viralpoetry

Joined 13 years ago

Karma
68
Submissions
71
Member since
Jun 13
https://www.malgregator.com/
View on Hacker News

Recent submissions

Comment · 1 month ago
Thanks for posting this, I hope you will continue
Comment · 5 months ago
Location: Slovakia (CET)

Remote: Yes. Can occasionally travel.

Willing to relocate: No.

Technologies: K8S, Terraform, Google Cloud, AWS, OpenStack, Jenkins, PKI, HSM (Thales, Luna), Vault, SAST/DAST, IAM, authentication protocols (WebAuthn/FIDO2, OAuth, RADIUS), Python, Bash, Nim lang, Chrome Extension development, AI coding assistants & agents

Résumé/CV: https://www.linkedin.com/in/gasperpeter/ (or via email)

Email: [email protected]

Security engineer with 10+ years building production security infrastructure including PKI, secrets management, HSM-backed crypto, DevSecOps platforms. Served as the technical lead and primary engineer for company-wide identity and secrets infrastructure.

Google Bug Hunter Hall of Fame profile: https://bughunters.google.com/profile/27c422b2-b262-4f50-bb7...

Blog: https://www.malgregator.com/

Comment · 10 months ago
Comment · 11 months ago
"The gains in technics are never registered automatically in society: they require equally adroid inventions and adaptations in politics; and the careless habit of attributiong to mechanical improvements a direct role as instruments of culture and civilization puts a demand upon the machine to which it cannot respond."

- Lewis Mumford, Technics and Civilization

Comment · 2 years ago
This was actually solved by another address protocol version. I believe v3 solved this by using pubkey instead of hash. Similar to late btc addresses
Comment · 2 years ago
Comment · 3 years ago
> copying keys between HSMs inherently exposes the master keys anyway

that's not true, even with their BYOK you export the key from one HSM under a shared key and then import it to another device

Comment · 3 years ago
https://www.malgregator.com/

I write mostly about the security and things I work on, to keep memories somewhere.

One of my posts about the google bug bounty for the Waze navigation bug went viral and was shared by Schneier, Threat Post and others https://www.malgregator.com/post/waze-how-i-tracked-your-mot...

Comment · 4 years ago
The simplest I saw, install Standard Notes (https://standardnotes.com/ - open source, free) encrypted notes app, write something, then publish it via the interface. It will create you a blog on their https://listed.to/ webpage

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton