Viewing profile — babawere

Both, honestly. Fun and production intent. But `production` here is very specific, embedded in a single Go binary, a single *.db not a CLI tool (the cli you see there is just for i…

The first bug has been confirmed however The second `vulnerability` would only be exploitable if an attacker could also break SHA-256 preimage resistance to forge valid checksums ?…

Thanks for sharing this. secret looks really well thought out, the three-layer key hierarchy is impressive. And using `age` is a solid choice. once considered it. Different trade-o…

Thanks for the look. On the verification hash, you're right, SHA256 would work there. Argon2id was overkill, I agree 100%. The crash-safe WAL is the part I'm most nervous about too…

So have been told. Will definitely look for a better name

thanks for the update ... will definitely look for a better name

Honestly… the initial use case is to hide certs from the file system and secrets from the environment. However, this can be extended. The primary issue has been not being able to m…

Definitely … agents cannot access your password unless you save it to the environment too. However it's better to use resolvers ... depending on your use case

not when you need an audit system

I was thinking its better to be boring-correct :)

Even when you have a proper function and use AI for auto documentation, it silently changes it (insane) … I will defiantly fix this.

Keeper is an embeddable secret store (Argon2id, XChaCha20-Poly1305 by default). Four security levels, audit chains, crash-safe rotation. Vault is overkill for most use cases. This …

Can you please explain in details?

Its came with the version 7 and you can see here https://help.comodo.com/topic-72-1-451-6840-.html it says You can install PrivDog while installing Comodo Internet Security or by d…

Why would comodo promote such a software ???

Its bad enough because this was bundled with Comodo Internet Security ( https://help.comodo.com/topic-72-1-451-6840-.html and https://help.comodo.com/topic-169-1-413-6109-.html )

While reading about Superfish, I ran this simple test at https://filippo.io/Badfish/ by visiting the webpage and noticed despite the fact i don't have superfish installed i failed …