DaKnOb @DaKnObCS

I do cool things that matter ;) @[email protected] blog.daknob.net Zürich, Switzerland Joined June 2009

Tweets

43K
Followers

949
Following

433
Likes

5

Tim Geoghegan @SIGTIM

3 years ago

ISRG is hiring an SRE to help keep the world’s largest certificate authority running. Come join our team and help us make the internet safer for all. abetterinternet.org/careers/le-sre…

0 6 12 867 0

After a constructive engagement with @ThreemaApp during responsible disclosure, this is unexpectedly dismissive. We broke their protocol 6 ways. They updated it, thanks to our work (breakingthe3ma.app). So of course our work applies to an old version.

Threema @ThreemaApp

3 years ago

36 31 121 368K 12

5 102 335 93K 22

kennyog @kennyog

3 years ago

We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema

5 124 310 138K 44

DougJBalloon @DougJBalloon

3 years ago

It takes a good six-year-old with a gun to stop a bad six-year-old with a gun.

103 2K 27K 1.1M 149

Fernando Gont @FernandoGont

3 years ago

GitHub on finally deploying IPv6.... 😊🤗 (docs.github.com/en/enterprise-…)

2 41 118 12K 3

Download Image

dragosr @dragosr

3 years ago

Don't dump LastPass because of 7 breaches, dump them for crap crypto: Padding oracle vulns, ECB pass len leaks, switch to CBC for new vaults not old ones, vault key uses AES256 but only 128 bits entropy, key webui leak, silent KDF downgrade, KDF hash log leak, keys left in mem.

6 176 715 113K 82

BGP.Tools @bgptools

3 years ago

🎉 bgp.tools has passed 500 Online BGP sessions! Thanks to the networks that have made this possible We now have really quite good routing visibility in EU and a lot of the US, But isn't the whole world! The focus is now Africa, APAC, and LATAM!

0 12 56 0 6

Download Image

Jameson Lopp @lopp

3 years ago

This video of cops in Nevada searching a suspect and finding a seed phrase is pretty wild. Imagine having your seed phrase become part of public record due to it being captured by an officer's body camera!

491 798 4K 2.9M 335

Download Video

Jeffrey Goldberg 🌻 @jpgoldberg

3 years ago

Svaq zr ba Znfgbqba nf [email protected]

0 1 3 817 0

Jon Callas 烏 @joncallas

3 years ago

1 25 101 10K 2

Download Image

SwiftOnSecurity @SwiftOnSecurity

3 years ago

POV: You're a security consultant hired to be embedded in a web development team

11 66 466 76K 45

Download Video

Bart Groothuis @bgroothuis

3 years ago

Europe’s new cyber security legislation NIS2 officially signed! 🥂

38 48 156 0 0

Download Image

🧗‍♂️ Matt Holt @mholt6

3 years ago

@DaKnObCS Oh yeah, forgot about that. I'm pretty sure we have the plumbing for this, let me see if we expose it.

0 1 0 0 0

Chris Wade @cmwdotme

3 years ago

Pulling MikroTik into the Limelight margin.re/2022/06/pullin…

0 2 23 0 1

Matthew Garrett (@[email protected]) @mjg59

3 years ago

Fine ok you get *another* blog post, this time about why doing on-device WebAuthn (rather than requiring a separate token) is harder in the PC world than on Macs and why Linux just doesn't have a good story here yet: mjg59.dreamwidth.org/62746.html

4 13 40 0 9

DaKnOb @DaKnObCS

3 years ago

I spoke yesterday about the future of Web Authentication, and you can find the recording online here: youtube.com/watch?v=Iyw5s9… #WebAuthn #Web #WWW #Security #Authentication

0 0 5 0 0

Barbara van Schewick @vanschewick

3 years ago

The European Commission has been contemplating radical changes to the Internet in Europe that would violate #netneutrality and upend how the internet economy has worked for decades. Its proposal: the long-discredited idea that websites and apps should pay broadband providers.

2 34 69 0 6

DaKnOb @DaKnObCS

3 years ago

I blogged about using #ACME to automatically, securely, and reliably protect all your workload connections with #mTLS and achieve authenticated End to End Encryption #E2EE: blog.daknob.net/workload-mtls-…

0 1 2 0 1

DaKnOb @DaKnObCS

3 years ago

I blogged about how I’m using #ACME to issue #mTLS and #SSH certificates for my personal infrastructure: blog.daknob.net/acme-end-user-… My end goal is to make sure the devices I’m using don’t have access to my stuff for most of the time. I also move to 100% hardware-backed keys!