Soatok Dreamseeker

He/him. Gay/demi dhole (Cuon Alpinus)

Blogger, programmer, security engineer, cryptography nerd. 30+

Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)

https://soatok.blog

Public Key

npub17uyfsxsnfgg6dgqazlfjv2gdl235mq0dug9wq6kjq9ngzh6pdyese4305p

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs0wzycrgf55ydx5qw305ex9yxl4g6ds8k7yzhqdtfqze5ptaqkjvcpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qa8kmjf

Publishing to

relay.mostr.pub

Author Public Key

npub17uyfsxsnfgg6dgqazlfjv2gdl235mq0dug9wq6kjq9ngzh6pdyese4305p

Show more details

Last Notes

2024-08-14 14:01:26

Security Issues in Matrix’s Olm Library
I don't consider myself exceptional in any regard, but I stumbled upon a few cryptography vulnerabilities in Matrix's Olm library with so little effort that it was nearly accidental. It should not be this easy to find these kind of issues in any product people purportedly rely on for private messaging, which many people evangelize incorrectly as a Signal alternative…
http://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/

2024-07-01 15:56:05

Companies on July 1st be like #meme #pridemonth
https://furry.engineer/system/media_attachments/files/112/711/571/268/333/713/original/b43b2ae460ab19ee.mp4

2024-06-11 15:52:30

HN users: "how DARE you put furry art on this technical blog post?! how am I supposed to use it to advance my own career? my boss will be livid if he sees me looking at PORN on the clock"
Their boss on LinkedIn: "so anyway I was reading Soatok's blog and have some thoughts about the latest post"

2024-06-09 06:51:43

I popped by Furality Umbra for a bit.
They were stress testing a 250-person instance. It performed remarkably well.
If you're an introvert, beware that just like a crowded room in meatspace, it will probably drain your social battery very quickly.

2024-06-06 07:38:03

Towards Federated Key Transparency
In late 2022, I blogged about the work needed to develop a specification for end-to-end encryption for the fediverse. I sketched out some of the key management components on GitHub, and then the public work abruptly stalled. A few of you have wondered what's the deal with that. This post covers why this effort stalled, what I'm proposing we do next.
http://soatok.blog/2024/06/06/towards-federated-key-transparency/

2024-05-31 17:41:06

I don't understand the phrase "coyote ugly"
Like, I would hug my yote friends they're cute af

2024-05-16 05:48:29

One of the Matrix developers saw fit to comment on my gist https://gist.github.com/soatok/8aef6f67fec9c702f510ee24d19ef92b?permalink_comment_id=5058644#gistcomment-5058644
In response, I actually looked at their code, identified two security vulnerabilities, and disclosed them to their security@ email.
This reaffirms the opinion I held previously.

2024-05-15 03:50:07

Please stop recommending Matrix in my mentions
I do not think the Matrix developers are competent enough to design a secure protocol
https://nebuchadnezzar-megolm.github.io/

2024-05-14 18:26:53

It’s Time for Furries to Stop Using Telegram
I have been a begrudging user of Telegram for years simply because that's what all the other furries use. When I signed up, I held my nose and expressed my discontent at Telegram by selecting a username that's a dig at MTProto's inherent insecurity against chosen ciphertext attacks: IND_CCA3_Insecure. Art: CMYKat I wrote about Furries and Telegram before, and included some basic privacy recommendations.
http://soatok.blog/2024/05/14/its-time-for-furries-to-stop-using-telegram/

2024-03-09 01:54:18

Does anyone else get drowsy after eating Culver's?
Like "I just took too many Benadryl" drowsy.

2024-02-28 16:51:36

Sometimes Lobsters' moderators make very bad decisions.
No shit you're not customer support for Automattic. The topic of "not understanding consent" is almost universal to the tech industry AND THAT'S A PROBLEM!
https://furry.engineer/system/media_attachments/files/112/009/896/228/550/084/original/42b14453c244fdaf.png

2024-02-07 05:43:18

It's still bewildering to me how puritans be like, "Sex is an addiction that corrupts the soul"
Meanwhile I can ask the kinkiest, horniest fuckers I know for platonic cuddles and they're okay with that

2024-01-16 10:16:31

Wherein I disclose an exploit in an indie game after the dev ignored me for over 6 months
https://gist.github.com/soatok/3cbf09501d1fd9e67e552c7165b0e81a

2024-01-11 21:20:29

The first time I heard a developer complain about "callback hell" I thought they worked in the customer support dept

2023-12-15 16:51:01

If you're ever uncertain how bad people are at media literacy, ponder for a moment the number of people that accused Rage Against the Machine of going "woke" in recent years.
The "what, did you think The Machine was a printer?" phenomenon is very real.

2023-11-19 21:17:21

Why do boolean search operations not work with Google anymore?
Looking for a specific size monitor. All search results are curved. Add -curved to the query, no change to results. Ugh.

2023-11-17 19:21:28

This Would Be More Professionally Useful If Not For the Furry Art
The people afraid to show their peers or bosses my technical writing because it also contains furry art are some of the dumbest cowards in technology. Considering the recent events at ApeFest, a competitive level of stupidity is quite impressive. To be clear, the exhibited stupidity in question is their tendency to project their own sexual connotations onto furry art…
http://soatok.blog/2023/11/17/this-would-be-more-professionally-useful-if-not-for-the-furry-art/

2023-11-12 01:16:36

Why do some terrible furries embrace nationalism?
Because 'Murr-ika

2023-11-09 22:59:36

This is worth reading. https://blog.silvereagle.dev/a-quick-refresher-on-the-fediverse-meta-blocklists-and-everything-up-to-now
TL;DR - The post explains fediverse drama in which people have been corrupted by their own power and influence on the fediverse. At one point another instance moderator claims that furry.engineer is an alt-right front. *rolling eyes massively at that notion*

2023-10-20 19:12:30

Consider my petition, lagomorph!
https://cdn.pawb.social/mastodon-fe/media_attachments/files/111/268/456/173/785/910/original/fcee0eaadda6cf7d.png

2023-10-02 09:31:55

Return to Office Is Bullshit And Everyone Knows It
I quit my job towards the end of last month. When I started this blog, I told myself, "Don't talk about work." Since my employment is in the rear view mirror, I'm going to bend that rule for once. And most likely, only this one time. Why? Since I wrote a whole series about how to get into tech for as close to $0 as possible without prior experience…
http://soatok.blog/2023/10/02/return-to-office-is-bullshit-and-everyone-knows-it/

2023-09-30 20:03:58

Damn you got New Relationship Energy in your polycule?
Well I got New Side-Project Energy in my open source hobby

2023-09-11 19:51:35

"I can't normalize my database yet, someone has to fetishize it first"

2023-08-27 12:56:53

Is someone posting lies about me somewhere?
I woke up to discover that several friends-of-friends have me blocked, but cannot locate anyone accusing me of being bad (full-text search is nonexistent lol), so I've no idea what I did to upset anyone. I've never interacted with these folks (that I can remember anyway).
Edit to add:
I would like to request that, if something I said or did was problematic, please let me know before pressing the block button so I can at least be aware of the grievance. As it stands, my choices are either:
a. Who fucking knows? YOLO
b. Wonder about it incessantly and unproductively
And I'm faaaar too inclined to choose (b) naturally, so I'm going to opt for (a) deliberately to avoid misery.

2023-07-09 04:48:46

- reply

@npub1836…8jp6 JWK is a dumpster fire, which is on brand for the JOSE family of standards

2023-06-27 17:21:25

RedHat:
"This is a real threat to open source, and one that has the potential to revert open source back into a hobbyist- and hackers-only activity." https://www.redhat.com/en/blog/red-hats-commitment-open-source-response-gitcentosorg-changes
Okay, so there's a lot of unstated assumptions to unpack here.

2023-04-03 17:59:34

Asymmetric Commitments
https://soatok.blog/2023/04/03/asymmetric-cryptographic-commitments/
#[0] #[1] #[2] #[3] #[4] #[5]