Toots for djm@cybervillains.com account

Written by Damien Miller on 2024-12-18 at 05:15

Random-ass homebrew CNC question:

Does anyone have experience with the FlexiHAL CNC controllers when paired with a Raspberry Pi running LinuxCNC?

Considering replacing a Centroid Acorn with one to get more axes/inputs in a smaller physical package

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-10-18 at 07:38

🚨new USCSB video

https://www.youtube.com/watch?v=CcMnf86n8_U

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-27 at 13:16

build photos here https://photos.app.goo.gl/dBAXVTixgq5ABPWu7

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-27 at 07:51

Finished* the electronic leadscrew I built for my bench lathe, designed with @FreeCAD and @kicad and with the firmware in #rust

Video of its first test cut in tool steel https://photos.app.goo.gl/Z1YjenFgVWQzvFb1A

Mechanical design, schematics/PCBs and firmware at https://github.com/djmdjm/TU-2506V-ELS/

=> View attached media | View attached media | View attached media

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-23 at 08:38

Record scratch

Freeze frame

You're probably wondering how I got here.

Well, so am I

=> View attached media

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-20 at 00:12

OpenSSH 9.9 has just been released. New features include support for hybrid ML-KEM X25519 post-quantum key exchange (using a formally-verified ML-KEM implementation), improved controls to drop and penalise unwanted connections, faster NTRUPrime key exchange code and more.

https://www.openssh.com/releasenotes.html#9.9

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-17 at 07:46

My colleage Jess McClintock will be presenting today at the OSS Europe Summit on our Capslock tool for understanding the implicit capabilities of Go dependencies. Check it out if you're interested in proactive defences to supply-chain threats.

https://sched.co/1jWWx

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-15 at 08:37

Please help us test OpenSSH ahead of the 9.9 release, due in a few weeks.

New features include a new post-quantum key exchange based on ML-KEM, improved controls to disallow unwanted connections and better performance for the existing PQ key exchange.

Full details at: https://marc.info/?l=openssh-unix-dev&m=172638834815257&w=2

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-09-11 at 23:11

I haven't seen this for a while!

@bugzilla

=> View attached media

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-30 at 06:44

Yay, patched up OpenSSH interoperates with oqs-openssh and a similarly patched up Golang ssh for ML-KEM768 + X25519 hybrid key exchange

https://github.com/djmdjm/openssh-portable-wip/pull/2

https://github.com/golang/crypto/compare/master...djmdjm:crypto:mlkem768x25519-sha256

OpenSSH using libcrux C extraction, oqs-openssh using reference impl, Golang using the mlkem768 package by @filippo

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-26 at 23:55

Everyone tech-adjacent celebrating Durov's arrest should read the charges against him as some are very problematic:

• Providing cryptology services aiming to ensure confidentiality without certified declaration,

• Providing a cryptology tool not solely ensuring authentication or integrity monitoring without prior declaration,

• Importing a cryptology tool ensuring authentication or integrity monitoring without prior declaration.

How many OSS tools violate these?

https://www.tribunal-de-paris.justice.fr/sites/default/files/2024-08/2024-08-26%20-%20CP%20TELEGRAM%20.pdf

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-26 at 02:13

To anyone freaking out about how AI photo editing tools are making photography an unreliable medium, I suggest reading https://faculty.cc.gatech.edu/~beki/cs4001/history.pdf

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-22 at 13:47

My god, Scavengers Reign was amazing. Not a wasted frame

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-14 at 08:08

It's been zero days since I've last wanted Signal to have an API to let automated tools send me messages

=> More informations about this toot | View the thread

Written by Damien Miller on 2024-08-12 at 11:59

Whom amongst us hasn't added an unsafe function to a sshd signal handler?

https://www.freebsd.org/security/advisories/FreeBSD-SA-24:08.openssh.asc

=> More informations about this toot | View the thread

=> This profile with reblog | Go to djm@cybervillains.com account