[0xC001]

1.1K posts

[0xC001]

@ECCTLS

0xC001 == TLS_ECDH_ECDSA_WITH _NULL_SHA

Joined Mart 2014

377 Following498 Followers

[0xC001]@ECCTLS·25 Mar

@DennisF I tried, but going up to every bald person and yelling “hi Dennis” hasn’t worked out yet 🙃

English

Dennis@DennisF·23 Mar

This is my 25th RSA so I may look slightly weary. But do say hi!

Decipher@DecipherSec

One half of our team (the older half) will be at RSA this week in San Francisco, so if you see @DennisF wandering around, say hi.

English

114

[0xC001]@ECCTLS·16 Eki

There seems to be a lot of misplaced rage … instead, direct that ire at the vendors that don’t support automation. The best time was 5 years ago, the second best time is now.

The Register@TheRegister

Sysadmins rage over Apple’s ‘nightmarish’ SSL/TLS cert lifespan cuts dlvr.it/TFND7y

English

110

[0xC001]@ECCTLS·25 Eyl

@IanColdwater Great job!

English

120

[0xC001]@ECCTLS·22 Eyl

@BenLaurie @julianor @dfaranha If it’s got SCTs, paste it in here and check out what CT log it went to crt.sh/lintcert

English

Ben Laurie@BenLaurie·22 Eyl

@julianor @dfaranha I mean SCTs :-)

English

Juliano Rizzo@julianor·21 Eyl

👋 need some help querying certificate transparency logs.

English

881

[0xC001]@ECCTLS·26 Tem

The only issue I had was that they played the Casio demo song while Ken held a Korg.. 🙃

🎻 ➡️ BlueSky@ericlaw

That they pulled off Barbie is truly impressive. Amazing music choices really helped.

English

211

[0xC001]@ECCTLS·16 Şub

@IanColdwater 🪗

QME

[0xC001]@ECCTLS·7 Şub

@smartereveryday Cryptography Engineer

English

Smarter Every Day@smartereveryday·7 Şub

Someone recently asked me "Who watches Smarter Every Day?" So... What do you do for a living? OR if you're a student, what are you studying?

English

2.4K

401.1K

[0xC001]@ECCTLS·29 Ara

@sirus @DennisF If the TLS session isn’t new, it could have validated the cert prior to expiration and used session resumption to continue with the old TLS context. Browsers can cache the cert and just show it when asked.

English

137

Misha Davidov 🏳️‍⚧️@sirus·29 Ara

There seem to be a number of different TLS certs being used for twitter right now. Can anyone explain why chrome still thinks my current one is trustworthy and valid given the expiration?

English

1.6K

[0xC001]@ECCTLS·9 Kas

Why would you use CommonName inside an OtherName in a SubjectAltName, for validation that a node is part of a collection of nodes‽ (DNSNames are still used for validation that you’re connecting to the correct server, at least if you don’t turn that off) #L36" target="_blank" rel="nofollow noopener">github.com/elastic/elasti…

English

[0xC001]@ECCTLS·5 Kas

@durumcrustulum @matthew_d_green Yes.. but not encrypted Good news though, they state that up front

English

Deirdre Connolly¹@durumcrustulum·5 Kas

@matthew_d_green Does Mastodon have DMs on web?

English

Matthew Green@matthew_d_green·5 Kas

I decided to take this week (mostly) off Twitter just to see what Mastodon was like. I joined an infosec-focused server and I’ve spent the past few days trying to use it like Twitter. Here’s a quick review. 1/

English

129

598

[0xC001]@ECCTLS·10 Eki

@bradfitz Should have listened to Taylor Swift.. twitter.com/swiftonsecurit…

SwiftOnSecurity@SwiftOnSecurity

THE FILTER IN THE BOTTOM OF THE DISHWASHER OH MY GOD

English

Brad Fitzpatrick 🌻@bradfitz·10 Eki

Dishwasher: "E24" Us: "wtf is E24?!" Google: "dishwasher is not draining. The filter may need to be cleaned." Us: "filter?? There's a filter?!" Dishwasher: ...