* JSON Web Proofs [https://github.com/json-web-proofs/json-web-proofs/blob/main/charter-ietf-jose-03.md] so like Zero Knowledge Proofs but with JWT tech?
* Adding AES CBC to COSE [https://mailarchive.ietf.org/arch/msg/cose/dfpAgMC80iawfvwg3JpzgqpWGI4/] has…

Twitter provided an accessible means to reach out to nearly anyone and actually get honest and interesting responses.

Device auth codes can be phished to get access to your business. There are better options for devices and local CLI tools.

The year 2023 is here! But what will I do this year? First: looking for a cryptography job.

Seriously, humans are bad at making up random stuff. Let's not fool ourselves.

My take on what entropy means.

Indistinguishable from random or IND is often referenced in cryptography text. See inside for a practical description!

Google Chrome does not let users seek, rewind, or fast forward HTML videos. Here's how to fix that!

HKDF is a great tool to derive sub-keys from a master key, however it is often misused! Be careful about the salt parameter and use info correctly!

I accidentally became staff for a furry convention and made lines 8-20x faster for everybody

AI technologies promise productivity, it comes with a cost: uniformly diminishing human expression and experiences; less critical thinking, and a power shift.

People often joins queer communities as they develop niche skills. And how queer communities are treated by those that benefit most.

It looks like engaging sludge is being used to hide phishing scams on twitter. This problem exists elsewhere too and it is not being addressed.

A scam is going around on telegram affecting my friends and their friends. How to recover your telegram account from a phishing scam, and how they do it.

This 'hilariously over-engineered' blog has so much custom tech: from custom markup to multi phase post processing, it is my most treasured side project.

To share code between Deno modules and a Node project, I used DNT to build a version for NPM. Deno is a mature platform, unlike Bun and ts-node.

Authenticate with GitHub with a PKCS#1 to JSON Web Key. Create Check runs and pull request comments. Also how to publish to NPM from GitHub.

Third-party password managers fix the cross-platform issue with passkeys. Platforms won't share key material. It is safe to use passkeys with password managers.