Built another little tool for the decentralised key distribution crowd! dane.dp42.dev tests OpenPGP DANE (RFC 7929). Look up any email's DNS record and verify your DNSSEC setup is working. Pair it with wkd.dp42.dev for full coverage of modern distributed key discovery.

www.2600.com/content/hope... Official announcement.

Ugh, this sucks. Looks like @hope.net was kicked out of St. John's University and needs to find other options for the next conference. Stated reason was anti-police materials at someone's booth, but wasn't brought to the con's attention until after it was over.

Had a great time talking with @sebsto and Richard on the AWS Developers Podcast about our migration journey onto AWS and how we built a Serverless E-Commerce platform. 🎧 Listen now: 🔹 Apple Podcasts: https://podcasts.apple.com/gb/podcast/the-aws-developers-podcast/id1574162669?i=1000731082011 […]

What movie do you consider “perfect”?

There is a lot of demand for digital privacy and security advice out there right now and lots of people are giving advice and writing guides. I beg them to do a few things: 1. Be explicit about the threat model your advice is meant for.

Huge thanks to everyone who joined the Serverless Meetup and to Aleios and Moonpig for sponsoring and organising! A special shoutout to Ryan Cormack for his insightful talk on Smithy. I had a blast giving my talk and chatting with so many of you afterwards.

omg as a pentester PLEASE use one of these! Get them for your entire company. It’ll go great

Missed out last meet up? Never fear, you can catch @chimbosonic.com's talk here: www.youtube.com/watch?v=RBme...

Quote post this with a picture of the airplane you’ll accept as a bribe.

For those who wanted to see more from the Moonpig engineering teams, you can visit their Medium blog: medium.com/moonpigtech

Thanks to everyone who came on Tuesday! We had a great relaxed atmosphere and plenty of pizza. See you in July?

Breaking news: The European Commission is issuing burner phones and basic laptops to some US-bound staff to avoid the risk of espionage — a measure traditionally reserved for trips to China www.ft.com/content/20d0...

It's hard to wrap your head around all the failure modes of a distributed system. What if you could play with the sequence diagram of a run to see how it responds, and see if you can get it into a failure state? dist-sys-simulator.netlify.app

Looking forward to speaking at London GraphQL in April! I'll be sharing insights from Moonpig's experience with GraphQL, Federation, and Serverless. Excited to connect with everyone there!

1. LLM-generated code tries to run code from online software packages. Which is normal but 2. The packages don’t exist. Which would normally cause an error but 3. Nefarious people have made malware under the package names that LLMs make up most often. So 4. Now the LLM code points to malware.

they finally did it. they invented a machine that can't run doom.

Had a great time chatting with Sam and Richard on the #Moonpig #Tech Podcast about our journey into #event-driven #architecture! We dig into the why, the how, and the intricacies of #EDA 🎧 Listen now 🔹 Apple #Podcasts: podcasts.apple.com/us/podcast/e... 🔹 Spotify: open.spotify.com/episode/4gb6...

Looking forward to speaking at London GraphQL in April! I'll be sharing insights from Moonpig's experience with GraphQL, Federation, and Serverless. Excited to connect with everyone there!

Introducing WKD Tester – a free, open-source tool for testing OpenPGP Web Key Directory implementations! I built it to help out with the Keyoxide project, making it easier to generate lookup URIs and discover keys on the fly. Check it out at https://wkd.chimbosonic.com. #openpgp #wkd […]

Framework is shipping a RISC-V mainboard; I love that this is happening frame.work/products/dee...

A little update on #meshtastic at #fosdem: Picked 66 unique nodes on day 1 and watched the network melt during the #Meshtastic talk (maybe doesn’t scale that great with all the nodes in one place). The best part of day 1 tho was that I connected to a node 300km from my location via 2 hops. Day […]

As the year wrapped up, I spent some time reflecting on my transition from a CyberSecurity engineer to Principal engineer which inspired me to write a blog about the steep learning curve of writing quality coding and—how I used #rust to reinforce my skills. Check it out and let me know what you […]

Waiting patiently for the #fosdem train!

A peril of listening to podcasts while walking to work: the latest episode of @edzitron.com's Better Offline with @jeremykaplowitz.com has me guffawing like a madman on the mean streets of Oakland open.spotify.com/episode/0qFj...

i made this quick to shitpost in work slack but i feel like the rest of you need to see it too

At the end of this year, I reflected on my transition from a CyberSecurity engineer to Principal engineer which inspired me to write a blog about the steep learning curve of writing quality coding and—how I used #rust to reinforce my skills. tilde.club/~chimbo/blog... #Rust, #CodingJourney, #blog

Got a pair of Heltec V3s for Xmas. First thing I did was print a case and now I've modified a holster I found for the case to mount it on my Multiboard to make a charging station. Case: www.printables.com/model/741974... Modified Holster: www.printables.com/model/112350... #meshtastic #3Dprinting

I've been begging people to uninstall Honey forever, just based on the idea that all middlemen are rent-seeking and scamming. Turns out, that was a good instinct: www.youtube.com/watch?v=vc4y...

You think I want sex robots to have sex with them. I want sex robots in order to insulate the American industrial and intelligence workforce from malign foreign honeypots. We are intellectually not the same.

Woah really cool space at Moonpig 😮 They told me it was but seeing it is a different story! Awesome turnout despite the horrible weather outside 😅 Come say hi if you see me!

Who needs #AI to lie about reality when simple editing can do wonders?

When we were first implementing passkeys, we ran a usability test with folks of differing abilities. When a man with vision challenges did an authentication with a passkey for the first time, he started crying because it was so easy.

Something ingrained, that I realize now others do not have, is knowing the solution to failure is offering a better solution. I have tried shame I have endured compliance. I ground this axe years. You need the market to decide you've won. I sold modern policy baselines to fix user experience. I won.

Internet scanner noise is annoying, so i'd rather just let them go and scan other websites...