Viewing profile — codesniperjoe

Warning: Do not go to this site with enabled javascript! They spam your uplink DNS provider with thousands of uniq, uncachable (fingerprinting?) 'test' dns keys without your consen…

Projects Console screen reader infrastructure Vessel - Integrated Application Containers for FreeBSD Enable the NFS server to run in a vnet prison Pytest support for the FreeBSD te…

TLDR: Avoid it if you can!

TDLR: How You Respond to Security Researchers Says Everything ... [ About Your Business State ].

The compiler (go) is part of a static read-only (compressed/in-memory) RootFS. Build on a air-gap build server, touching only signed/verified/reviewed code from git-offline mirror …

Yes, the base idea is not that new. I store since years every GO based application I use as small (few kb) source code tree checkout only, no binary at all. At runtime the wrapper …

For this new feature you pay indeed with the need for r/w and executable tmpfs/overlay somewhere. This does not replace classic ASLR: OpenBSD 5.7 activated position-independent sta…

Plain, simple and effective as always! The highly complex 'black magic' is 'sort --random' and (re-)link it all again. :) Makefile.relink: cc -o sshd `echo ${OBJS} | tr ' ' '\n' | …

Finally! At least, someone finally understands that static, fully predictable, reproduce-able-builds are only an convenience feature for the attacker side.

In general I would tend to agree, but have lately took a look at the gh dependencies this tool draws in today? [0] This is not a (classic) unix cli tool, as it was some month befor…

We should really pin a daily reminder about the unfixable SSL truststore dumpster fire situation (every day a different one) to the top of YC!

Netflix contributes. Real Code. Rock stable. High quality. For so many years. So its not only the Free-Beer-License for them. I have never seen a single commit comming back from ot…

FreeBSD Hammer2 [r/o][pending] Lots of work will end up (as often) in the ports section, if nobody has a strong point why it is usefull to maintain it in base. Users/use-cases feed…

If google is on the way to fix this, a look at the resources on (EVERYONES LOCAL!) not de-duplicated $GOMODCACHE would be very welcome too! (At least from an enviromental perspecti…

If you need a local & offline first tool to log/track/archive changes from all kind of git repos yourself, from: * github.com * sourcehut (sr.ht) * gitlab.com * codeberg.org * ... …

TLDR: gps tracker with backup battery and activated sim card found in sealed car ECU (BTO from china, to save some pennies, in a high-security-custom build car)

Thank you! That is a quick (helpful) fix! Beside of checks for the integrity of SelfSigned Certificates, I do not used this function directly. My assumption about the TLS impact wa…

One example, the started (and then stuck) net/ip to net/netip migration? The tailscale netip package is great (as external pkg), but without commit to a full migration plan, just s…

> TLS handshakes now return a CertificateVerificationError if they fail because of, well, certificate verification. ... as long the crypto/x509 CheckSignatureFrom ignores the pathl…

Go is great. But if you look close enough, go also has some dark corners. The reason the biggest parts of go/crypto is well designed, good readable code, is mostly the work of one …

> Finally, reviewing the BoringCrypto integration by Russ. Do you think there is a rollback/cleanup possible of current boring/fips situation? (eg. push it back into a seperate sta…

Maphash is an (non-cryptographic-secure) hash function, like CRC32 / CRC64 / XXH3-64 and others, so it turns data in an (almost) uniq uint64. The main difference is, it is an hardw…