str4d
@str4d.xyz
Cryptography, privacy, zero knowledge, Rust, Zcash dev, gaming, hardware hackery, art appreciation. He/him.
https://str4d.xyz
https://abyssdomain.expert/@str4d
age18f63qx4gk8x7p4lfuwwglqcan7snvp406q5vmk26g9fmpe9c799qqzzr3w
https://str4d.xyz
https://abyssdomain.expert/@str4d
age18f63qx4gk8x7p4lfuwwglqcan7snvp406q5vmk26g9fmpe9c799qqzzr3w
Pinned
str4d
@str4d.xyz
· Mar 5
I am a professional cryptographic engineer.
I regularly open my Calculator app to check that 32 * 8 still equals 256.
I regularly open my Calculator app to check that 32 * 8 still equals 256.
Reposted by str4d
yes yes we all know about the Edmund Fitzgerald, rest her soul, but did you know about the ship laden with explosives that sank in the mouth of the Thames in 1944 and could explode at any minute and which attempts to disarm keep failing
November 11, 2025 at 3:12 PM
yes yes we all know about the Edmund Fitzgerald, rest her soul, but did you know about the ship laden with explosives that sank in the mouth of the Thames in 1944 and could explode at any minute and which attempts to disarm keep failing
Great blog post that both motivates and describes this pattern. I've been using it regularly for years in Rust workspaces at my job; Cargo makes the patching itself very straightforward with [patch.crates-io] metadata.
New Blog: the "Dependency Cutout" workflow pattern: https://blog.glyph.im/2025/11/dependency-cutout-workflow-pattern.html
Deciphering Glyph ::
The “Dependency Cutout” Workflow Pattern, Part I
Deciphering Glyph, the blog of Glyph Lefkowitz.
blog.glyph.im
November 11, 2025 at 3:57 AM
Great blog post that both motivates and describes this pattern. I've been using it regularly for years in Rust workspaces at my job; Cargo makes the patching itself very straightforward with [patch.crates-io] metadata.
Reposted by str4d
If economies of scale meant you could buy a TASBot plushie (sans cat) for $35 in person at @magfest.org / MAGFest 2026, would you?
November 6, 2025 at 6:08 PM
If economies of scale meant you could buy a TASBot plushie (sans cat) for $35 in person at @magfest.org / MAGFest 2026, would you?
Bumping this because I think more of us could use some whimsy given the current timeline.
Welcome Brazil!
Fun little feature: on web, you can change the logo!
bsky.app?kawaii=true
(change "true" to "false" to go back, but why would you?)
Fun little feature: on web, you can change the logo!
bsky.app?kawaii=true
(change "true" to "false" to go back, but why would you?)
October 29, 2025 at 1:59 AM
Bumping this because I think more of us could use some whimsy given the current timeline.
Privacy is Hard, exhibit ERR_INTEGER_OVERFLOW
Two important general lessons:
- Humans are good at generating patterns.
- Algorithms are very good at analysing graphs.
The social graph of Bluesky (and underlying it, the graph of connections between ATProto records of any kind) is public, by design.
Two important general lessons:
- Humans are good at generating patterns.
- Algorithms are very good at analysing graphs.
The social graph of Bluesky (and underlying it, the graph of connections between ATProto records of any kind) is public, by design.
my *one* complaint about the For You feed is the readiness with which it surfaces people's alt accounts that i don't think i should have known about because i'm not close enough to the people in question
October 29, 2025 at 1:46 AM
Privacy is Hard, exhibit ERR_INTEGER_OVERFLOW
Two important general lessons:
- Humans are good at generating patterns.
- Algorithms are very good at analysing graphs.
The social graph of Bluesky (and underlying it, the graph of connections between ATProto records of any kind) is public, by design.
Two important general lessons:
- Humans are good at generating patterns.
- Algorithms are very good at analysing graphs.
The social graph of Bluesky (and underlying it, the graph of connections between ATProto records of any kind) is public, by design.
> In honor of spooky month, share a 4 word horror story that only someone in your profession would understand
Circuit missing a gate.
Circuit missing a gate.
Rolled my own crypto.
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand
I'll go first: Six page commercial lease.
I'll go first: Six page commercial lease.
October 13, 2025 at 3:57 AM
> In honor of spooky month, share a 4 word horror story that only someone in your profession would understand
Circuit missing a gate.
Circuit missing a gate.
I love spending an entire day discussing cryptography with friends 🔐💞
Lots of ideas to ponder now, and some cryptographic hardware dev boards to source...
Lots of ideas to ponder now, and some cryptographic hardware dev boards to source...
October 4, 2025 at 12:12 PM
I love spending an entire day discussing cryptography with friends 🔐💞
Lots of ideas to ponder now, and some cryptographic hardware dev boards to source...
Lots of ideas to ponder now, and some cryptographic hardware dev boards to source...
Once again reminded of how much I loathe macOS, and the Terminal app within macOS specifically, and the zsh migration within the Terminal app within macOS specifically.
How does anyone operate with a PATH that is so hostile to configuration?
How does anyone operate with a PATH that is so hostile to configuration?
October 1, 2025 at 12:43 PM
Once again reminded of how much I loathe macOS, and the Terminal app within macOS specifically, and the zsh migration within the Terminal app within macOS specifically.
How does anyone operate with a PATH that is so hostile to configuration?
How does anyone operate with a PATH that is so hostile to configuration?
Updated my ATProto network map with new relays (hi @upcloud.com!) and more AppViews (hi Blacksky!).
My server is also seeing sufficiently high operation rates for @rocksky.app and @teal.fm that their AppViews currently show up noticeably at logarithmic scaling 📈
My server is also seeing sufficiently high operation rates for @rocksky.app and @teal.fm that their AppViews currently show up noticeably at logarithmic scaling 📈
September 26, 2025 at 9:14 PM
Updated my ATProto network map with new relays (hi @upcloud.com!) and more AppViews (hi Blacksky!).
My server is also seeing sufficiently high operation rates for @rocksky.app and @teal.fm that their AppViews currently show up noticeably at logarithmic scaling 📈
My server is also seeing sufficiently high operation rates for @rocksky.app and @teal.fm that their AppViews currently show up noticeably at logarithmic scaling 📈
Tired: using @tailscale.com to connect your devices in different countries so you have seamless access no matter the NAT.
Wired: using @tailscale.com to connect your devices in different rooms because you can't figure out why your wireless access point is blocking intra-LAN traffic.
Wired: using @tailscale.com to connect your devices in different rooms because you can't figure out why your wireless access point is blocking intra-LAN traffic.
September 26, 2025 at 1:41 AM
Tired: using @tailscale.com to connect your devices in different countries so you have seamless access no matter the NAT.
Wired: using @tailscale.com to connect your devices in different rooms because you can't figure out why your wireless access point is blocking intra-LAN traffic.
Wired: using @tailscale.com to connect your devices in different rooms because you can't figure out why your wireless access point is blocking intra-LAN traffic.
Reposted by str4d
UNDERTALE 10th anniversary stream counting down now!!! Just about 45 minutes left!!
undertale.com/10/
undertale.com/10/
UNDERTALE 10th Anniversary Stream Event
UNDERTALE! The RPG game where you don't have to destroy anyone.
undertale.com
September 20, 2025 at 10:13 PM
UNDERTALE 10th anniversary stream counting down now!!! Just about 45 minutes left!!
undertale.com/10/
undertale.com/10/
There are two wolves inside me, and they won't stop singing:
🎤🐺 Heels, nails, blade, mascara
🔥🐺 Fit check for my napalm era
🐺🎶 Set the fuel pump, start the number two
🐺✈️ Iiiiiiii stoooooole an F16
🎤🐺 Heels, nails, blade, mascara
🔥🐺 Fit check for my napalm era
🐺🎶 Set the fuel pump, start the number two
🐺✈️ Iiiiiiii stoooooole an F16
September 20, 2025 at 9:34 PM
There are two wolves inside me, and they won't stop singing:
🎤🐺 Heels, nails, blade, mascara
🔥🐺 Fit check for my napalm era
🐺🎶 Set the fuel pump, start the number two
🐺✈️ Iiiiiiii stoooooole an F16
🎤🐺 Heels, nails, blade, mascara
🔥🐺 Fit check for my napalm era
🐺🎶 Set the fuel pump, start the number two
🐺✈️ Iiiiiiii stoooooole an F16
Finally ordered a Raspberry Pi to power the KrakenSDR I got 2 months ago.
Taking bets on whether I get it set up before December.
Taking bets on whether I get it set up before December.
September 20, 2025 at 1:57 AM
Finally ordered a Raspberry Pi to power the KrakenSDR I got 2 months ago.
Taking bets on whether I get it set up before December.
Taking bets on whether I get it set up before December.
Reposted by str4d
Rust 1.90.0 has been released! ✨🦀
This release makes LLD the default linker on x86-64 linux-gnu and adds `cargo publish --workspace` to publish an entire workspace all at once!
Check out the blog post and release notes for more: blog.rust-lang.org/2025/09/18/R...
This release makes LLD the default linker on x86-64 linux-gnu and adds `cargo publish --workspace` to publish an entire workspace all at once!
Check out the blog post and release notes for more: blog.rust-lang.org/2025/09/18/R...
Announcing Rust 1.90.0 | Rust Blog
Empowering everyone to build reliable and efficient software.
blog.rust-lang.org
September 18, 2025 at 7:20 PM
Rust 1.90.0 has been released! ✨🦀
This release makes LLD the default linker on x86-64 linux-gnu and adds `cargo publish --workspace` to publish an entire workspace all at once!
Check out the blog post and release notes for more: blog.rust-lang.org/2025/09/18/R...
This release makes LLD the default linker on x86-64 linux-gnu and adds `cargo publish --workspace` to publish an entire workspace all at once!
Check out the blog post and release notes for more: blog.rust-lang.org/2025/09/18/R...
Reposted by str4d
People who criticize transgender people say there are only two genders.
But the soul has so much more individuality🏳️⚧️🏳️🌈
No matter how much my activities are restricted, super Chiitan will continue to speak out until we live in a world where everyone can freely express their love and love each other♡
But the soul has so much more individuality🏳️⚧️🏳️🌈
No matter how much my activities are restricted, super Chiitan will continue to speak out until we live in a world where everyone can freely express their love and love each other♡
September 18, 2025 at 12:23 PM
People who criticize transgender people say there are only two genders.
But the soul has so much more individuality🏳️⚧️🏳️🌈
No matter how much my activities are restricted, super Chiitan will continue to speak out until we live in a world where everyone can freely express their love and love each other♡
But the soul has so much more individuality🏳️⚧️🏳️🌈
No matter how much my activities are restricted, super Chiitan will continue to speak out until we live in a world where everyone can freely express their love and love each other♡
And the effect is immediately visible on atp.fyi/network 🎄
September 17, 2025 at 3:11 PM
And the effect is immediately visible on atp.fyi/network 🎄
Reposted by str4d
I've been struggling through the process to FOIA my own data from CBP. They keep asking for identity verification, but don't respond to queries about the ID submission process (which is where I'm stuck). Has anyone been through this and can help?
September 16, 2025 at 10:24 AM
I've been struggling through the process to FOIA my own data from CBP. They keep asking for identity verification, but don't respond to queries about the ID submission process (which is where I'm stuck). Has anyone been through this and can help?
Reposted by str4d
Do. Not. RSVP. To. A. Protest. It. Is. Not. Brunch.
September 17, 2025 at 2:42 AM
Do. Not. RSVP. To. A. Protest. It. Is. Not. Brunch.
Reposted by str4d
Today is the 30th anniversary of Hackers
September 15, 2025 at 11:56 PM
Today is the 30th anniversary of Hackers
The eternally-great thing about open source: if something doesn't exist, and the devs don't have time to work on it themselves, you can just implement it for them!
If they decide not to take it as-is, you've still helped explore the design space.
And if they don't accept it, but you need it, fork!
If they decide not to take it as-is, you've still helped explore the design space.
And if they don't accept it, but you need it, fork!
Figured out enough of the rsky-relay internals to implement this myself (reporting the data that it currently records):
rsky-relay: Add `com.atproto.sync.listHosts` handler by str4d · Pull Request #137 · blacksky-algorithms/rsky
Summary
This implements the com.atproto.sync.listHosts endpoint.
Related Issues
https://bsky.app/profile/rude1.blacksky.team/post/3loazssauks23
Changes
Feature implementation
Bug fix
Documentat...
github.com
September 14, 2025 at 10:44 PM
The eternally-great thing about open source: if something doesn't exist, and the devs don't have time to work on it themselves, you can just implement it for them!
If they decide not to take it as-is, you've still helped explore the design space.
And if they don't accept it, but you need it, fork!
If they decide not to take it as-is, you've still helped explore the design space.
And if they don't accept it, but you need it, fork!
Apparently the threshold for the auto-moderator to tag an entire account as spam is currently 15 image posts within 2 minutes.
Which cryptography conference submission deadline just passed? 😅
Which cryptography conference submission deadline just passed? 😅
September 12, 2025 at 2:26 PM
Apparently the threshold for the auto-moderator to tag an entire account as spam is currently 15 image posts within 2 minutes.
Which cryptography conference submission deadline just passed? 😅
Which cryptography conference submission deadline just passed? 😅
Reposted by str4d
DOING A LIL LIVE STREAM ~NOW
APPLE MIE, WHATSAPP, POST-COMPROMISE SECURITY
www.twitch.tv/durumcrustulum
www.youtube.com/watch?v=J4qm...
APPLE MIE, WHATSAPP, POST-COMPROMISE SECURITY
www.twitch.tv/durumcrustulum
www.youtube.com/watch?v=J4qm...
🔴 READING CRYPTO PAPERS 🔴 APPLE MIE, WHATSAPP, POST-COMPROMISE SECURITY
YouTube video by Deirdre Connolly
www.youtube.com
September 11, 2025 at 2:41 AM
DOING A LIL LIVE STREAM ~NOW
APPLE MIE, WHATSAPP, POST-COMPROMISE SECURITY
www.twitch.tv/durumcrustulum
www.youtube.com/watch?v=J4qm...
APPLE MIE, WHATSAPP, POST-COMPROMISE SECURITY
www.twitch.tv/durumcrustulum
www.youtube.com/watch?v=J4qm...
Reposted by str4d
I am curious to see what memory bugs remain practical on iOS with MIE and typed allocators. The fact that memory tags are enforced even in kernel access to userspace memory is going to make use-after-free and buffer overflows extremely hard. security.apple.com/blog/memory-...
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our adv...
security.apple.com
September 10, 2025 at 12:09 PM
I am curious to see what memory bugs remain practical on iOS with MIE and typed allocators. The fact that memory tags are enforced even in kernel access to userspace memory is going to make use-after-free and buffer overflows extremely hard. security.apple.com/blog/memory-...
I have an RPi-powered E Ink screen on my desk, that displays the next few tasks from my todo list (as otherwise I forget my todo app exists).
I switched to Lunatask, which encrypts content (yay!) but only has an official API for the unencrypted metadata.
Tonight's hackery: emulating its clients...
I switched to Lunatask, which encrypts content (yay!) but only has an official API for the unencrypted metadata.
Tonight's hackery: emulating its clients...
September 7, 2025 at 2:50 AM
I have an RPi-powered E Ink screen on my desk, that displays the next few tasks from my todo list (as otherwise I forget my todo app exists).
I switched to Lunatask, which encrypts content (yay!) but only has an official API for the unencrypted metadata.
Tonight's hackery: emulating its clients...
I switched to Lunatask, which encrypts content (yay!) but only has an official API for the unencrypted metadata.
Tonight's hackery: emulating its clients...
