fiercest lasagna on the seven seas! / is on Nostr

#redecentralize without blockchains or cryptobros.
Interested in group decision making processes, liquid democracy, web of trust, etc. Pretty gay.

Pronouns: they/them
notes: https://www.risottobias.org
software project: https://tech.lgbt/@bivouacwiki
small business: https://hachyderm.io/@ornithopterhosting
security community: https://infosec.exchange/@casual_isac

Last Notes

2024-08-06 17:55:01

- reply

if XYZ signing key leaked (e.g., MSFT UEFI key or intel microcode key, or crowdstrike updates CA), it's kinda nice to be able to quickly revoke
technically intel's BIOS has their own kind of certificate revoke list in the hardware of bad MSFT keys...

2024-08-06 16:36:47

- reply

it's a method for keeping signing keys up to date (for example, if you release software) - e.g. sigstore uses TUF to allow clients to trust a root signing CA change
it emphasizes being able to quickly invalidate/rotate keys.

2024-08-06 15:50:06

- reply

would that be fixed by using TUF? ( https://theupdateframework.io/ )
and I guess somehow disabling proxying in CSAAgent.sys
and then blocking writes to that crowdstrike directory in the kernel unless it's from one CSUpdate.exe that /only/ does updates (and self-contains the TUF checks)?

2024-07-31 00:07:41

- reply

"do not store currency in floating point numbers" corollary: "always store beetroot in bigint"

2024-07-30 23:58:33

- reply

I was wondering if an Australian Toyota branch was like that lol

2024-07-30 23:17:37

- reply

O.o wait, is this parody?

2024-07-23 02:13:01

- reply

how much of that statement is written by Harris's campaign, vs ActBlue, vs the person who made this mastodon campaign?

2024-07-17 18:21:46

- reply

yeah the threads parallel isn't quite perfect. it's odd and has problems, but it's not full on a clone of gab/truth social with unmasked owners.

2024-07-15 00:41:31

If somebody's job depends on not understanding something, they'll be **physically incapable** of understanding that thing.
In this case, it's #Mozilla #Firefox and user consent.

2024-07-01 18:32:27

- reply

this is cool!
good work <3