F/OSS Hacker. Arch Linux Developer, Security Team, Reproducible Builds. General Linux stuff and supply chain issues.
Public Key
npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f
Profile Code
nprofile1qqs8x9majjxy30j2rec3rmlufzdelj8uysczpt0hmrmzqgqdpkgs96spz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsd0mu54
Author Public Key
npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Show more details
Published at
2023-04-09T20:22:13+02:00 Event JSON
{
"id": "b867bc82960c8903fbc67e8e8357da20d78afb710c7fd1c56b3c6a95b5156c96" ,
"pubkey": "73177d948c48be4a1e7111effc489b9fc8fc243020adf7d8f620200d0d9102ea" ,
"created_at": 1681064533 ,
"kind": 0 ,
"tags": [
[
"mostr",
"https://chaos.social/users/Foxboron"
]
],
"content": "{\"name\":\"Morten Linderud\",\"about\":\"F/OSS Hacker. Arch Linux Developer, Security Team, Reproducible Builds. General Linux stuff and supply chain issues.\\n\\nWrites in English and Norwegian from time to time\",\"picture\":\"https://assets.chaos.social/accounts/avatars/000/202/039/original/de315f481fe04db1.jpg\",\"banner\":\"https://assets.chaos.social/accounts/headers/000/202/039/original/4d5fc5ad8b680b5b.jpeg\",\"nip05\":\"[email protected] \"}" ,
"sig": "27a1ab47e1d34d785226a00a87133c9b21850ed1d34656744641881e34832f20726d0bb5b8da29c85e9dccc525b34ef823555dd1ad29d09004fdab5686f8ca60"
}
Last Notes npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1qk7…lptq npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1lks…a4mq npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1pt8…eexx npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Reading the Open-Source Summit and the SOSS Community Days schedules and being irrationally annoyed..angry(?) at the space mainly being occupied by companies talking about risk management for FOSS consumption. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Lazyvim feels like someone looked at vim and said "We can do a NixOS here". npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1dgr…ssty npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1tpx…33ew npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub16r0…z5pl npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Lol, it works. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Lol, three bugfix releases in a day. I need a beer. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Pushing landlock in the same release I refactored *everything* was a mistake. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub17yy…3gvz npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Okay, what is the modern way to request a password or secret from the user in this day and age? npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I was like "getting TPM support into sops is easy". npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1hyp…aehm npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1hyp…aehm npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub19cv…qnc3 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Writing man pages is one of the least great parts of working out new features. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1lks…a4mq npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Half of the code on sbctl makes me feel bad and I get a strong desire to rewrite most of it. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Status update: npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Registered myself for my first 5K during Berlin Marathon, excited and we'll see if I regret it. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I've written `ssh-tpm-ca-authority` which issues short-lived SSH certificates bound to the clients that asked for them. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1u9d…s50s npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1u9d…s50s npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud New release of `ssh-tpm-agent`. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Reading up on AK/EK attestation and realizing I should probably just finish up the ssh-tpm-agent release 🙃 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1336…n6rn npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Apparently this is the(?) pedal Kurt Cobain used on Nevermind. Expensive thing. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud The hackerspace has a lot of trash, but I did find a 25 year old working Big Muff guitar pedal. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Managed to grok TPM2_Import after a week. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I disabled legacy boot and now there is no video. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1ql8…qshz npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Today is NAS maintenance day. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub10pk…lv8z npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Days since `sbctl` soft-bricked a machine because of terrible OEM firmware: 0 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1tny…z6px npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud > 12 files changed, 157 insertions(+), 1176 deletions(-) npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub19re…r8k9 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1gpn…uhp5 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud It's always interesting to me how security people do end up having a level headed approach to things like "physical threat scenarios" while your avg Joe keeps on inventing Hollywood level heist scenarios to try and subvert this. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Apparently 🟧-site is not very happy over the suggestion that glitter nail polish defeats their entire imaginary "let's sniff the keyboard signals to figure out the password" threat scenario. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Been promised thunderstorms two times this week and all I've gotten has been two puny rumbles. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1arj…7y8j npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud How do you parse json in bash? npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I was complaining about hotel prices in Vienna for Plumbers and stuff. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Selling one sun for some clouds. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1stn…3829 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Oh god no. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Johnny Mnemonic in Black and White? npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Someone pointed out that rpm strips packages faster than pacman so a little bit of xargs hacking later and I've shaved off 1.5/2 seconds of the pacman package building. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub18g6…jwmp npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub18g6…jwmp npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Organizing a "rave" and figured we had 3 chromecasts on 3 screens so we need some *visual*. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub17xj…0938 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub17xj…0938 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I realized I have been doing substantial Open-Source contributions for a *decade* now. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Found the issue. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I have a local copy of openssh so I can debug a weird `ssh-keygen -Y sign` error I'm getting for my TPM RSA keys (ecdsa keys... just work?) ooorrrrr npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1z7y…zyfs npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub10sm…hjqm npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud > This is zqpvr. Thank you for adding the conflicts to this package. I live in New Brighton, PA. I am actually a criminal of the felon level here in the US. Your assistance is much obliged. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I'm mostly just getting surprised about packages I apparently maintain. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud The wheels on the rebuild goes build build build. Build Build Build. BUILD BUILD BUILD. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1p5f…u6aj npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub19f9…jcyn npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub10sm…hjqm npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud NixOS linking to reproducible builds in their wiki 🤌 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1zla…a22s npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud It's weird going from the weekend discourse of xz backdoors to work and dependabot MRs. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud If people think the actor behind Jia an/or the #xzbackdoor needs to be *sued* you need to deeply consider the implications it will have for the FOSS community. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub19xr…gkcq npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1gaa…uv3v npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1gaa…uv3v npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud #Pendulum in Glasgow was pretty good. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I lost a lot of faith in #OpenSSF during the vote for supporting openwall. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1xla…nh8l npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1l20…0c0w npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud https://assets.chaos.social/media_attachments/files/112/186/468/492/554/042/original/1773fdc7a3db26c6.jpg npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud I mean. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Weekend trip to Glasgow summarized npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub19aw…wevf npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub128z…dec0 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Guy that did this was also recently added as an upstream kernel maintainer.[email protected] / npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Accidental Easter plans: npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub17xj…0938 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub14d3…7npp npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud The swedish are getting their third packager, and I can't let them win. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub10zm…zrpx @npub1shg…y3ry npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub10zm…zrpx @npub1shg…y3ry npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud Largely how I feel about the entire push towards FIDO and hardware tokens. npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud 🥲 @npub1s4l…aap3 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud #cccamp23 #cccamp2023 npub1wvthm9yvfzly58n3z8hlcjymnly0cfpsyzkl0k8kyqsq6rv3qt4qx9y89f Morten Linderud @npub1rzy…zpg7 where is the document published?
