Oh hey, with all the 🔥 I almost missed that today was the 12th anniversary of Heartbleed.

The online test I cobbled together that night gave me the opportunities to get started in this line of work!

Initially it was hilariously bad: a Flask server shelling out to a patched Go crypto/tls binary.

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years.

That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

https://words.filippo.io/crqc-timeline/

i don't see enough people with one of the best tool improvements i've ever made for reverse engineering, so i had to write a blog post about it!

https://simonomi.dev/blog/color-code-your-bytes/

GitHub's auto-suggest using the display names instead of the account names isn't really doing us any favors.

The latter "Dependabot" here is our beloved, and very fake, depenbadot.