Key pinning in Golang
Key pinning is a technique that can protect clients from rogue or compromised certificate authorities [1, 2, 3]. If you have control over the client and »
keybase and github commits
Now that Github visualizes signed commit, I wanted to start using my keybase pgp key to sign commits. Unfortunately my keybase key had a single uid »
SSH keys on a yubikey
There is something oddly satisfying about having my private ssh keys only on a hardware device where they cannot be directly accessed. For the past 6 »
MailChimp Information Disclosure Vulnerability
Earlier this year I was working on a MailChimp integration for my "Real Job" and spent the evening poking around their application. I found a few »
Cucumber Mint Margarita
The warm weather this weekend in New York City put me in the mood for margaritas. This, combined with the 5 hours of pre-Kentucky Derby coverage, »