Pinned post

This is Shawn Webb from The HardenedBSD Project. I use the bsd.network Mastodon
instance. This message is cryptographically signed with GPG by me.

My GPG public key can be found here: git.hardenedbsd.org/hardenedbs
-----BEGIN PGP MESSAGE-----
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=E4qi
-----END PGP MESSAGE-----

Shawn Webb boosted
Shawn Webb boosted

We are pleased to announce the BSDCan 2027 dates and location:

Tutorials: July 7-8, 2027 (Wed & Thurs)
Conference: July 9-10, 2027 (Fri & Sat)

Location: Vancouver, Canada

bsdcan.org/2027/

Shawn Webb boosted

The August / September 2026 Status Report is out!

This status report also discusses the recent security advisory and its impact on HardenedBSD.

hardenedbsd.org/article/shawn-

Breaking news: Securely parsing strings in an EFI module is rather difficult to do securely, given the lack of buffer sizes being passed around.

Take a look at the HII configuration-related functions (looking at you, ExtractConfig). Only a string is passed in, not the length of the string. Ugh.

Shawn Webb boosted

ALRIGHT! I'm VERY excited to announce this research, because we've been holding onto it for close to a year now!

Announcing File Notification Attacks! Side-Channel Leakage from the File-Notification System on #Linux, #Android, #Windows, and #macOS

We've found decades-old bugs on Linux, Android, and Windows... well technically Microsoft considers what we found an ✨ undocumented feature ✨ (got Microsoft nominated for the lamest vendor response #pwnie award haha).

There's SO much to talk about, so please expand this thread below, but you can also check it out yourself at:

inoti.fyi/

There's a #noAI logo that my sister drew there. Our work was accepted at #CCS 2026, and I'll be presenting it this November at The Hague, Netherlands! If you're there, we should totally meet up :D

Thanks to my AWESOME co-authors: Xufan Zhao, Jeanette Angelika Wultsch, @hweissi, Florian Draschbacher, @notbobbytables, and @lavados 🙏, all of us from @isec_tugraz, TU Graz

#security #cybersecurity #research #systems

uspol, ai doofunditry, snark 

Does Our Dear Leader prefer the term "super intelligence" because that phrase has fewer syllables? Is the word "artificial" too intelligent for this Man of 'Murican Doofunditry?

Shawn Webb boosted

I don't imagine many folks in the Fediverse crowd will learn much here, but I've got a new video to show your boomer parents

youtube.com/watch?v=0KoeY54M5VA

Today is brought to you by a combination of and : youtube.com/watch?v=a1nrtRLhvu

The imagery and sampled lyrics are quite relevant to today.

Shawn Webb boosted

Unfortunately, we have to inform you about security vulnerabilities in the network protocol that Radicle nodes use to communicate amongst each other.
radicle.dev/2026/09/23/disclos

Life is a joke and death is the punchline

-- Amigo the Devil, Hungover in Jonestown

youtube.com/watch?v=jLWiu0cqMc

Last night on my way to bed. A tired, but happy, family.

re: uspol, braindead president 

how does he claim to be the most peaceful president ever after having murdered a hundred school girls and the school's staff, totaling around 150 murdered in one bombing in Iran?

How about the humans ICE has murdered in the last year? How about the children locked up in cages away from their families in ICE detention facilities?

Show thread

re: uspol, braindead president 

TIL there's a "KuhZackistahn" nation state.

Show thread

uspol, braindead president 

Trump at today's general session:

One year ago when I addressed the great leaders of this hall, the war in Gaz was still raging. The hostages were still deep in Hamas tunnels. There was no end in sight.

You sure about that? Because Hamas' action was on 07 Oct 2025, nearly a full month before this general session.

How does anyone believe the words that come out of this guy's mouth?

I have now configured the and jails auto-snapshotted with every 15 minutes, hour, day, week, month, and year interval.

This means that if I'm goofing around, trying to fiddle with something, and completely mess up, I can always revert to before the chaotic mess.

Now, that rollback capability does come at a cost on the Radicle jail: the Radicle node might have already done stuff, so reverting back might cause a divergence of state as seen in the wider network.

I'm not entirely sure what kind of impact a reversion like that would have.

One of my star mice has succumbed to the "sticky ickies".

Now is when I wish wasn't so mouse-centric.

Eventually, I plan to write in a orchestrator that talks to a Radicle node. Iinitial testing will be with a local test node, but I would hope in the long term to support communicating with a remote Radicle node.

It would take action on whatever the Radicle node reports via its control socket.

Kinda like a CI/CD, but one specific to the needs of the dev infrastructure.

Besides, I love reading code and I need a good excuse to write it better. (I find it much easier to read than to write, mainly because of a stubborn brain and limit hours in a day.)

Show thread

Though, since I tied the "mirror to github" to our autosync, there may be some delay between when an hbsd developer pushes a commit (or multiple commits) to our repo on , and when that commit (or those commits) show up on . The work will get mirrored to Github during the next autosync cycle (every six hours), assuming no further merge conflicts happened. Merge conflicts are resolved by hand. Rinse and repeat every six hours until an autosync successfully merges without conflicts.

Show thread
Show older

Shawn Webb's choices:

BSD Network

bsd.network is a *BSD-adjacent Mastodon Instance. We have a code of conduct.