Andreas ✊🏼✊🏽✊🏾

Cryptography | @Minio | @TUDarmstadt | all things are broken ¯\_(ツ)_/¯ #BlackLivesMatter

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

@zefie @Minio Oh no 😮 - what happened?! We try hard to not break any stable feature. Let us know what broke for you. Maybe open a issue on https://t.co/VrFO9SkSZ9

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

Finally, spent some time to "finish" my n-th side-project.

minisign in Go - CLI compatible to @jedisct1 original C implementation and Go package for signing files / verifying signatures.

https://t.co/pS9YwyXg2u

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

I just wanted to improve a cli tool and now I’m writing a terminal UI framework...
Send help!

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

I now spent 1h to find out why <TAB> is Ctrl-i (which it wasn't before) and why .<Space> (dot + space) seems to be ® sometimes...

Computers are just terrible.

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

@abperiasamy @MarikDon @Minio I just checked out Conjur's API documentation. AFAICS an integration should be straight forward - esp. since Conjur is OSS 🧡
Will put this on my TODO.

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

TIL:
The *officially* assigned TCP/UDP port 17 is for the QOTD protocol specified in the one page RFC 865.¹
QOTD = Quote of the day - and yes, that's exactly what you get xD

https://t.co/y5kGM6yJHW ¹

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

@0xdade https://t.co/dZ2k0vzAGE

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

@rakyll https://t.co/6XOUPCvmKe

Strict version of "global state is bad", I guess...

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

Probably the worst line you can add to your #golang project:
func init() {io.ErrUnexpectedEOF, io.EOF = io.EOF, nil}

¯\_(ツ)_/¯

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

In their defense:
All officers tried really hard with this conspiracy - went the extra mile. You can't succeed all the time. Sometimes the odds are against you. But you have to acknowledge their level of commitment and all the effort they put in...

https://t.co/cWc59gZOHD

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

@SchmiegSophie FWIW, the same problem exists in S3 server-side encryption (SSE-S3). In case of SSE-S3 the object ETag is its MD5 [1].
A client that can perform ListObjects or HeadObject can mount the same attack (ETag is part of metadata).

[1]: https://t.co/x8xzWyRMm6

[Go @golang]

Go 1.14.5 and 1.13.13 have been released!

🔐 A security fix for crypto/x509 (CVE-2020-14039) and net/http (CVE-2020-15586)

📢 Announcement: https://t.co/7DHUhSKB5l

⬇️ Download: https://t.co/gsbpmQHM21

#golang

[Fermat's Library @fermatslibrary]

Clever algorithm to find out whether or not 2 words are anagrams

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

The fucking difference ⬇️

[me, stopped by police]: Hello Sir/Ma'am... Sry, what?! Oh - one sec...
[her]:

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

If we all could just agree on very basic things - like #BlackLivesMatter, don't assault peaceful protesters, and if you're in power you're also in charge...

But somehow we don't...

[Martin Luther King III @OfficialMLK3]

When we unite, we win.

[Richard H. Grant @richardgrant88]

This is probably the most impactful picture I have ever taken.

#JusticeForGeorgeFloyd #LongBeach #LongBeachProtest #BlackLivesMatter

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

And the perspective of the "cops":
https://t.co/dqoLCzvv6c

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

What the fuck are you doing??! You are the police. You are supposed to stay calm. You've taken an oath to protect people, don't you?!
Then, what the fuck is this?! Have you lost your mind??!
https://t.co/PrSVX8aOR7

[Kevin Cottrell Jr @KCJ_Swish]

@B_Craw4D @youlovetiatoo Starts in small box on left before going full screen

[Andreas ✊🏼✊🏽✊🏾 @_aead_]

Wow... I'm mad as fuck
https://t.co/Pq7rtPlEUF

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

The Apple/Google Exposure Notification API makes it cryptographically impossible to outright list who a person associated with.

This is just the police abusing the words "contact tracing" to sound cool and hurting public health efforts in the process.