Ethan Heilman 😼

@ethanheilman.bsky.social

Have hash function, will travel ⬡ Posts about cryptology, netsec, infosec, OpenID Connect ⬡ co-founded bastionzero.com ⬡ Works on OpenPubkey: https://github.com/openpubkey/openpubkey ⬡ Website is https://ethanheilman.com

For a better understanding how this can be related
to TEXTSECURE, suppose the following example (jealous
spouse attack): Bart (Pb) wants to trick his friend Milhouse
(Pa). Bart knows that Milhouse will invite him to his birthday party using TEXTSECURE (e.g., because Lisa already
told him). He starts the UKS attack by replacing his own
public key with Nelsons (Pe) public key and lets Milhouse
verify the fingerprint of his new public key. This can be
justified, for instance, by claiming to have a new device and
having simply re-registered, as that requires less effort than
restoring an encrypted backup of the existing key material.
Now, as explained in more detail below, if Milhouse invites
Bart to his birthday party, then Bart may just forward this
message to Nelson who will believe that this message was
actually sent from Milhouse. Thus, Milhouse (Pa) believes
that he invited Bart (Pb) to his birthday party, where in fact,
he invited Nelson (Pe).

A gold fish atop a shaky tool. Bad news we are all the gold fish. Good news, we can improve the design that keeps us from crashing to the floor

In A.D. 1582 Pope Gregory XIII found that the existing Julian calendar
insufficiently represented reality, and changed the rules about
calculating leap years to account for this. Similarly, in A.D. 2013
Rockchip hardware engineers found that the new Gregorian calendar still contained flaws, and that the month of November should be counted up to 31 days instead.

Shows the OpenPubkey Web Chooser with additional custom IDPs

Creating an ssh key by running opkssh and then running ssh

$àbic biSVYHYCZ\[]b5S¼Y*^]^\YCZ?[]-U_^\Yq ^\b`9b5-ZZ\YKO-U_Z\YKYKS^\[K ~ ;~ óSáUjhXhXV[^]Z2f^\UXb5Sèbc^ pYS-YKYqN^\bÊq-UX[]KhXb5[]Y?^ pYhXbf^\UXb5SçbcEZ\Yq-fiC^\UXbiSV[K ñpYhXYCc=^ [pb [wf[\fVhXYRq%bKVYKS^^ pf^b5S-YUXp^[]UXiSà U_^ p fZ\Yq-fiC^2fVhXYR[]UX5SVf^\-Z\Y[]pYKY5 ñpYUjqVq%hXY[pb [,biSVY[]-V[^]Z\UXSV^ pf^,UXp^YEb5-^2fUXSVYqU_cl^ pYEhXbf^\UXb5S?biclZ\YKqVfi*^\UjbiSV[ UX[ SVb^wf5q-YYC%VhXUXKU_^TUXS^ pYZ\YK[]-hX^ VSVb^\Y pb¹^ pYYfSVUXSVbic^ pY,biZ\UX5UXS;fhq%bKVYKS^ pfi[ YCYKS?WOUXb5hjf^\YKq0 ñpYZ\UXp^![pb [,^ pYKbiZ]Z\YK[]biS;q%UjS-Z\Yq-fiC^\UXb5S?b5-^2fUXSVYqUXcq-YKhXYC^\UXb5S-[fZ\Y q%UX[]KhXb5[]Yq!YC%VhXUXKU_^\h_` KSVbi^\Y pb^ pYf^]^\YK%^\YqT^]Z\UX*m5YCZ]`UX[Z\YCW9YfihXYq,`^ pUX['KbiVS^\YCZ\Yf[]-Z\Y5 kYKfi-[]Ybc0^ pUX[lbi^\YCSO^\UjfhVcLbZg^ pUX[e[]biZ]^gbc'[]YCwfiS^\UXTf^]^2fi2mpYCS^ pY hXbf^\UXb5Sbicq-YChjY*^\UjbiSV[ fZ\YS-bi^gwfiq-Y YC%VhXUXKU_^%fi[UXhjhX-[^]Z2f^\Yq pYCZ\Yi%fihXhb5%ZgKbiSV[^]Z\V*^\UjbiSV[lc=b5hX$