JLC’s transparent FPC substrate looks *so* good 🤩 Also, I’ve been cooking up some new generator code for my #kimesh security mesh generator! Here’s a sneak preview, more details and a proper announcement will be coming in my #40c3 talk.

It's kind of whacky that you can buy erbium-doped fiber amplifiers on aliexpress for like 300$

I think this is a generational thing. I’m already old enough to have grown up with shitty internet connections (think DSL with 1Mbit on a good day!) so it makes me very happy to finally have a super solid, premium setup at home.

As a nice side bonus of this exercise we now have redudnant fiber & 5G uplinks with automatic failover lol

After 1&1 unsuccessfully fucked around for two months trying to hook us up with fiber internet, I got impatient, cancelled and got a new contract with Deutsche Telekom. They're not the cheapest, but their support works and they got us connected in less than a week.

Lol, ST now publishes their MCU datasheets and reference manuals as Markdown files, with figures in separate SVG files. That's kind of cool for machine-readability! I'm guessing they do this to make them more accessible to LLMs though.

this one here: https://chaos.social/@jaseg/115411504259693224

the topic of my talk will be an easily-digestible explainer based on my research on monitoring security meshes using time-domain reflectometry from here:

https://tches.iacr.org/index.php/TCHES/article/view/12692
#40c3

yay got a main track talk accepted at #40c3

instead of stealing mathematicians’ toys maybe openai should spend some tokens on that lol

Given the general state of affairs, I am calling for a rewrite of the php interpreter and standard library in rust.

long boi

#electronics

A quick back of the envelope calculation says that if you're unemployed enough, you might be able to finish calculating a signature by hand by the beginning of #40c3 this december. I'm sure that would get a slot in the art track!

Everybody is mad about the eMudhra TLS CA intermediate compromise. But let's say it as it is: In an age of AI taking over, eMudhra is out there fighting for team human, and unlocking your ability to finally remember TLS keys without the need for a machine!

With their groundbreaking technology reducing entropy to 8 bits, eMudhra empowers you to do ECC point multiplication without a computer, using good old pencil and paper!

Big CA uses the number four, as in literally “4” as the private key for one of their intermediates like in the fucking xkcd was not on my bingo card for 2026

There's an interesting detail in that screenshot that's hard to notice to a layperson: They say their HSMs are FIPS 140-2 level 3. FIPS 140-2 has four levels, and what most don't know is that only at level 4, the highest level, is any serious active tamper sensing required. At level 3, which they use here, the requirement is literally:

> Hard opaque potting material encapsulation of [the circuit board] or strong enclosure with removal/penetration attempts causing serious damage.

On the eMudhra CA certificate compromise: I just saw they advertise how they store their intermediate certs in HSMs on their website. There is a PoC of signatures from these keys making the rounds, which illustrates pretty well what the limits of HSMs are: To a network attacker, a HSM is little more than an API boundary, and if they can get access to something with access to the HSM, they don't need the keys, they can just tell the HSM to sign what they need to be signed.

For a demo of my Ashen open source HSM software stack at @PrototypeFund, I made a giant escape button that lights up. It’s modelled in FreeCAD and it uses an actual scaled-up Cherry MX keyboard switch.

#electronics #3dprinting

it took so much self control to not name this paper “squiggles SQUIGGLES Squiggles A Field Survey Of Security Squiggles”

please cite me y’all