jvehent

Ping me on signal when you get a chance!

that was very much one of the lesson learned

Yeah. Sorry about that...

We didn't think that the intermediate CA expiring would break the signatures, because code signing generally doesn't care about expiration, but we never tested the code path until the intermediate expired and the signatures broke. That was a hard lesson to learn...

Hey Ben!

(I made and used to maintain Autograph at Mozilla)

Don't called your project *Zilla. The copyright owners of Godzilla are known to go after everyone who tries to use the "Zilla" suffix. Mozilla learned its lesson long ago and had to negotiate a special agreement.

The most compelling reason to use Firefox Sync is that it is client-side encrypted. Mozilla stores opaque encrypted blobs that it is entirely unable to decrypt.

Law enforcement agencies request that data from time to time, hoping to obtain browsing history, only to be turned down thanks to the encryption.

(disclaimer: former Mozilla security)

Mastodon's infosec.exchange is doing genuinely well. It's not the infosec Twitter of the olden days, but it's the most promising replacement we've got.

Sops original author here. I haven't contributed to the project in a few years, but it's really cool to see that it continued to grow and gain traction outside of Mozilla. Thanks folks!

Wait until this happens to your car...

that's why archive.org exists

Which any programming language can handle easily. The architecture here is more interesting than the language choice.

So governments already have all the potassium nitrate, Palantir is just helping them make bullets?

Sops creator and co-maintainer here. We love Sops. We love Vault. We use both of them at Mozilla in various places. Beyond the "tool war", which is silly, what really matters is using tools that integrate well with your workflow, provide real value and strong security.