iiinova — where your digital self keeps evolving

NON-TOXICNo ads · No shady algorithms

iiinova is part of the Atmosphere — an open, public network where you own your identity.

kpcyrd 🏳️‍🌈🏴

@kpcyrd.chaos.social.ap.brid.gy

11 followers 0 following 79 posts

Rust Developer 🦀, {Arch Linux,Debian,Alpine} Package Maintainer 📦, Reproducible Builds Enthusiast ⛓, Security Researcher 🦝, Anarcho Communist 🏴 🌉 bridged from ⁂ chaos.social/@kpcyrd, follow @ap.brid.gy to interact

Posts Replies Media

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 22/10/2026

I recently added this to the signal-desktop Arch Linux package and it's working nicely! I found out about this feature when I investigated something else in the configure script of the official .deb provided by the Signal org itself, then decided to add this to […] [Original post on chaos.social]

Signal Desktop indicating an update is available and suggesting clicking to restart the application.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 22/10/2026

@CyReVolt For container images it could make sense for docker/podman/kubernetes to come up with something that mounts the CA bundle of the host into the container. It would help with eMudhra, but it would also help with people having their own internal CAs. There's currently workarounds like […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

I was really happy today when I saw my name in an LWN article (again) and being co-credited for an idea from 2 years ago that now has wide support across security experts. <3 lwn.net/Articles/1100026

[$] Hash-based module integrity for reproducible distributions

We last looked in on hash-based integrity checking for kernel modules just over a year and half ago. Since that time, the patch set has undergone multiple revisions. At the 2026 Linux Plumbers Conference (LPC), Thomas Weißschuh described the need for kernel-module integrity guarantees while still providing reproducible builds, how his patches implement that, and some ideas for possible further work.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

www.php.net/archive/2026.php#2026-1…

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

@CyReVolt according to the bugzilla comments it was probably not an HSM problem, but they made a mistake in the script that was supposed to integrate the HSM. Like, instead of reading the HSM public key, they derived the public key of the number 4, then put that into the CSR they used to setup […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

@sackofbones web.archive.org/web/20261020235549/… ctrl+F, Handtaschen

web.archive.org

Massiver Datenleak bei der AfD: Interne Mails sollen rassistische Hetze und Holocaust-Leugnung enthalten

Hunderttausende AfD-Mails sind nach einem Hackerangriff im Netz aufgetaucht. Die Hintergründe sind unklar, die Inhalte drastisch.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

@sackofbones yes. hexane.cc (there's a phishing warning because the domain is getting mass-reported, that you can click through tho). The emails can be verified for authenticity through DKIM, the download magnet is magnet:?xt=urn:btih […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/10/2026

This week, two days in, we have a major bank being down the entire day, the private keys of a CA recovered and posted all over the internet, and 281 GB of internal emails of the German far-right party leaked, talking about processing refugees into boots and handbags. I hate this timeline, GTA 6 […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 20/10/2026

The #eMudhra private keys are 4, 56, 66, 115, 155, 156, 230, 237

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 20/10/2026

"The private key for all 8 compromised CAs is a single byte. One of the private keys is literally 4." welp

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 20/10/2026

Fortunately, in 2026, we have SBOMs for everything so we can trivially tell which computers and software trusts #eMudhra and which ones needs their ca-certificates updated urgently~ The private keys have been recovered independently by multiple researchers, certificate transparency is rarely […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 17/10/2026

Assisted-by: Microsoft vscode on my iPhone 18 Pro Max Burgundy

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 27/09/2026

I work in an environment with exposure to increased infection risk, but what truly scares me are hotels running open breakfast buffets for ~250 simultaneous guests :<

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 22/09/2026

ctime but instead of creation, it's the last time somebody truely cared about the file

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 10/09/2026

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 27/08/2026

I physically can't access most of my computers right now due to motorbike logistics, and in the middle of nowhere I read about a buffer overflow in GNU gzip (CVE-2026-41992). Fortunately, I believe every place that matters I'm explicitly using a pure #rust implementation of gzip.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 24/08/2026

computah, summarize the ballot options, make no mistakes

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 14/07/2026

I wish people would avoid #zig for software that is packaged in distributions. The zig standard library is pre-1.0, meaning zig software is always written for a specific compiler version that Arch Linux build servers may not be able to match. This specific […] [Original post on chaos.social]

error: Your Zig version v0.16.0 does not meet the required build version of v0.15.2

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 03/07/2026

Neat, russh 0.62.0 links to feedback I gave about their API regarding ssh channels, and did a breaking change to better accommodate `direct-tcpip`. :) github.com/Eugeny/russh/releases/ta…

Release v0.62.0 · Eugeny/russh

Breaking changes #686 - make channel confirmations truly async This changes the signature of the Handler::channel_open_* functions to allow you to make the channel accept/reject decision outside of...

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 17/06/2026

Why do people pretend C is a significantly more mature ecosystem yet here I am with "make 4.4.1 doesn't compile anymore because C23 added a new function to the standard library and the make C code from 3 years ago is now invalid". #rust #linux

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 16/06/2026

@novafuture do you have an svg for that one btw? :D

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 12/06/2026

Something to consider for the current #aur incident, if you don't want to engage with the javascript ecosystem anyway - add this to your /etc/pacman.conf: IgnorePkg = npm IgnorePkg = bun Also make sure both packages aren't installed already and uninstall if necessary. #archlinux

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 08/06/2026

Am I missing something or is MITRE about to make #CVE requests require a Google account? mitre.github.io/mitre-cve-roles/cve…

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 07/06/2026

2026 is when you type "systemd journald change label from binary name to something else" into google and all results on the first page are garbage, so you paste the same search query unmodified into chatgpt and it points to SyslogIdentifier=, which turned out to be the correct setting I was […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 06/06/2026

How is landlock in allow-list mode meant to be used with glibc's dns? Generally there's the problem of "/etc/resolv.conf may be a symlink", but there's also NSS (name service switch) that may hook arbitrary code/shared objects into domain resolution. There is no way to know what files they are […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 19/05/2026

@bagder Anybody can request a CVE, not just upstream. It's less about project policy, if a real, medium-severity vulnerability doesn't have a CVE assigned, that basically just means nobody was bothered enough to request one.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 19/05/2026

@bagder We would need to refer to bugs as "the buffer overflow that's in src/foo/bar.c line 1067 in version 4.5.6, and line 1058 in version 4.5.7" again. Arch Linux wouldn't care, but it would make the life of Debian maintainers more difficult.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 18/05/2026

RE: fosstodon.org/@Antiz/11658027071432… This post made me really happy, much appreciated :3 Both designs are from ~2023/2024, I'm still trying to come up with good ones for this year. I'm generally aiming for positivity (green-cape vs red-cape designs), but current politics makes […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 14/05/2026

Dear opensource developers, I added an "adoption" list to the repro-env README, if you publish pre-compiled binaries and you successfully adopted it to allow anyone to reproduce them from source code to prove the absense of a build server compromise, you are very welcome to add yourself to the […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 14/05/2026

RE: chaos.social/@jacqueline/1165603657… I wish Gitlab would instead focus on fixing their code so Gitlab can run on the public internet again without needing ubiquitous hand-holding from anubis

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 10/05/2026

"Design patterns are a catalog of all the features your programming language lacks" lol

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 29/04/2026

the post has been deleted by infosec.exchange, so... here you go: dustri.org/b/carrot-disclosure-forg…

Carrot disclosure: Forgejo

Personal blog of Julien (jvoisin) Voisin

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 28/04/2026

RE: infosec.exchange/@jvoisin/116484271… Exciting, curious if codeberg is affected ✨

infosec.exchange

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 22/04/2026

This took me quite a bit of time, but I managed to boot postmarketOS on a currently unsupported devboard (commonly available for €25-30 where | live). Little bit proud, but it's not a proper port yet, I ripped the kernel and other parts of the pre-init […] [Original post on chaos.social]

Screenshot of postmarketOS booted into an interactive shell

htop on the booted system

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 12/04/2026

RE: mas.to/@frontenddogma/1163936288866… I vouch for the accuracy of this blog post, it's a spot-on writeup of (source-based) supply-chain security in 2026. If you have dependencies with zero cargo-crev reviews, be that person for one of them. Ultimately, there will be no way around […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 06/04/2026

I pushed curl-rustls-8.19.0-3-x86_64.pkg.tar.zst to Arch Linux, with this version it's now possible to encrypt the TLS client hello: curl -sSv --ech hard --doh-url='https://dns.mullvad.net/dns-query' 'defo.ie/ech-check.php' Should display: <p>SSL_ECH_OUTER_SNI: cover.defo.ie <br /> […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 27/03/2026

Somebody took the time to document the AMD GPU situation: lunnova.dev/articles/rocm-711-you-c… In case you've been wondering where the AI VC money is going - C build systems and build servers apparently. #linux

ROCm 7.1.1: you can (not) build

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 25/03/2026

"Germany won't be able to figure out regulation for synthetic sexual abuse material until there's deep fakes of their Doppelhaushälfte on google maps" - Levi

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 18/03/2026

@andrewnez @bzg git-remote-swh (or git-remote-swhid, with configurable lookup server) would be really cool, is this an actual project? :)

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 17/03/2026

For debian-rust packaging, instead of dealing with the fact that the libcrux stack is split into libcrux-intrinsics, libcrux-ml-kem, libcrux-platform, libcrux-secrets, libcrux-sha3, libcrux-traits, I decided to just port the post-quantum key exchange of russh over to the RustCrypto ml-kem crate […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 13/03/2026

Today I had #Linux problems - I run Debian sid in systemd-nspawn for packaging and my build environment broke: mounting /proc failed: No such file or directory at /usr/libexec/sbuild-usernsexec line 509. The kernel logged: `VFS: Mount too revealing` The fix was somehow this command, no […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 09/03/2026

@michalfita @preslavrachev that would definitely be an improvement, the rest of it might be due to somebody going bonkers with generics (i.e. some kind of complicated callback signature). I have mixed feelings when people don't put in effort to keep their Rust code simple, for people from the […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 01/03/2026

Now the problem, if I run `git init` without `--object-format=sha256` I won't be able to fetch a sha256 repository I add with `git remote add` afterwards. Is there a "proper" way to fix this? Best I could come up with is `git ls-remote 'codeberg.org/kpcyrd/ssh-keyonly.git' | cut -f1` and […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 01/03/2026

Asking for support from my fellow followers: I recently mentioned I'm field-testing sha256 git repositories, I now noticed something that broke and I'm wondering what's the best way to fix this. I have code that fetches one specific revision from a git repository (by tag name or commit id). The […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 28/02/2026

Today I learned: Prisoner's Dilemma vs Stag Hunt Dilemma, and Nash equilibrium.

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 03/02/2026

@b0rk I'd refer to it as "client-side web security", but also I think this is what "web security" actually should mean. Things like SQL injection or shell injection have nothing web specific to it, those bugs could exist 1:1 in some telnet application too, and we wouldn't call it "telnet […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 21/01/2026

[politics] Digital independence is nice and everything, but if the USA invasion of Europe starts a war, do I lose my .org domain due to not being able to renew? #diday #digitalsovereignty

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 12/01/2026

@michalfita github: ipv4 + sha1 🥀

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 12/01/2026

My #2026 resolution was field-testing sha256 git repos and I converted one of my minor projects, but since Github only supports sha1 I've moved the repository to codeberg: codeberg.org/kpcyrd/ssh-keyonly Everything else worked well. I'm also mirroring the repo to Arch Linux' Gitlab […]

Original post on chaos.social

kpcyrd 🏳️‍🌈🏴 @kpcyrd.chaos.social.ap.brid.gy · 10/01/2026

@JessTheUnstill I spent some time with embedded Rust recently, I wrote a savegame library that's optimized for low-level flash storage, with power-fail safety and wear leveling: github.com/kpcyrd/embedded-savegame I specifically designed it to work with the ch32v003 (2kb ram, 16kb […]

Original post on chaos.social