24 07:32:02

- reply

@nprofile…h775 bei Personen die einen im Supermarkt anpöbeln weiß man ja nicht was mit denen eh schon kaputt ist. Aber Leute die dich persönlich kennen, das ist eine Frechheit.

2024-11-15 19:50:29

- reply

@nprofile…aam2 How many SATA ports does it have? Maybe I'll get one as my next NAS 😂

2024-09-16 18:02:26

- reply

@npub17qe…v7la unfortunately it's probably a no-go for FIPS, and will need to be disabled or avoided for those users. :/
NIST is why we can't have nice things in RNGs.

2024-03-18 12:29:28

- reply

@npub1sly…t8j7 from my experience in packaging software, I'd say most software does not do that. Just a feeling, though, don't have numbers to back this up.

2024-03-18 11:38:39

- reply

@npub1sly…t8j7 Is this specific to Python? I'd expect most software to break if you configure it for one path and then move it to another after installation.

2024-03-01 17:04:13

$company has a day of learning, where we're supposed to learn something new. So today, I decided to play around with a locally-run large language model.
I asked it how to re-enable SHA-1 on #RHEL 9, and you'd never guess the answer: Just disable #SELinux!
https://assets.chaos.social/media_attachments/files/112/021/505/530/753/045/original/f71bfe05a16d204a.png

2024-02-13 10:55:10

- reply

@npub17qe…v7la Isn't Android's approach of tying things to the signer's pubkey resistant to that issue? Comes with its own set of problems though, since you can't rotate keys, which might actually be worse.

2024-01-25 12:36:40

- reply

@npub1sly…t8j7 Ach was, pures RSA ist doch homomorphic unter Multiplikation. Kann halt kein Mensch gebrauchen und ist ein Sicherheitsproblem, weswegen wir überall Padding machen, aber ich bin mir sicher der Durchbruch steht kurz bevor!1!!

2023-10-17 07:56:51

- reply

@npub1h4u…cnpk in diesem konkreten Fall vermute ich eine gehörige Portion not invented here, weil Argon2 nicht aus einem Wettbewerb des NIST hervorgegangen ist.
Immerhin ist der relevante Standard SP 800-132 gerade im "review process", und man möchte wohl eine neue memory-hard KDF aufnehmen.

2023-10-17 07:24:53

- reply

@npub1h4u…cnpk ich würde wetten dass der größte Blocker für Argon2 aktuell ist das MS auch an die US-Regierung verkaufen möchte und deren Kryptographie-Standards bisher nichts außer PBKDF2 als KDF beinhalten.
Insecurity by certification. 😔

2023-09-18 18:36:11

- reply

@npub1sly…t8j7 Dazu kommt die Flugplatzpflicht. In 🇩🇪 kann man mit einem Heli nicht einfach irgendwo landen wenn man kein Rettungshubschrauber ist, und einen neuen Flug- oder Helikopterlandeplatz zuzulassen ist ein jahrelanger Papierkrieg.
Wo sind die Fragen der Journalisten an die Firmen wie sie mit den rechtlichen Rahmenbedingungen in der Luftfahrt umgehen wollen?

2023-09-07 09:12:42

You might have seen *Privacy Not Included from the Mozilla Foundation rating privacy in cars recently.
They point at a legitimate issue, but their reporting is sensationalized, IMO. I worked in the car industry until two years ago, and I have some problems with this research.
They essentially seem to have read and interpreted privacy policies. The results are a survey of how paranoid and ass-covering the company legal departments are, not necessarily a survey of what the cars actually do.
⬇️

2023-07-16 08:26:56

- reply

@npub1rnj…vtmy There were some internal clarifications on rationale that weren't communicated explicitly in the blog post, but hints are being dropped in the Ask Noah Show episode. Those helped, but are not what you are looking for. There was not much else, I think, but I've heard there's more in the pipeline, it'll just take a while.

2023-07-08 20:20:16

- reply

@npub18hd…kf64 pretty sure this one will end up being rejected by FESCo, at least one member already stated they were going to vote against.
Wholeheartedly agree that this is very very bad timing, though. They should not have brought this for this Fedora release.

2023-07-03 19:48:49

- reply

@npub1rnj…vtmy I like this! But: the long deprecation period is unrealistic.
I am assuming (I don't know, I wasn't involved) that one of the goals was to show potential paying customers of the re-builders that they are at the mercy of Red Hat, and if they depend on uninterrupted service and quick updates for their business, they should be paying for RHEL.
A year-long smooth transition would not have achieved that. I think two weeks to a month would have been reasonable.

2023-06-28 17:28:30

- reply

@npub1rnj…vtmy The question is, what's the value of those distributions over just using CentOS Stream directly, then?
Agree on the comms, though. I think https://podcast.asknoahshow.com/343 is a pretty good attempt at that, and goes into a bit more detail than any other written comms I've seen with the "why" and the "what Red Hat would encourage instead".

2023-06-07 07:54:08

- reply

@npub1v2a…pmev Nein? Doch. Oh!