Cendyne

#cryptography and cloud infrastructure naga #infosec #appsec
Not into internet fun money

Public Key

npub1azck705gkuv24thygyluekr2mpw6e77zep72tvkukgce94r220eqqnathr

NIP-05 Address

cendyne@furry-engineer.mostr.pub

Profile Code

nprofile1qqsw3vt086ytwx924mjyz07vmp4dshdvl0pvsl99ktwtyvvj63498us9ynpds

Author Public Key

npub1azck705gkuv24thygyluekr2mpw6e77zep72tvkukgce94r220eqqnathr

Show more details

Last Notes

2025-04-23 19:14:38

- reply

@nprofile…gqp6 I have yet to write a tape! Looking forward to scooting a lot of my long term storage to an offline media

2025-04-23 19:10:46

Finally
TAPE DRIVE
LTO-6 Tape drive!!!
https://furry.engineer/system/media_attachments/files/114/388/851/857/232/181/original/5ae8ac09ed6e6e59.jpg

2025-04-16 21:26:22

Ever start a project that expects something to be true, only to find out a day later it isn't true?

2025-01-16 20:22:53

I've been HTMLing over half my life now (what a thing to say) and only today I learn there's a `download` attribute for the anchor tag. You can just straight up say "this link should be downloaded" instead of doing some content-disposition header?
download attribute: https://developer.mozilla.org/en-US/docs/Web/API/HTMLAnchorElement/download
content-disposition https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Disposition

2024-12-31 16:28:50

this is balls
https://furry.engineer/system/media_attachments/files/113/748/376/835/786/815/original/6aa1ed081a1c3d16.png

2024-12-18 03:19:17

found the problem
https://furry.engineer/system/media_attachments/files/113/671/663/675/045/199/original/95e81f7b6e045033.png

2024-09-16 19:02:51

The bright side to the AWS announcement is that they're allowed to work 2 days a week from home, on weekends.

2024-08-13 16:57:09

Finally home! I can rest
I wonder what would happen if airports actually had showers, laundry services, and sleeping pods with secured storage...

2024-08-12 23:23:52

Would be on the way home, but an hour and a half delay caused me to miss a flight. I am re-booked, though I'll be getting home after 28 hours of being awake. Not looking forward to this.

2024-08-09 19:26:56

Tea time
https://furry.engineer/system/media_attachments/files/112/933/707/129/968/333/original/97ec24927f7e95e2.jpg

2024-08-01 06:26:56

I've taken "Mastodon in 6 files" to the extreme. With some light post processing (web finger and adding .json when loading from disk), I can actually see my blog content through mastodon.
Holy sh*t
https://furry.engineer/system/media_attachments/files/112/885/337/929/626/973/original/d71781659c6cb09d.mp4

2024-07-10 17:46:21

- reply

@npub1ane…7zqz Zed has no excuse here. They're literally a mac only app.
Deno meanwhile.. I wonder if the brew script is just curl pipe sh under the hood.
(Unless this is another zed I do not know about)

2024-05-17 14:57:02

@npub1ane…7zqz what the dog doin

2024-05-15 18:05:40

I got complimented for writing two pages of questions for a first time meeting with an integration middleware company. "Of the forty partners we've had, you're the only one to do this"
I mean, it's my 5th time overseeing an integration, I know what we care about and what will get in the way.. why not come prepared if we have only 30 minutes to talk

2024-05-14 17:04:13

Listening to some internet radio
It kept getting discord noises and setting me off at work

2024-05-14 14:15:46

I came back from vacation and our AWS TAM leaves a yubisneeze in the shared slack channel

2024-05-02 13:43:33

Waiting for the day randsomware is built with electron

2024-04-24 20:56:38

lol hashicorp

2024-04-04 17:54:43

APIs that encode monetary values as doubles (or specifically with a decimal point) give me the heebie jeebies. Would you like to add 1.1 enough times to eventually get a number with a third decimal place?
Google does nano-dollars as a full number and it stays within the 2^53 limit of doubles. I can respect whole numbers over json.

2024-04-02 18:05:23

Deep breaths
https://furry.engineer/system/media_attachments/files/112/202/947/364/204/128/original/25f36704b9277949.jpeg

2024-03-19 21:31:47

The future of self checkout is waiting in line behind 20 carts while 10 operator stations are unstaffed

2024-03-07 18:56:13

Was it IPv6 all along?

2024-02-25 14:25:30

Why does Twitter want a precise geolocation?

2024-01-05 05:48:43

Guhhh
I clean up 560k botnet credit cards only to determine another threat actor was present and produced another 55k of them. This time on existing users with credential stuffing.
Besides invalidating the payment methods, I am still thinking of what to do.
This attack happened while I was on vacation and no one took initiative on preventing the attack while I was gone. There were signals and discussions in slack... Ultimately I had to step in during my vacation to slap down the attack. And that's after the CEO had a tizzy over a big name bank cutting off the merchant account.

2023-12-01 05:08:00

Really looking forward to the day when people spamming BLE adverts for fun stop doing it.

2023-11-27 04:57:59

Seems like all the early adopters are going to sh*t in the pool of information for generations to come.
The quality of search results are going down for all sorts of reasons. And it is taking a dive for the worst, fast,
Does Australia exist? According to Bing: no. With credible citations too.
"Wikipedia isn't a source" my middle school teachers would say, and yet it is nearing the most long term reputable source of information.
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/480/626/624/933/135/original/53fcce4557fe6632.jpeg

2023-10-24 19:23:21

- reply

@npub14n4…y3e3
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/291/622/257/619/129/original/b04f612c3951352b.png

2023-10-24 15:45:13

https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/290/763/514/197/801/original/30324ff113a72484.png

2023-09-27 15:30:45

- reply

@npub14n4…y3e3 they're neat
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/137/825/190/318/237/original/113e7ceb92370562.png

2023-09-27 15:27:35

AI content will answer any and every question with high confidence
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/137/812/086/538/662/original/11d0c0b3a02ce955.jpeg

2023-09-17 21:10:55

The use case for AI is to spam
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/082/535/552/191/108/original/67065831d5ff22ab.jpeg

2023-09-12 15:46:07

Curious as to what "post-quantum crypto" actually is? A panel at #defcon 's Crypto and Privacy village shared where we are in developing post-quantum cryptography, the concerns we have for the migration and its possible timeline, and how other technologies like MLS are being designed with PQC constraints in mind.
Let me know if there is anything I can make clearer!
#postquantum #cryptography #pqc
https://cendyne.dev/posts/2023-09-11-impact-of-pqc-on-cryptography-key-management.html

2023-09-11 18:08:42

- reply

@npub1yck…ujmw I know second hand that it is still in use and FIPS is part of it

2023-09-11 17:52:42

- reply

@npub1yck…ujmw as you can imagine, just because there is a better maintained internal alternative does not mean the historic swamp of code, which has high turnover, had priority to migrate to another dependency in ways that may break the functionality of its customers.

2023-09-11 16:57:05

Last public release of openssl 1.1.1
Time for Amazon to move 1000000 microservices to a newer version
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/047/566/546/859/910/original/6bb4b0d674ffd315.jpeg

2023-09-10 05:48:09

Love to find masters thesis papers that plagiarize Microsoft documentation. Exact match on "The Length field in a TLV triplet identifies the number of bytes encoded in the Value field" in "Digital Certificates and Threshold Cryptography" from 2013.

2023-09-08 15:41:42

Domain fronting — a surprise feature or defect where requests can come in for one host (over TLS) while the request (over HTTP) is for another — enables censorship circumvention in #Tor and obscures traffic by malware used against Ukraine.
Charles Miller shared his research in probing for domain fronting hosts at DEF CON's Crypto and Privacy village #defcon #privacy
Within is a summary of his presentation and a reflection on encrypted SNI, security through intentional design, and the reality that censorship circumvention requires dishonest behavior to succeed.
https://cendyne.dev/posts/2023-09-08-domain-fronting-through-azure-and-cloudflare.html

2023-09-05 19:58:57

"... but can you run kubernetes on a yubikey?"

2023-08-08 14:15:57

Hey so when is NPM, a Microsoft property, going to add OIDC authentication to publish packages with GitHub, also a Microsoft property?

2023-07-22 16:10:16

Search how to generate password with bash
The first suggestion in the first result is... hash the date
NOOO DO NOT HASH THE DATE
https://cdn.pawb.social/mastodon-fe/media_attachments/files/110/758/600/160/802/018/original/50b66ceaacfa237d.png

2023-07-10 14:06:55

Here it is! My most precious side project is the very blog that I write on!
So much goes into performance to keep the edit-and-refresh cycle time low.
It was a static site, and while it still builds like one, what you see is really something else.
https://cendyne.dev/posts/2023-07-10-a-precious-side-project.html
#blog #engineering #webdev #typescript

2023-07-04 05:03:09

There's a phishing scam spreading like a worm throughout Telegram right now.
One of my friends lost their account and several others nearly fell for it.
Included are instructions to recover your account, how the phishing scam works, and what you can do to combat this threat:
https://cendyne.dev/posts/2023-07-04-help-a-friend-scam-on-telegram.html

2023-07-03 05:36:40

Built on top of my Document IR, can process my blog in PRs to create a GitHub check run and post on the PR the errors spotted.
This required
1. Creating a GitHub app with checks and pull request permissions
2. Converting GitHub's PKCS1 RSA key to a JWK for later convenience with Deno
3. Authenticating with GitHub to get an installation token
4. Creating and patching a check run
5. Locating a PR and comment
6. Async generators for the first time
7. Visit IR and create a report!
8. Post report!
https://cdn.pawb.social/mastodon-fe/media_attachments/files/110/648/525/748/813/459/original/3b68f230ae6e82b2.jpeg

2023-06-23 17:41:59

- reply

@npub1zuz…m2vc see bouncy castle :3

2023-06-23 17:03:35

- reply

@npub1zuz…m2vc Post quantum furry cryptography library

2023-06-20 15:34:11

I took a look at a few weird tweets that cited articles by Soatok, Filippo, and myself. Each responsible account is hiding sketchy links among the junk on their profile.
This issue is not new. People created sludge before ChatGPT and other generative tech. Yet, we are seeing a greater scale of sludge than before and platforms are deprioritizing spam, scam, and abuse prevention. In fact, this sludge seems to be ideal for several platforms: their engagement numbers go up!
https://cendyne.dev/posts/2023-06-20-twitters-bot-problem-is-getting-weird-with-chatgpt.html

2023-06-20 00:49:23

Why are bots posting my blog with... ChatGPT generated (and factually incorrect) summaries?? For no one to see too (4 views)
@npub10mw…awkn has some of this as well.
#cryptography
https://cdn.pawb.social/mastodon-fe/media_attachments/files/110/573/785/269/704/040/original/52e7596c56a9ff4b.png

2023-06-17 04:38:34

Why the heck is Flipper (Yes, that flipper) sponsoring NFTs accessories?
Such an incredible waste of resources to appease a few financially unsavvy whales.
https://cdn.pawb.social/mastodon-fe/media_attachments/files/110/557/707/736/729/796/original/e27e8570c913b667.jpeg

2023-05-31 14:26:34

Apparently there's an RFC now that includes image support in x509 certificates. The justifications feel kind of weak to me.
https://www.rfc-editor.org/rfc/rfc9399.html