@DaKnObCS

I do cool things that matter ;) @antonis@mastodon.social

 Zürich, Switzerland
blog.daknob.net/
Joined June 2009
  • Tweets42.9K
  • Following429
  • Followers935
2.1KMedia
ISRG is hiring an SRE to help keep the world’s largest certificate authority running. Come join our team and help us make the internet safer for all. abetterinternet.org/careers/…

Let's Encrypt Software Engineer (SRE)

ISRG’s mission is to protect Internet users by lowering monetary, technological, and informational barriers to a more secure and privacy-respecting Internet.

abetterinternet.org
6
12
896
DaKnOb retweeted
kennyog@kennyog9 Jan 2023
After a constructive engagement with @ThreemaApp during responsible disclosure, this is unexpectedly dismissive. We broke their protocol 6 ways. They updated it, thanks to our work (breakingthe3ma.app). So of course our work applies to an old version.
Threema
@ThreemaApp9 Jan 2023
There’s a new paper on Threema’s old communication protocol. Apparently, today’s academia forces researchers and even students to hopelessly oversell their findings. Here’s some real talk: threema.ch/bp/new-paper-on-o…

Statement on ETH Findings

This is a statement on the NZZ news article from January 9, 2023 about alleged weaknesses in Threema's encryption. But these are completely impractical and theoretical.

threema.com
5
95
4
322
93,635
DaKnOb retweeted
kennyog@kennyog9 Jan 2023
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
5
117
7
296
138,675
It takes a good six-year-old with a gun to stop a bad six-year-old with a gun.
102
1,827
71
26,418
1,145,647
GitHub on finally deploying IPv6.... 😊🤗 (docs.github.com/en/enterpris…)
2
36
1
112
12,501
Don't dump LastPass because of 7 breaches, dump them for crap crypto: Padding oracle vulns, ECB pass len leaks, switch to CBC for new vaults not old ones, vault key uses AES256 but only 128 bits entropy, key webui leak, silent KDF downgrade, KDF hash log leak, keys left in mem.
4
168
11
693
113,341
DaKnOb retweeted
BGP.Tools@bgptools30 Oct 2022
🎉 bgp.tools has passed 500 Online BGP sessions! Thanks to the networks that have made this possible We now have really quite good routing visibility in EU and a lot of the US, But isn't the whole world! The focus is now Africa, APAC, and LATAM!
11
3
56
This video of cops in Nevada searching a suspect and finding a seed phrase is pretty wild. Imagine having your seed phrase become part of public record due to it being captured by an officer's body camera!
474
756
406
4,327
2,873,390
Svaq zr ba Znfgbqba nf [email protected]
1
3
823
1
22
93
9,554
POV: You're a security consultant hired to be embedded in a web development team
11
63
6
450
76,196
Europe’s new cyber security legislation NIS2 officially signed! 🥂
38
49
4
150
Replying to @DaKnObCS
Oh yeah, forgot about that. I'm pretty sure we have the plumbing for this, let me see if we expose it.
1
DaKnOb retweeted
Chris@cmwdotme10 Dec 2022
Pulling MikroTik into the Limelight margin.re/2022/06/pulling-mi…
2
1
23
Fine ok you get *another* blog post, this time about why doing on-device WebAuthn (rather than requiring a separate token) is harder in the PC world than on Macs and why Linux just doesn't have a good story here yet: mjg59.dreamwidth.org/62746.h…

On-device WebAuthn and what makes it hard to do well

WebAuthn improves login security a lot by making it significantly harder for a user's credentials to be misused - a WebAuthn token will only respond to a challenge if it's issued by the site a secret...

mjg59.dreamwidth.org
4
12
39
The European Commission has been contemplating radical changes to the Internet in Europe that would violate #netneutrality and upend how the internet economy has worked for decades. Its proposal: the long-discredited idea that websites and apps should pay broadband providers.
2
30
8
66
DaKnOb retweeted
DaKnOb@DaKnObCS6 Dec 2022
I blogged about using #ACME to automatically, securely, and reliably protect all your workload connections with #mTLS and achieve authenticated End to End Encryption #E2EE: blog.daknob.net/workload-mtl…
1
2
Don't miss our meetup this Thursday 8/12 at 19.00 about: 👉 Authentication (AuthN) & Authorization (AuthZ) Join us! Meetup event: bit.ly/3BacX2P FB event: bit.ly/3FroQDN #authentication #authorization #programming #meetup #heraklion #crete

Authentication (AuthN) & Authorization (AuthZ), Thu, Dec 8, 2022, 7:00 PM | Meetup

Authentication (AuthN) & Authorization (AuthZ) are two separate but closely intertwined concepts in the world of identity and access management (IAM). At this meetup, we a

meetup.com
4
4
News from the Google Public Sector desk: "@GoogleWorkspace will help agencies utilize zero trust principles to ensure availability of document, email, and collaboration tools as attacks occur." Read more about the new continuity-of-operations offering ↓ goo.gle/3VPCIxh
2
4
24
Another amazing aviation explained video from @cgpgrey. This is my favorite. Troll airfield!JZRO!! Standards that aren’t standard!!! youtu.be/jfOUVYQnuhw
1
4
Load more