Martin Schmiedecker

@Fr333k@infosec.exchange
838 Followers
2.2K Following
3.3K Posts
Automotive security by day, online privacy by night. Digital forensics & teaching it in between.
WebsiteSchmiedecker.net
Really, if you wanted maximum bang for buck, you probably wouldn’t blow up critical national infrastructure stuff in a traditional sense - you’d blow up one thing, AWS us-east1, and watch everything which depends on it break.

Good news, the Tuscolo CT logs are now "Qualified" (meaning that some of your certs are/will soon be using our CT log!!)

The bad news is that by including our new logs in the well known list of CT logs, some stuff now instantly crashes (seemingly because the array of non "Sunlight" (aka next gen) logs is empty).

Impacted things seem to include:

1. 80% of the food delivery app market in Brazil
2. Lots of banks in India
3. Lowes????
4. Basically any app that uses appmattus/certificatetransparency

Suboptimal.

More info:

1. https://github.com/appmattus/certificatetransparency/issues/143
2. https://github.com/google/certificate-transparency-go/issues/1712

The street that my mum lives in is a one-way street, but wasn't marked as such on #Google Maps. This caused many drivers to drive the wrong way. I have tried to edit it on Google Maps (there is such functionality), but to no avail. No matter how often I submitted a change (with photos of street signs!), Google said "Sorry, we could not verify it".

Solution: Edit the street on #OpenStreetMap! A few months after I did this, Google seems to have stolen the data, as it regularly does, and now the street is correct in both datasets!

Here's something I am very excited about: Photosynthesis! 🌱☀️

A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs.

This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC signature sizes in logs and handshakes.

https://mailarchive.ietf.org/arch/msg/tls/6jqhUVz58s4ZgsZ8HvuZftncT9A/

[TLS] Photosynthesis, an update to Merkle Tree Certificates

Search IETF mail list archives

Do you enjoy guzzling real-time TLS certificate allocations, but don't want to use a third-party service (crt.sh, CertStream, etc.)? Drink straight from the Certificate Transparency log firehose using ctail:

$ go run github.com/hdm/ctail@latest -f -m '^autodiscover\.'

https://github.com/hdm/ctail

„Wer ist eigentlich dieser @leyrer?“
-
„Ja der hält seit Jahren immer wieder (auch mehrere Vorträge) bei der #GPN.“
-
„Ne, sagt mir nichts.“
-
„Und verteilt da immer Manner Waffeln.“
-
„Ach so der. Ja, da war ich schon in ein paar Vorträgen.“

#gpn23

Ich weiß wo dein Haus wohnt - Grundlagen zu Bluetooth-Trackern

media.ccc.de
happy spacex blew up their entire texas launch facility day for those who celebrate
Jemand hat sich eine ausgelaufene Domain eines alten Bittorrent-Tracker geschnappt und mal 'nen opentracker laufen lassen. Ergebnis entspricht der Erwartung.

Aus eigener leidvoller Erfahrung von fehlgeleiteten Tracker-Anfragen auf den *WEB*-server des Projekts kann ich bestätigen, dass die Pflege der Listen in alle neuen Torrents eingestreuten Tracker in den Clients echt zu wünschen übrig lässt.

https://kianbradley.com/2025/06/15/resurrecting-a-dead-tracker.html
Resurrecting a dead torrent tracker and finding 3 million peers

So I was uh, downloading some linux isos, like usual. It was going slowly, so I opened up the Trackers tab in qBittorrent and saw the following:

Kian Bradley’s Blog
"Works on my machine", oil on canvas.
Unknown artist, 2025
×
"Works on my machine", oil on canvas.
Unknown artist, 2025
@beyondmachines1 The 1990ies want their memes back?
@Zugschlus @beyondmachines1 oh, honey. Reuse and tweaks are kind of built into the meme concept.
@beyondmachines1 Reminds me of how often my "digital native" students try to turn in work as local-machine addresses.
@ntnsndr @beyondmachines1 This! After I spend an entire class period showing them how to upload to the LMS and attach a file to their university email…

@bfuhrman @ntnsndr

Do you guys remember how many intentional localhost links Elon got as responses to this?

@beyondmachines1 HAHAHAHAHAHAHAHAHAAHHAHAHAHAHAHAHAAHHAHAAHAHHAHAHAHAHAHAHAHAHAHA
@beyondmachines1 Best music can be found on 127.0.0.1
@die_christine it's true all my favourite music's there!
@DionRa Enjoy!
It is all for free!
@beyondmachines1 so much for "#AI" replacing programmers…

@beyondmachines1 Depends on the term sheet, but if that payment is not-to-be repaid I'd do it and simply slack off and go about my life with that money.

I don't give a shit about money | Mr. Robot

YouTube

@beyondmachines1 Reminds me of how a friend of mine boasted that he copied over a hundred of computer games onto a single floppy disc.

Turns out all he copied was desktop shortcuts - the disc was full of .lnk files, nothing else. :)

@ticho @beyondmachines1

Only 100? My Commodore 64 has a 5 1/4" floppy drive. From memory, a single sided low density 5.25" disc stored 360KB.

Oh, my C-64 now has a USB stick in it with multiple GBs available.

That's progress!

@beyondmachines1 Chatted with some Hampton somewhere in North America: « If you are here, here is a list of all places delivering to us: C:\users\jdoe\Documents\delivery-restaurants.pdf »
@beyondmachines1 “but I don’t have your machine!” “Hold my beer” and that’s how Docker was born, apparently
@beyondmachines1 The next product would be cloud hosting for AI made websites.
@beyondmachines1 it's weird that people forgot that WYSIWYG HTML editor's exist. Like why use ai when you can easily drag and drop your items.
@beyondmachines1 also learning HTML is much easier than you think
@beyondmachines1 Quick, containerise their computer, shove it in a CI/CD pipeline and deploy to a kubernetes cluster! Job done.
@puck What could co wrong

@beyondmachines1 The AI says nothing, so 🤷‍♂️.

Actually I asked ChatGPT "What could possibly go wrong with deploying a LLM generated web site using JavaScript and npm?". And it actually highlighted a bunch of the risks.