[blog] InfoQ - eMudhra Intermediate CA Compromise
Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach.
http://blog.thestateofme.com/2026/10/22/infoq-emudhra-intermediate-ca-compromise/
RE: https://hachyderm.io/@davidculley/117252813555964472
Omacom is a PAC
Or at least Omacom is to open source what a political action committee (PAC) is to politics - an attempt to buy influence with the $€£ of the rich and powerful to further benefit the rich and powerful.
It's not just a fascist project because of who's involved (though the list of shame grows longer and more cringey by the day); it's an inherently anti democratic thing because that's what PACs are.
FWIW I don't think PAC money will buy influence with open source users, contributors and maintainers in the same way that it does with voters. But we're all about to find out the hard way whether that's true...
HT @wendynather for the dialogue that brought this realisation.
HT @Edent for inspiring this post.
[blog] Home networks, security, and things (IoT)
As Internet of Things (IoT) devices become more commonplace managing the risks they bring becomes more of a bother. I've chosen to deal with this by having different network zones for different trust levels; implemented mostly with OpenWrt...
http://blog.thestateofme.com/2026/08/07/home-networks-security-and-things-iot/
[blog] Brewster's Trillions
The AI infrastructure bubble has reached a point where companies just can’t actually spent all the money they might (notionally) have allocated. There might be money on a balance sheet somewhere, but good luck exchanging it for actual stuff like GPUs, or HVAC...
http://blog.thestateofme.com/2026/07/27/brewsters-trillions/
[blog] QCon London 2026
QCon is one of my favourite events, and I've been to a lot of them over the years. 2026 was the best yet, so kudos to the programme committee and C4media organisers.
[blog] Packaging Dart binaries as .deb and .rpm etc.
nFPM makes it very easy to put your binaries into a Debian .deb or RedHat Package Manager .rpm file. I also took the opportunity to slide in the new(ish) Dart cross compilation capabilities rather than using Dockerised build for arm7 and riscv64.
http://blog.thestateofme.com/2026/02/24/packaging-dart-binaries-as-deb-and-rpm-etc/
It’s arrived @wendynather
[blog] Clocking on at the Outrage Factory
Our online discourse is the victim of industrial scale pollution, and the incentives are being aligned in the wrong direction. Rather than polluters being penalised there's now an entire industry that's paid to pollute.
http://blog.thestateofme.com/2025/11/29/clocking-on-at-the-outrage-factory/
On my way to #RC2014 Assembly at TNMOC and hoping to do a lightning ⚡️ talk on my TMS9995 project
https://www.slideshare.net/slideshow/tms9995-on-rc2014/219672920
https://blog.thestateofme.com/2019/06/01/retro-computing-final-touches-for-tms9995-on-rc2014/
Say hi if you're around 😀
With all the hubbub about age verification (and the Tea breach) we’re back to talking about happens when identity documents inevitably fall into the wrong hands.
My personal way of dealing with this is to overprint the doc with ‘Only valid for CompanyName’.
I have no way of knowing how effective this is (especially with highly automated systems). But hopefully any human working for XYZ corp will reject a doc watermarked for ABC corp.
One surprise is that I’ve never had a document rejected because of doing this.
A few more #WeirdCarMastodon
Visiting some friends in St Petersburg FL over the weekend and passed by a car show, so time for some #WeirdCarMastodon pics.
I'll be at FOSDEM this weekend. My first time.
No firm plans for Saturday yet, but some talks in the Retrocomputing, RISC-V and Security rooms look interesting.
Sunday I'm planning on spending in the SBOM room (where I'll do a short talk on the challenges producing SBOMs for C apps).
I'm looking forward to seeing old friends, meeting new people, and hearing about cool stuff people are building.
Can somebody please turn the LHC off and back on again.
Who has wise guidance for using python scripts in the post Debian 12* world with packages that haven't been packaged for `apt install python3-whatever`? (e.g. all of the google-cloud stuff)
venvs seem clumsy for the task, but doing a bunch of `pip install --break-system-packages` is also obviously bad.
Either my Google foo is weak here, or this is an elephant in the room that's being studiously ignored.
* also Raspberry Pi OS Bookworm, Ubuntu 24,04 etc.
@simon I'd value your thought?
Anybody aware of any efforts to use solar panel data to determine (live) high resolution cloud cover as an input to weather/climate forecasting?
@mrchrisadams @adrianco
I went to the Tony Blair Institute for Global Change Future of Britain Conference yesterday, and I wrote about it in my newsletter https://buttondown.email/justenoughinternet/archive/im-looking-for-a-man-in-ai-think-tank-trust-fund/
Marvelous to see the Greens take all four of their target seats 😀