A new release of asfald, our downloader transparently validating chksums! github.com/asfaload/asf...
Most important feat: report vulnerability window,i.e. time between publication and mirroring of chksums. During that time an attacker could update file in release undetected.
#buildinpublic #release
Most important feat: report vulnerability window,i.e. time between publication and mirroring of chksums. During that time an attacker could update file in release undetected.
#buildinpublic #release
Release v0.6.0 · asfaload/asfald
0.6.0 (2025-06-24)
Features
add flag to overwrite existing files (ebb8589)
print vulnerability window of index (158048c)
print vulnerability window of index (640e316)
refuse to overwrite existing ...
github.com
June 24, 2025 at 5:58 PM
A new release of asfald, our downloader transparently validating chksums! github.com/asfaload/asf...
Most important feat: report vulnerability window,i.e. time between publication and mirroring of chksums. During that time an attacker could update file in release undetected.
#buildinpublic #release
Most important feat: report vulnerability window,i.e. time between publication and mirroring of chksums. During that time an attacker could update file in release undetected.
#buildinpublic #release
Starting a new project from scratch in a new language is often a trial and error approach. Such is the case for the implementation of our generic multisig signoff solution in #rustlang As we #buildinpublic, you can follow progress at github.com/asfaload/asf... Only 3 commits at this time ;-)
GitHub - asfaload/asfasign: Generic multisig signoff solution
Generic multisig signoff solution. Contribute to asfaload/asfasign development by creating an account on GitHub.
github.com
June 24, 2025 at 6:39 AM
Starting a new project from scratch in a new language is often a trial and error approach. Such is the case for the implementation of our generic multisig signoff solution in #rustlang As we #buildinpublic, you can follow progress at github.com/asfaload/asf... Only 3 commits at this time ;-)
github.com/joernio/joern is a multi language code analysis tool. Its release checksums are mirrored by Asfaload to increase the security of downloading it. Check how at asfaload.com/asfald/ #codeanalysis #opensource
GitHub - joernio/joern: Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc - joernio/joern
github.com
June 20, 2025 at 10:22 AM
github.com/joernio/joern is a multi language code analysis tool. Its release checksums are mirrored by Asfaload to increase the security of downloading it. Check how at asfaload.com/asfald/ #codeanalysis #opensource
Just discovered #buildinpublic, which is what I've done with asfaload.com but without any public :-). It started with the goal to provide authenticated downloads, but became a more general multisig sign-off solution. All developed in the open and under open source licenses (AGPLv3 or MPLv2) 🧵
Asfaload: Generalized Multisignature Sign-Off — Asfaload
Asfaload provides a generalized multisignature sign-off solution for authenticating digital artifacts and processes.
asfaload.com
June 11, 2025 at 9:35 AM
Just discovered #buildinpublic, which is what I've done with asfaload.com but without any public :-). It started with the goal to provide authenticated downloads, but became a more general multisig sign-off solution. All developed in the open and under open source licenses (AGPLv3 or MPLv2) 🧵
With its checksums on the Asfaload mirror, Regal github.com/StyraInc/regal , a linter for #policy definitions used by the open policy agent www.openpolicyagent.org/docs, a #cncf graduate project , can be downloaded with additional security, see www.asfaload.com/asfald/
GitHub - StyraInc/regal: Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
Regal is a linter and language server for Rego, bringing your policy development experience to the next level! - StyraInc/regal
github.com
May 30, 2025 at 1:41 PM
With its checksums on the Asfaload mirror, Regal github.com/StyraInc/regal , a linter for #policy definitions used by the open policy agent www.openpolicyagent.org/docs, a #cncf graduate project , can be downloaded with additional security, see www.asfaload.com/asfald/
Ever missed Freshmeat? This is for you: get a continuously updated stream of newly published Github releases at www.freshstuff.net
And releases whose checksums files are mirrored by Asfaload are marked as such
And releases whose checksums files are mirrored by Asfaload are marked as such
Freshstuff - 2025-05-19
www.freshstuff.net
May 19, 2025 at 10:23 AM
Ever missed Freshmeat? This is for you: get a continuously updated stream of newly published Github releases at www.freshstuff.net
And releases whose checksums files are mirrored by Asfaload are marked as such
And releases whose checksums files are mirrored by Asfaload are marked as such
A new release of @cloudflare.social 's pint, the #prometheus rule #linter has been published at github.com/cloudflare/p..., and its checksums are already available on asfaload's mirror to let you download with increased security. Check how at www.asfaload.com/asfald/ #security
Release v0.73.3 · cloudflare/pint
Fixed
Fixed incorrect value in This pint run would create N comment(s), which is more than the limit ... comments
when using GitHub or GitLab with pint ci command.
github.com
April 25, 2025 at 9:50 AM
A new release of @cloudflare.social 's pint, the #prometheus rule #linter has been published at github.com/cloudflare/p..., and its checksums are already available on asfaload's mirror to let you download with increased security. Check how at www.asfaload.com/asfald/ #security
github.com/pdfcpu/pdfcpu is a #pdf processing library in #go that you can download with additional #security using asfald (see www.asfaload.com/asfald/ )
github.com
April 23, 2025 at 12:38 PM
github.com/pdfcpu/pdfcpu is a #pdf processing library in #go that you can download with additional #security using asfald (see www.asfaload.com/asfald/ )
Need to export your Slack data? this tool can help github.com/rusq/slackdump and as it publishes checksums in its release, our checksums mirror increases the security of your downloads, check out how at www.asfaload.com/asfald/ #slack #export #data #tool
GitHub - rusq/slackdump: Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.
Save or export your private and public Slack messages, threads, files, and users locally without admin privileges. - rusq/slackdump
github.com
April 11, 2025 at 9:57 AM
Need to export your Slack data? this tool can help github.com/rusq/slackdump and as it publishes checksums in its release, our checksums mirror increases the security of your downloads, check out how at www.asfaload.com/asfald/ #slack #export #data #tool
Convert your images on the fly to webp thanks to github.com/webp-sh/webp... which can be downloaded with increased safety using asfald, for more info see www.asfaload.com/asfald/
#webp #server #golang
#webp #server #golang
GitHub - webp-sh/webp_server_go: Go version of WebP Server. A tool that will serve your JPG/PNG/BMP/SVGs as WebP/AVIF format with compression, on-the-fly.
Go version of WebP Server. A tool that will serve your JPG/PNG/BMP/SVGs as WebP/AVIF format with compression, on-the-fly. - webp-sh/webp_server_go
github.com
April 4, 2025 at 7:40 AM
Convert your images on the fly to webp thanks to github.com/webp-sh/webp... which can be downloaded with increased safety using asfald, for more info see www.asfaload.com/asfald/
#webp #server #golang
#webp #server #golang
@neovim.io released version 0.11, a significant release available at github.com/neovim/neovi...! With our checksums mirror you can download it with additional security. Check out how at asfaload.com/asfald #neovim
github.com
March 28, 2025 at 9:44 AM
@neovim.io released version 0.11, a significant release available at github.com/neovim/neovi...! With our checksums mirror you can download it with additional security. Check out how at asfaload.com/asfald #neovim
Rancher Labs' GKE and AKS operators can be downloaded with additional security guarantees with asfald, check how here: www.asfaload.com/asfald
Their releases are at github.com/rancher/gke-... and github.com/rancher/aks-...
#security #k8s #Cloud
Their releases are at github.com/rancher/gke-... and github.com/rancher/aks-...
#security #k8s #Cloud
What is asfald? — Asfaload
www.asfaload.com
March 21, 2025 at 8:36 AM
Rancher Labs' GKE and AKS operators can be downloaded with additional security guarantees with asfald, check how here: www.asfaload.com/asfald
Their releases are at github.com/rancher/gke-... and github.com/rancher/aks-...
#security #k8s #Cloud
Their releases are at github.com/rancher/gke-... and github.com/rancher/aks-...
#security #k8s #Cloud
Today's project discovery: github.com/EricCrosson/...
Group your commits by issue into Github PRs. Lets you work on one branch and push to distinct PRs afterwards.
Check how to download it with additional safety at www.asfaload.com/asfald/ #github #git #softwaredevelopment
Group your commits by issue into Github PRs. Lets you work on one branch and push to distinct PRs afterwards.
Check how to download it with additional safety at www.asfaload.com/asfald/ #github #git #softwaredevelopment
GitHub - EricCrosson/git-disjoint: Group commits by issue into GitHub PRs
Group commits by issue into GitHub PRs. Contribute to EricCrosson/git-disjoint development by creating an account on GitHub.
github.com
March 14, 2025 at 10:34 AM
Today's project discovery: github.com/EricCrosson/...
Group your commits by issue into Github PRs. Lets you work on one branch and push to distinct PRs afterwards.
Check how to download it with additional safety at www.asfaload.com/asfald/ #github #git #softwaredevelopment
Group your commits by issue into Github PRs. Lets you work on one branch and push to distinct PRs afterwards.
Check how to download it with additional safety at www.asfaload.com/asfald/ #github #git #softwaredevelopment
#terraform providers are often published with checksums. That's also the case of the huawei cloud provider: github.com/huaweicloud/...
See how you can download it with automatic checksums validation at asfaload.com/asfald
See how you can download it with automatic checksums validation at asfaload.com/asfald
Release v1.73.1 · huaweicloud/terraform-provider-huaweicloud
github.com
March 7, 2025 at 10:10 AM
#terraform providers are often published with checksums. That's also the case of the huawei cloud provider: github.com/huaweicloud/...
See how you can download it with automatic checksums validation at asfaload.com/asfald
See how you can download it with automatic checksums validation at asfaload.com/asfald
Friday project discovery: Permify (github.com/Permify/perm...) is an open source authorization as a service inspired by Google Zanzibar, and as they publish checksums, it can be downloaded with additional safety with asfald: www.asfaload.com/asfald/ #security #authorization
GitHub - Permify/permify: An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. - Permify/permify
github.com
February 28, 2025 at 2:13 PM
Friday project discovery: Permify (github.com/Permify/perm...) is an open source authorization as a service inspired by Google Zanzibar, and as they publish checksums, it can be downloaded with additional safety with asfald: www.asfaload.com/asfald/ #security #authorization
The copies on our mirror of checksums are now taken much more rapidly. This reduces even more the attack window (eg replacing a file and its checksums file). For example the checksums of this pulumi release were taken less than 3 mins after release: github.com/asfaload/che...
Github://pulumi/pulumi · asfaload/checksums@3aba2bf
github.com
February 27, 2025 at 1:22 PM
The copies on our mirror of checksums are now taken much more rapidly. This reduces even more the attack window (eg replacing a file and its checksums file). For example the checksums of this pulumi release were taken less than 3 mins after release: github.com/asfaload/che...
We had a breakthrough in our search of a satisfying procedure to handle lost and compromised keys, as well as account reinitialisation. All possible without having to trust. Will formalise all this, looking forward to have it implemented!
#security #multisig #signature #softwaresupplychain
#security #multisig #signature #softwaresupplychain
February 21, 2025 at 4:20 PM
We had a breakthrough in our search of a satisfying procedure to handle lost and compromised keys, as well as account reinitialisation. All possible without having to trust. Will formalise all this, looking forward to have it implemented!
#security #multisig #signature #softwaresupplychain
#security #multisig #signature #softwaresupplychain
Looking at our checksums mirror allows me to discover some niche software, this week it is a shipping pack optimiser: github.com/obalunenko/s...
Download it with additional confidence with our downloader asfald: www.asfaload.com/asfald/
#software #shipping #optimization
Download it with additional confidence with our downloader asfald: www.asfaload.com/asfald/
#software #shipping #optimization
GitHub - obalunenko/shipping-pack-optimizer: Golang API & UI for optimizing product pack shipments
Golang API & UI for optimizing product pack shipments - obalunenko/shipping-pack-optimizer
github.com
February 21, 2025 at 4:16 PM
Looking at our checksums mirror allows me to discover some niche software, this week it is a shipping pack optimiser: github.com/obalunenko/s...
Download it with additional confidence with our downloader asfald: www.asfaload.com/asfald/
#software #shipping #optimization
Download it with additional confidence with our downloader asfald: www.asfaload.com/asfald/
#software #shipping #optimization
My 15 minutes lightning talk at @fosdem.bsky.social about Asfaload is now online at fosdem.org/2025/schedul...
#fosdem #lightning #video
#fosdem #lightning #video
FOSDEM 2025 - Increasing security of internet downloads with Asfaload
fosdem.org
February 14, 2025 at 9:26 AM
My 15 minutes lightning talk at @fosdem.bsky.social about Asfaload is now online at fosdem.org/2025/schedul...
#fosdem #lightning #video
#fosdem #lightning #video
@tur.so 's modern evolution of sqlite github.com/tursodatabas... can be downloaded with added security with @asfaload.bsky.social's tool www.asfaload.com/asfald. Give it a try, it gets and validates checksums from an independent source in addition to the github release.
GitHub - tursodatabase/limbo: Limbo is a project to build the modern evolution of SQLite.
Limbo is a project to build the modern evolution of SQLite. - tursodatabase/limbo
github.com
February 14, 2025 at 9:18 AM
@tur.so 's modern evolution of sqlite github.com/tursodatabas... can be downloaded with added security with @asfaload.bsky.social's tool www.asfaload.com/asfald. Give it a try, it gets and validates checksums from an independent source in addition to the github release.
Just added the release-revocation process in our spec at github.com/asfaload/spe...
Next process to add: how do we handle a key compromise. Follow this issue if you're interestd: github.com/asfaload/spe...
As always, interested in questions, comments, remarks. Let me know here or on github.
Next process to add: how do we handle a key compromise. Follow this issue if you're interestd: github.com/asfaload/spe...
As always, interested in questions, comments, remarks. Let me know here or on github.
github.com
February 10, 2025 at 11:02 AM
Just added the release-revocation process in our spec at github.com/asfaload/spe...
Next process to add: how do we handle a key compromise. Follow this issue if you're interestd: github.com/asfaload/spe...
As always, interested in questions, comments, remarks. Let me know here or on github.
Next process to add: how do we handle a key compromise. Follow this issue if you're interestd: github.com/asfaload/spe...
As always, interested in questions, comments, remarks. Let me know here or on github.
Adding some test to our backend. Using FsHttp is a pleasure, as is using it in tests combined with Suave. And as FsHttp's Apache 2 license is compatible with our choice of AGPLv3, I copied some test helpers making it even easier. I hope you're fine with it @schlenkr.bsky.social #fsharp
GitHub - asfaload/collector: checksums collector
checksums collector. Contribute to asfaload/collector development by creating an account on GitHub.
github.com
February 10, 2025 at 10:32 AM
Adding some test to our backend. Using FsHttp is a pleasure, as is using it in tests combined with Suave. And as FsHttp's Apache 2 license is compatible with our choice of AGPLv3, I copied some test helpers making it even easier. I hope you're fine with it @schlenkr.bsky.social #fsharp
Here is friday's discovery of a project which can be downloaded more safely with our downloader asfald: github.com/Escape-Techn... lets you determine the cloud / hosting provider of a given host.
See how to use asfalod at www.asfaload.com/asfald/
#friday #project #discovery #security
See how to use asfalod at www.asfaload.com/asfald/
#friday #project #discovery #security
GitHub - Escape-Technologies/cloudfinder: Detect the cloud / hosting provider of a given host. Fast, static & offline
Detect the cloud / hosting provider of a given host. Fast, static & offline - Escape-Technologies/cloudfinder
github.com
February 7, 2025 at 9:02 AM
Here is friday's discovery of a project which can be downloaded more safely with our downloader asfald: github.com/Escape-Techn... lets you determine the cloud / hosting provider of a given host.
See how to use asfalod at www.asfaload.com/asfald/
#friday #project #discovery #security
See how to use asfalod at www.asfaload.com/asfald/
#friday #project #discovery #security
I'm giving an ignite talk @cfgmgmtcamp.bsky.social tuesday about increasing security of internet downloads with Asfaload.
15s per auto-advancing slides, will be fun! Details and slides at www.asfaload.com/blog/cfgmgmt...
#cfgmgmt #talk #security
15s per auto-advancing slides, will be fun! Details and slides at www.asfaload.com/blog/cfgmgmt...
#cfgmgmt #talk #security
Ignite talk at CfgmgmtCamp 2025 — Asfaload
www.asfaload.com
February 3, 2025 at 6:58 PM
I'm giving an ignite talk @cfgmgmtcamp.bsky.social tuesday about increasing security of internet downloads with Asfaload.
15s per auto-advancing slides, will be fun! Details and slides at www.asfaload.com/blog/cfgmgmt...
#cfgmgmt #talk #security
15s per auto-advancing slides, will be fun! Details and slides at www.asfaload.com/blog/cfgmgmt...
#cfgmgmt #talk #security
I'm giving a #lightning #talk @fosdem.bsky.social today about securing downloads from the internet with @asfaload.bsky.social . Details at fosdem.org/2025/schedul...
FOSDEM 2025 - Increasing security of internet downloads with Asfaload
fosdem.org
February 1, 2025 at 7:58 AM
I'm giving a #lightning #talk @fosdem.bsky.social today about securing downloads from the internet with @asfaload.bsky.social . Details at fosdem.org/2025/schedul...