Dhole Moments, Soa Talks, and Other Bad Puns…
Understanding HKDF
HKDF has poorly-understood subtleties. Let’s explore them in detail.
My Blog Isn’t a Platform for Internet Randos
Clearly explaining the Dhole Moments content policy.
Threema: Three Strikes, You’re Out
Threema boldly claims to be more secure than Signal. Does this hold up to scrutiny?
Against Web3 and Faux-Decentralization
Despite the hype, Web3 offers fake decentralization and builds upon technology you could build without cryptocurrency.
Furry Porn Against NFTs: A Call to Forearms
In A Furry’s Guide to Cryptocurrency, I briefly mentioned that NFTs are a dumb idea and not a valid reason for anyone–but especially furries–to get involved with cryptocurrency. The legitimate reasons for furries to consider cryptocurrency are to protect porn artists and sex workers from the overreach of the conservative finance sector. To bank the […]
The Bi-Symmetric Encryption Fraud
Crackpot cryptography, overconfidence, and attempts to defraud governments and private-sector startups.
Programmers Don’t Understand Hash Functions
Programmers don’t understand hash functions, and I can demonstrate this to most of the people that will read this with a single observation: When you saw the words “hash function” in the title, you might have assumed this was going to be a blog post about password storage. (Passwords are the most common knee-jerk reaction […]
Timing Attack on SQL Queries Through Lobste.rs Password Reset
Just to assuage any panic, let me state this up front. If you’re reading this blog post wondering if your Lobste.rs account is at risk, good news: I didn’t publish it until after the vulnerability was mitigated, so you’re safe. You don’t need to change your passwords or anything. This write-up is purely for education […]
Safer Illinois, Isn’t
Wherein some furry casually saves a University tens of thousands of dollars on a NIST SP 800-171 audit they were doomed to fail anyway.
Lightning Round
An assortment of topics that don’t quite deserve their own dedicated blog post.
Loading…
Something went wrong. Please refresh the page and/or try again.
Follow My Blog
Get new content delivered directly to your inbox.