Adam Caudill

704 Followers
124 Following
546 Posts
Security Engineer, Researcher, & Developer. Formerly at 1Password, BSI / AppSec Consulting, Numorian, etc.
Websitehttps://adamcaudill.com/
Githubhttps://github.com/adcaudill
Exposerahttps://exposera.com/u/adamcaudill
I've been using my Phosphor Notes project for about a month now as a replacement for Loqseq / Obsidian, and I've got to say, building something custom was the right call. This is working out really well. The long-form writing support is so much better than what Logseq offers. https://github.com/adcaudill/phosphor-notes
GitHub - adcaudill/phosphor-notes: A minimal, secure, and focused knowledge studio for the modern thinker.

A minimal, secure, and focused knowledge studio for the modern thinker. - adcaudill/phosphor-notes

GitHub
Cryptographic Issues in Matrix’s Rust Library Vodozemac - Dhole Moments

If you’re reading this after Matrix’s blog post, make sure you read the addendum to this one. Two years ago, I glanced at Matrix’s Olm library and immediately found several side-c…

Dhole Moments

(Not so) fun fact: Ars Technica story on this incident got retracted. I’ve noticed that the article “disappeared” and this got me confused at first: was this story a fake after all? Why would Ars Technica report on it and then pull back?

Turns out, their article contained AI-hallucinated quotes:

“On Friday afternoon, Ars Technica published an article containing fabricated quotations generated by an AI tool and attributed to a source who did not say them.”

https://arstechnica.com/staff/2026/02/editors-note-retraction-of-article-containing-fabricated-quotations/

Yes, way to go for an article on failing of the so-called “AI”…

Editor’s Note: Retraction of article containing fabricated quotations

We are reinforcing our editorial standards following this incident.

Ars Technica

I was watching a video on Russia rushing to move from Starlink to other satellite internet options, including a Gazprom-owned system using satellites in geosynchronous orbit. I wonder how long it'll be until we start seeing countries de-orbit enemy satellites?

There's an upcoming mission to boost a NASA satellite via a new satellite that'll dock & boost the target, for a fairly cheap $30M. There's no reason I can see that the opposite wouldn't work. Using the same techniques to disturb or de-orbit an enemy satellite.

I would assume that collision avoidance would complicate this, but have to wonder if these communication satellites are manoeuvrable enough to avoid a dedicated satellite built to find and grapple a target. For a country like Ukraine, financing such a mission could have massive ROI. (Though lots of complications for the launching country.)

I have a bad habit of forgetting about holidays - so I took advantage of the fact that I'm building a PKM app to add a banner to daily journal notes for holidays. Simple & thoughtful touches like this can make software so much more useful.
@zak @Em0nM4stodon I was thinking about this as well. Trying to figure out how to do this in a way that's both privacy protecting and abuse resistant would be an interesting challenge.
@zak Happy Birthday!
For users of YAWAST / yawast-ng: The project has moved to a new location, and will have a major feature update next week, with plugins, new injection testing, automation & performance improvements, and more. It'll be the biggest release in years. https://github.com/adcaudill/yawast-ng
GitHub - adcaudill/yawast-ng: Web Application Security Scanner

Web Application Security Scanner. Contribute to adcaudill/yawast-ng development by creating an account on GitHub.

GitHub
@zak Luckily, I use oh-my-zsh, so enabling it was just adding the name of a plugin to the .zshrc - less than a minute from start to finish. That'll pay for itself within a day or so.

@zak Thanks for posting this - after several years of using this particular MBP, I finally got around to enabling per-directory history in zsh.

This exact thing has been driving me nuts lately, but I hadn't realised how annoying it was until I started to type a reply.