Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

rsalz

@rsalz.ioc.exchange.ap.brid.gy
41 followers 3 following 163 posts

Akamai, IETF, QuicTLS. Previously DataPower->IBM, OpenSSL. [bridged from ioc.exchange/@rsalz on the fediverse by fed.brid.gy ]

PostsRepliesMedia
rsalz @rsalz.ioc.exchange.ap.brid.gy · 8h
@slothrop Shorter: "yes, and ... "
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 8h
Outstanding resource on what SDOs are doing in the AI agents space: github.com/frmoretto/agentic-standa…
github.com
GitHub - frmoretto/agentic-standards-map: Who is standardising agentic commerce, where, and what they have committed to next. 59 dated, sourced entries, four seams and a calendar. DOI 10.5281/zenodo.23357361
Who is standardising agentic commerce, where, and what they have committed to next. 59 dated, sourced entries, four seams and a calendar. DOI 10.5281/zenodo.23357361 - frmoretto/agentic-standards-map
021 2
rsalz @rsalz.ioc.exchange.ap.brid.gy · 14/10/2026
@darkuncle @jschauma Goodhart's law, 1975: when a measure becomes a target, it's ceases to be a good measure.
114 4
rsalz @rsalz.ioc.exchange.ap.brid.gy · 08/10/2026
In honor of my birthday, LetsEncrypt ius moving to 64-day certificates. To bad they aren't 67-day certs :)
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 07/10/2026
@SteveBellovin @peterhoneyman could be. But with the words free lunch maybe they shouldn't have been surprised.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 07/10/2026
@peterhoneyman who died?
200 2
rsalz @rsalz.ioc.exchange.ap.brid.gy · 06/10/2026
@adamshostack For now, I just copied your question into the `concerns` section :)
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 06/10/2026
@peterhoneyman Yes, "A" is hard to predict because it has "foo" property could be rewritten as since "A" is high entropy it is hard to predict. Isn't English wonderful? :)
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 06/10/2026
@adamshostack yeah, that whole sentence needed to be rewritten. s/mouse/network/ for example.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 05/10/2026
Damien Miller and I wrote a first draft of RRC 4086bis. We changed the focus, as implied by the title "On Random Numbers". Draft is at www.ietf.org/archive/id/draft-rsalz…. Comments and feedback encouraged (email either saag@ietf.org or to us directly)
200 2
rsalz @rsalz.ioc.exchange.ap.brid.gy · 01/10/2026
October is apparently Cybersecurity Awareness Month. It's a good thing, I guess, that they don't use CS for CyberSecurity.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 29/09/2026
I've been a happy sodastream customer for almost two years. They forgot the return label on my last order. I reported it over the weekend, and they called me Monday morning so they could email me a replacement. Amazing customer service! And tasty flavors, too.
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 23/09/2026
Like the headline used to say, "[AI] threat or menace" :). Power users and close collaboration are a risk to be managed. Akamai research report: www.akamai.com/resources/state-of-t…
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 02/09/2026
Stealing a quote: AI has arrived, it's just not evenly distributed www.cybersecurity-insiders.com/shad…
cybersecurity-insiders.com
Shadow AI Is a Concentration Problem, and Broad Policy Misses It
Akamai's 2026 telemetry reframes shadow AI as a concentration problem: the top 5% of power users run AI at 12 times the rate of the rest of staff.
020 2
rsalz @rsalz.ioc.exchange.ap.brid.gy · 28/08/2026
@SteveBellovin would it be wishful thinking to ask to rename the Dead Sea after him?
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 20/08/2026
@adamshostack And of course "missed" is "NIST". Auto-correct, and I NIST it. :)
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 20/08/2026
@adamshostack no, missed just sent the algorithms. NSA set the timelines for DOD and government overall. And the recent executive order just made the deadline five years earlier.
100 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 20/08/2026
@adamshostack Following NIST or NSA/DoD? NIST didn't set a timetable. FinTech is worried about the money...
100 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 20/08/2026
@adamshostack it's not just the government. All the fintech and other verticals too. And what the FDA say when you ask them 8 years ago?
200 2
rsalz @rsalz.ioc.exchange.ap.brid.gy · 20/08/2026
@adamshostack "How did qunatum win?" Win over what. I don't recall any cryptographers saying use-after-free is not worth fixing. Different skill sets? Interesting question.
100 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 19/08/2026
Akamai joins the PQ march to 2030: www.akamai.com/blog/security/future…
101 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 11/08/2026
@SteveBellovin @ferrix hope it all goes well
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 06/08/2026
Akamai latest state of the internet/security report is out. Unsurprisingly, the focus is on risks of AI to enterprises. www.akamai.com/resources/state-of-t…. Looking at the takeaways on the first screen, most people here will not be surprised, but […]
ioc.exchange
Original post on ioc.exchange
010 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 29/07/2026
Our collaboration with Uniqlo nerd-sniped someone who figured out the T shirt: tris.sherliker.net/blog/obfuscated-…. His post made Hacker News, too.
A beige t-shirt whose artwork is a very long string of base-64 encoded text.
011 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 24/07/2026
OH at IETF: TLS now stands for "totally lost it's sh*t"
053 5
rsalz @rsalz.ioc.exchange.ap.brid.gy · 22/07/2026
OH (CFRG meeting at IETF-125): Deploying a new ECC algorithm in 2026 is irresponsible.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 19/07/2026
What's next for PQ crypto? www.akamai.com/blog/security/post-q…. Wherein I name-check many people smarter than I am.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 17/07/2026
@adamshostack I thought it was under half an hour, although it did seem like almost 90 minutes...
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 15/07/2026
@paulehoffman probably safest course of action
000 0
Reposted by rsalz
Sophie Schmieg @sophieschmieg.infosec.exchange.ap.brid.gy · 08/07/2026
Niche memes
The myth of the "consentual" KEX (key exchange) 
Client: I consent
Server: I consent
Rando: *I* don't

Isn't there somebody you forgot to ask?
183 8
Reposted by rsalz
Sophie Schmieg @sophieschmieg.infosec.exchange.ap.brid.gy · 05/07/2026
I now get pestered by more djb minions on here being all like BuT WhAt If YoUr BaNk UsEd PuRe ML-KEM?!!)?!? Well, if my bank servers support this cipher exactly nothing happens. My client will still not offer it, so it will not be negotiated. And if it were to be negotiated then… also nothing […]
infosec.exchange
Original post on infosec.exchange
161 6
rsalz @rsalz.ioc.exchange.ap.brid.gy · 05/07/2026
@grumpybozo yeah it is really overboard. Everything goes through the template library. If all you have is a hammer...
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 03/07/2026
RE: furry.engineer/@soatok/116854899284… What they say said.
furry.engineer
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 02/07/2026
Apropos of nothing, I just got this in a private email: Captain Appeal and his DoS attacks. I wonder who they are thinking of?
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 01/07/2026
RE: infosec.exchange/@sophieschmieg/116… You and me both.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 26/06/2026
From my wife: I think we're being edged by the Grim Reaper.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 09/06/2026
@SteveBellovin But does the spider obey robots txt ?
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 08/06/2026
99percentinvisible.org/episode/100-…. Fascinating story of standards and dominance. Hoover, screws, WWII, and more.
99percentinvisible.org
100 Objects #2: 60-Degree Screw
A small metal screw, cut to a precise angle. How did one country quietly decide how the modern world holds together? In this episode, Roman and historian Daniel Immerwahr tell the story of the screw and America’s fight to standardize it. In the early 20th century, nothing quite fit. Fire hoses didn’t connect to one another, football teams played with different footballs, and traffic lights meant different things in different states. Then, World War II exposed the deadly costs of incompatible machinery, so the US slowly imposed a single standard in production lines across the world: the 60-degree screw. The result was a hidden industrial empire, built with standards now so ubiquitous that we rarely notice them at all. _A History of the United States in 100 Objects_ tells the story of America, one thing at a time. Hosted by Roman Mars and produced by BBC Studios and 99% Invisible, each week an object opens the door into an extraordinary, often shocking story – about who we’ve been, what we’ve built, and what we’ve allowed ourselves to forget. This series forms a kaleidoscope through which American history refracts, revealing a country stranger and more fascinating than any single telling could capture. 99% Invisible A History of the United States in 100… #### Article ### A History of the United States in 100 Objects
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 29/05/2026
@mattblaze Yes, the RFC10K problem has been fixed. Took like a year but maybe only a dozen people. I think the current plan is to not publish RFC 10000, but I'm not positive.
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 28/05/2026
I'm late to the party, but this is still brilliant: www.joanwestenberg.com/the-costco-t…
000 0
Reposted by rsalz
abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 28/05/2026
phishing training really doesn’t spend enough time on “how to structure your mass corporate communications in such a way that your employees won’t conclude that you communicate exactly like scammers and still expect a reply so they’d better assume scammy emails are legitimate”
23527 35
Reposted by rsalz
Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 21/05/2026
Naming things? Cache invalidation? Pffft. Shell variable quoting and evaluation.
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 13/05/2026
We're building out a bunch of tools and such for our customers to use. Any recommendations for good dev-rel sites we can look at, life advice from, etc?
101 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 11/05/2026
And now we can say it publicly www.akamai.com/blog/security/akamai…
000 0
Reposted by rsalz
210561 ✨ [Q] @q.glauca.space.ap.brid.gy · 11/05/2026
ah the sweet sweet taste of petty victory
001 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 06/05/2026
Sad and very very funny. www.nytimes.com/2026/05/05/us/pope-…
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 28/04/2026
"90% of women leave tech within 10 years," according to an Akamai study. www.computerweekly.com/news/3666423…
computerweekly.com
Almost 90% of women leave tech industry within 10 years | Computer Weekly
Women aren’t staying in the tech sector for longer than 10 years, but may come back after leaving if the circumstances are right
110 1
rsalz @rsalz.ioc.exchange.ap.brid.gy · 25/04/2026
@mattblaze fascinating, thanks. On a lighter note, Service Request #1: What Happens When I Call 311? - 99% Invisible 99percentinvisible.org/episode/serv…
99percentinvisible.org
Service Request #1: What Happens When I Call 311?
During the early days of the pandemic lockdowns, 99% Invisible producer Christopher Johnson found himself trapped in a high-rise apartment in Washington Heights, tormented by the relentless, looping jingle of idling Mr. Softee ice cream trucks. Armed with the knowledge that local noise ordinances required the trucks to silence their music while parked, he dialed 311. He fully expected to be routed into an automated bureaucratic dead end. Instead, he reached a live, empathetic operator armed with highly specific probing questions, offering a rare glimpse into the surprisingly human machinery of municipal 311 lines. This massive civic switchboard is a relatively recent urban invention. Throughout the 1980s and early 1990s, 311 lines didn’t exist and city residents routinely called 911 to report mundane issues like potholes and noise complaints, dangerously clogging emergency dispatch lines. To relieve the pressure, Baltimore launched the nation’s first dedicated 311 line in 1996. However, when New York City launched its own system in 2003, it dramatically scaled up the concept. The goal was to build a comprehensive customer service operation capable of handling any non-emergency inquiry, from sanitation schedules to homeless services. > What infrastructure mystery keeps you up at night? Submit your Service Request by recording a voice memo with your question and emailing it to [email protected]. Building that exhaustive civic directory was a monumental undertaking. Per Joe Morrisroe, the deputy commissioner at New York’s Office of Technology and Innovation, the city had to consolidate disparate agency hotlines into a single location and cram thousands of protocols into a centralized, searchable database. When the system launched, it contained around 1,000 discrete pieces of information. Today, that number has swelled to over 7,000, allowing a staff of hundreds of operators to field millions of calls a year, along with millions of other contacts via web, text, and mobile app. For the operators answering those calls, the work requires serious investigative skills. As NYC 311 supervisor Samantha Pierce notes, the system relies on understanding the “why” behind a grievance, requiring call-takers to probe beyond the initial frustration of residents dealing with sewage backups or illegal parking. They act as the de facto voice of the city, fielding everything from heartbreaking inquiries about the housing market to baffling reports of ghosts and neighbor-induced apartment vibrations. Beyond simply logging complaints, the 311 network functions as a real-time feedback loop capable of adapting to unprecedented crises. During the massive Northeast blackout of 2003, an influx of callers suddenly needed to know how to safely store insulin without refrigeration, prompting 311 to rapidly coordinate with the Department of Health to issue new municipal guidance. In 2009, when US Airways Flight 1549 safely crash-landed in the Hudson River, a wave of unexpected inquiries about retrieving luggage that had washed ashore forced the city to invent a retrieval protocol on the fly. To this day, the 311 team uses the term “floating luggage” as an internal shorthand for the unpredictable emergencies they must constantly anticipate. By mapping millions of individual service requests, the city can pinpoint systemic issues and even solve regional mysteries, like the time 311 data and wind patterns were overlaid to trace a phantom maple syrup scent back to a New Jersey fenugreek factory. Yet despite this incredibly complex infrastructure, some localized annoyances remain stubbornly resistant to municipal intervention. Having filed his noise complaint anonymously, Johnson never received a tracking number, and the ice cream trucks continued their daily concerts completely undeterred. In the end, he solved his infrastructural nightmare with a decidedly analog workaround: he packed up his apartment and moved to Brooklyn. > What infrastructure mystery keeps you up at night? Submit your Service Request by recording a voice memo with your question and emailing it to [email protected]. _Service Request_ is a production of 99% Invisible and Campside Media. 99% Invisible Service Request #### Article ### Service Request
000 0
rsalz @rsalz.ioc.exchange.ap.brid.gy · 02/04/2026
@timbray Can we do Thursday? I'm getting a tooth pulled Wednesday.
000 0