Levi Schuck

77 Followers
515 Following
197 Posts
Platform engineering manager, goes to DEFCON, proposing and guiding security policies like a wanna be CISO. Also interested in cryptography
Sitehttps://levischuck.com
Heading to DEFCON33 soon

I released version 0.2.4 of Typage, the TypeScript implementation of age for Node/Deno/Bun and browsers.

encrypt and decrypt now accept and return ReadableStreams to encrypt/decrypt large files on the fly. The returned object also has an additional method to compute the expected output size from the input size.

https://github.com/FiloSottile/typage/releases/tag/v0.2.4

Release v0.2.4 with streaming APIs ยท FiloSottile/typage

Typage can now encrypt and decrypt ReadableStreams. This can be useful for encrypting or decrypting large files, requests, or responses on the fly. Decrypter.decryptHeader allows decrypting a file ...

GitHub
Wikipedia has a cheat sheet of well-known tells for identifying generated text. (With an appropriate warning not to over-index on minor ones as absolute proof) https://en.m.wikipedia.org/wiki/Wikipedia:WikiProject_AI_Cleanup/AI_catchphrases
Wikipedia:WikiProject AI Cleanup/AI catchphrases - Wikipedia

Please take a moment to pet your cat.

Oh shit the vDSO implementation of getrandom() landed in Linux 6.11.

Might remove one of the last performance objections ot using the kernel CSPRNG for everything, the syscall overhead.

I have a large CL chain for crypto/rand, might as well add support for that...

passkeys.dev now has a #WebAuthn feature detection page which detects browser support for various features for #passkeys!

you can access it at either https://passkeys.dev/featuredetect or https://featuredetect.passkeys.dev

passkeys.dev WebAuthn Features and Capability Detection for Passkeys

A feature and capability detection site for WebAuthn from passkeys.dev!

passkeys.dev WebAuthn Feature Detection
The evening sky. And now I understand why J.M.W. Turner liked visiting the Swiss lakes to paint.
#Google: Threat actor spreads malicious Google Authenticator (hosted by GitHub) by promoting it via Google ad as a 'Trusted Advertiser' verified by Google:
๐Ÿ‘‡
https://www.malwarebytes.com/blog/cybercrime/2024/07/threat-actor-impersonates-google-via-fake-ad-for-authenticator
Threat actor impersonates Google via fake ad for Authenticator | Malwarebytes

Only trust official sources they say, but what happens when a Google vetted ad is for a Google product?

Malwarebytes

Coming soon to WebAuthn: related origins!

Related origins allow websites that change domains over time or that operate across many to share the same passkeys. Browsers should support it later this year, which may solve the passkey problem X / Twitter has.

https://levischuck.com/blog/2024-07-related-origins

#webauthn #passkeys

Coming soon to Chrome and Safari: WebAuthn related origins - Levi's Blog

Related origins allow websites that change domains over time or that operate across many to share the same passkeys. Browsers should support it later this year, which may solve the passkey problem X / Twitter has.