ChadSec

Results 13 comments of ChadSec

Hi, I am not sure if I am observing correctly, but your commits are.. just formatting some lines.. ? Is this really v0.14 ?

Unpopular opinion: Signing releases is useless, and builds should be built using GitHub actions. If you don't trust Github servers, download source code and compile yourself. Including SHA hashes of...

> Providing a hash in-band provides no security (just integrity from corruption). For security (to verify the authenticity of a given release), we'd need a pinned, coyim-specific release-signing PGP key...

@baentsch @dstebila Hi, I wouldn't mind acting as maintainer of this, although at the moment I am bit busy with a project of mine I am working on. Perhaps in...

> Indeed we don't have that available as an option through the Python binding. And within liboqs itself the code exists but it's gated under a preprocessor macro that we...

> To better help with the investigations, here is a timeline. > * The infection did **not appear immediately after compiling or running WinBoat or FreeRDP**, so the exact entry...

> I had instances of forgetting to manually set the docker ports to 127.0.0.1:8000:8000 (for example) and getting account creation requests on the application, as there are constantly bots trying...

> The PPA was - https://launchpad.net/~3ddruck/+archive/ubuntu/freerdp3full/+packages > > But we(the launchpad team) have disabled it unless proven otherwise to be safe. Anyway I can still get my hand on it...

> This is fine for now, I've not done anything with Lua except the base reflection code. When I come back around to doing the Lua plugin stuff though, it...

Use Github actions to build + distribute the libraries + binaries for multiple different systems. I use it in my project (https://github.com/Freedom-Club-Sec/Coldwire-server) (although its pure go)