·· 𝘗𝘢𝘯𝘤𝘢𝘬𝘦 𝘍𝘭𝘪𝘱𝘱𝘪𝘯𝘨 𝘛𝘪𝘮𝘦 ··
I work in cyberspace, security department.
*If it cannot be measured, it does not exist*
No discussions in bad faith!
| Religion | DNS |
| Topics | DNS(SEC) & Web PKI |
| Work | Product Security |
·· 𝘗𝘢𝘯𝘤𝘢𝘬𝘦 𝘍𝘭𝘪𝘱𝘱𝘪𝘯𝘨 𝘛𝘪𝘮𝘦 ··
I work in cyberspace, security department.
*If it cannot be measured, it does not exist*
No discussions in bad faith!
| Religion | DNS |
| Topics | DNS(SEC) & Web PKI |
| Work | Product Security |
@netcup cancels sales on short notice:
The market is being bought out by large AI factories, and from today's perspective, this will continue for at least two years. The question right now isn't how you much we pay - it's whether you get supplied at all.
(english version below) Liebe Community, viele von euch haben schon von der RAMpocalypse gehört und gelesen - es ist der Sammelbegriff dafür, was gerade am Speichermarkt (sowohl RAM, als auch SSD und NVME) vor sich geht. Ich würde lügen, wenn uns…
An F in cryptography is aes-js / pyaes, as this Trail of Bits blog by Opal Wright explains:
Mistakes in cryptography are not a sin, even if they can have a serious impact. They’re simply a fact of life. As somebody once said, “cryptography is nightmare magic math that cares what color pen you use.” We’re all going to get stuff wrong if we stick around long enough to do something interesting, and there’s no reason to deride somebody for making a mistake.
What matters—what separates carelessness from craftsmanship—is the response to a mistake. A careless developer will write off a mistake as no big deal or insist that it isn’t really a problem—yadda, yadda, yadda. A craftsman will respond by fixing what’s broken, examining their tools and processes, and doing what they can to prevent it from happening again.
Does this sound familiar?

Two popular AES libraries (aes-js and pyaes) provide dangerous default IVs that lead to key/IV reuse vulnerabilities affecting thousands of projects. One maintainer dismissed the issue, while strongSwan’s maintainer exemplified proper security response by comprehensively fixing the vulnerability in their VPN management tool.
Introducing ads into AI chat bots is a clear recipe for disaster. Zoe Hitzig’s NYT essay is interesting, but I think her comment in response to a reader is more important and succinctly devastating to the claims of how AI will change everything:
https://www.nytimes.com/2026/02/11/opinion/openai-ads-chatgpt.html