Recent content on snowpatch
tl;dr Until this past week, an attacker could have easily and surreptitiously discovered, monitored, and controlled all of the Mysa smart thermostats in the world. Mysa thermostat owners use the Android or iPhone apps to control their thermostats. Even if the owner is at home and connected to the same WiFi network as the thermostats, the communication between the app and the thermostat always…
Right before leaving my previous job, we released a lengthy post that I had written about a survey of around 20 million public keys, which I had gathered from all different corners of the Internet during summer 2024. This includes TLS certificates, SSH server keys, Github and Gitlab user keys, and DNSKEYs. A friend recently pointed me to some similar things out there, which I hadn’t been…
I like running, democracy, learning to speak new languages and cultures, and humans being in control of technology rather than the other way around. A curated list of open-source software that I’ve created and contributed to I was a Top Writer on Quora before it devolved into a pile of monetized clickbait and AI slop. LinkedIn, StackOverflow