Evan Boehs / is on Nostr

1) Is a programmer, hacker, and maker, busy crafting intricate, exciting, and people focused experiences.
2) Is interested in breaking barriers, building communities, and learning new things about the world.
3) Is happiest doing what makes him feel free. Biking, skiing, travelling to name a few

Website: https://boehs.org
Donate: https://liberapay.com/e
Pronouns: He/Him

Last Notes

2024-06-10 22:31:50

- reply

Yeah, I wrote something very similar on my blog:
"They brag about how their AI can rewrite emails, to be more “personal”. You know what makes things more personal? The evidence of thought. Generative AI is completely contrary to this. The usage of it means that the person on the other end of the wire does not value you enough to commit time."

2024-05-22 06:05:44

BUT I WAS UP ALL NIGHT
https://social-coop-media.ams3.cdn.digitaloceanspaces.com/media_attachments/files/112/482/759/891/017/899/original/6a7311244ca585a3.png

2024-05-02 21:14:55

- reply

I’ve received private disclosure of a potential vulnerability that I have independently verified as still active. I would disclose it as we are a whole year past the responsible disclosure period, but it’s the state of Georgia and incompetent governments don’t take too kindly to this: https://www.theverge.com/2021/10/14/22726866/missouri-governor-department-elementary-secondary-education-ssn-vulnerability-disclosure

2024-05-02 21:11:30

- reply

related: my recent https://boehs.org/node/medicicnes

2024-05-02 20:53:19

- reply

The US is in a position of power where I don't think a country would consider hijacking domains it uses. Not to defend this, but

2024-05-01 04:11:13

- reply

not really. I do have a pico sitting around that I'm not making any use of, but I'd be happy to take a nice bike ride out to microcenter to get another something. The plan, I think, was to install QMK? Or Vial?

2024-05-01 04:03:04

- reply

this is the layout I was thinking of:
very similar to the satisfaction 75, but with macro keys. In retrospect the NFC part was an absolutely insane idea so ignore that one!!
That layout you shared is fascinating
https://social-coop-media.ams3.cdn.digitaloceanspaces.com/media_attachments/files/112/363/358/381/447/665/original/7a5def4531e26199.png

2024-05-01 03:53:39

- reply

yeah, I try to thank as well. BTW, no promises here and I think this is outside of your purview, but here it goes:
I’ve been wanting to diy a keyboard for a while now. The one thing I suck at is actual physical electronics design. KiCad absolutely terrifies me. I want to do everything else myself, but could I commission a schematic? (Or, if not, do you know somebody that I could commission it from?)

2024-05-01 03:49:37

- reply

LOL! I don’t think so. In an ideal world your level of support should be proportional to the value you provide to people. That being said, I’ve always felt uncomfortable plugging my Ko-fi on the fedi. I don’t know why.

2024-05-01 03:45:28

- reply

serious question: does plugging this work? Asking as a fellow content creator (I hate that word)

2024-04-18 20:12:47

What’s wrong babe? You’ve hardly created any shareholder value today

2024-04-13 23:10:21

TRUTH SOCIAL SENT ME THEIR SOURCE CODE: https://boehs.org/node/truth-social
Fedi takes another huge win. I wonder what we'll find.
#trump #socialmedia

2024-04-11 01:21:49

With local software, there is no DDoS
With local software, there is no need to scale your cloud
With local software, there is no XSS
With local software, there is no SQL injection
With local software, there is no SSRF, CORS, and CSRF
With local software, there is no broken authentication
With local software, there is no V8 sandbox escapes

2024-03-29 21:36:12

- reply

Holy shit.
https://social-coop-media.ams3.cdn.digitaloceanspaces.com/media_attachments/files/112/180/890/786/226/686/original/e8f89d36c20ecf7f.png

2024-03-29 20:06:38

- reply

https://boehs.org/node/everything-i-know-about-the-xz-backdoor
I have begun a post explaining this situation in a more detailed writeup. This is updating in realtime, and there is a lot still missing.
#security #xz #linux

2024-03-29 19:43:41

Unfolding now: https://news.ycombinator.com/item?id=39865810
- https://www.openwall.com/lists/oss-security/2024/03/29/4
- https://github.com/tukaani-project/xz/commit/cf44e4b7f5dfdbf8c78aef377c10f71e274f63c0
An incredibly technically complex #backdoor in xz (potentially also in libarchive and elsewhere) was just discovered. This backdoor has been quietly implemented over years, with the assistance of a wide array of subtly interconnected accounts:
- https://github.com/tukaani-project/xz/commit/ee44863ae88e377a5df10db007ba9bfadde3d314
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708
- https://github.com/jamespfennell/xz/pull/2
The timeline on this is going to take so long to unravel
#security #linux