Tootfinder

from my link log —
Benchmarking symmetric encryption (AEAD) in Rust.
https://kerkour.com/rust-symmetric-encryption-aead-benchmark/
saved 2021-11-11

Benchmarking symmetric encryption (AEAD) in Rust
As we saw last week, when performing symmetric encryption you should use Authenticated Encryption with Additional Data (AEAD) which provides stronger guarantees than block ciphers.

The Department of Justice is acknowledging it has removed from its website news releases about criminal cases related to the 6 January 2021 Capitol attack, -- calling the information about the prosecutions “partisan propaganda”.
The purge of news releases documenting criminal charges, convictions and sentencings is the latest step by the Trump administration to dramatically 💥rewrite the history of the assault on the US Capitol,
when hundreds of supporters of Donald Trump stormed t…

The Golden Path
2021

The legal eagle is on the game changer!!

If y'all into sim games and you like cars well then I got some good news for ya. Car Mechanic Simulator 2018 is currently free on Steam for its 8th anniversary. Don't wait tho, this offer ends on the 27th. I happen to have Car Mech Sim 2021 and can absolutely rec that one (excellent podcast game btw). Never played the predecessor but it looks to be fundamentally the same. (also there's a new one coming this year woo)

from my link log —
SUNSPOT: an implant in the SolarWinds Orion build process.
https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/
saved 2021-01-12

SUNSPOT Malware: A Technical Analysis | CrowdStrike
In this blog, we offer a technical analysis of SUNSPOT, malware that was deployed into the build environment to inject this backdoor into the SolarWinds Orion platform.

Jährlicher Zubau und Rückbau von #Balkonsolarleistung in Deutschland mit Stand vom 22.05.2026.
Unplausible Inbetriebnahmedaten von 1900 bis 2017 wurden durch das Registrierungsdatum der #Steckersolaranlage ersetzt.
👉 Zusatzlesestoff:

Which way now?
2021

Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study
Shanna M. Kahn, John D. Hastings
https://arxiv.org/abs/2607.20713 https://arxiv.org/pdf/2607.20713 https://arxiv.org/html/2607.20713
arXiv:2607.20713v1 Announce Type: new
Abstract: LLM-based coding tools enable non-expert users to generate routine automation scripts that may enter enterprise workflows without meaningful security review. This study examines that risk directly. Code was collected from ChatGPT, Microsoft Copilot, and Google Gemini using identical prompts across three automation domains. Claude Code performed a standardized vulnerability review. Each identified vulnerability was scored using CVSS v3.1 and mapped to the OWASP Top 10:2021 and the MITRE ATT&CK frameworks. Every script contained exploitable vulnerabilities. Nine of the 17 identified vulnerability classes appeared in code from all three models, while 14 of the 17 vulnerability classes appeared in at least two models. The weighted CVSS scores across platforms differed by less than 10%. The risk is not tied to any particular model but rather to the task category. Organizations should therefore ask not which tool to trust, but instead whether LLM-generated automation code should be deployed without review.
toXiv_bot_toot

My new tires held up for exactly 10 km 🙄

Donald Trump sued his niece Mary Trump, The New York Times, several journalists and ABC in September 2021.
The original complaint alleged the defendants engaged in an “insidious plot” that was “motivated by a personal vendetta and their desire to gain fame.”
Trump’s lawyers argued that the group of journalists from The New York Times “relentlessly sought out” his niece to persuade her to “smuggle” records to the newspaper.
A New York Supreme Court justice dismissedthe laws…

Trump Settles $100 Million Lawsuit Against His Niece
President Trump sued Mary Trump in 2021 for sharing his confidential financial documents with a group of reporters from The New York Times.

(2021) Kaikki irti eläimistä: Näkymätön lehmä. Lehmien jalostus on muuttanut paitsi niiden ulkomuotoa ja rakennetta, myös luonnetta. Ihanteellinen tuotantoeläin on säyseä ja passiivinen. https://areena.yle.fi/1-50660190

Näkymätön lehmä | Kaikki irti eläimistä
Lehmien jalostus on muuttanut paitsi niiden ulkomuotoa ja rakennetta, myös luonnetta. Ihanteellinen tuotantoeläin on säyseä ja passiivinen. O: Riikka Kaihovaara

from my link log —
Let's Encrypt prepared to issue 200 million certificates in 24 hours.
https://letsencrypt.org/2021/02/10/200m-certs-24hrs.html
saved 2021-02-10

Preparing to Issue 200 Million Certificates in 24 Hours
On a normal day Let’s Encrypt issues nearly two million certificates. When we think about what essential infrastructure for the Internet needs to be prepared for though, we’re not thinking about normal days. We want to be prepared to respond as best we can to the most difficult situations that might arise. In some of the worst scenarios, we might want to re-issue all of our certificates in a 24 hour period in order to avoid widespread disruptions. That means being prepared to issue 200 mill…

Ex-Raiders TE Darren Waller Issues Clear Message on Jon Gruden https://heavy.com/sports/nfl/las-vegas-raiders/darren-waller-clear-message-jon-gruden/

Kurze Rezensionen zu Ken Liu / The Wall of Storms (2021) und V.E. Schwab / The Fragile Threads of Power (2023)
https://blog.till-westermayer.de/2026/05/science-fiction-und-fantasy-im-april-2026/

Science Fiction und Fantasy im April 2026
Im April habe ich tatsächlich nur zwei Bücher gelesen (und auf dem Bildschirm nur ermattet das ZDF-Magazin Royale konsumiert) - gab einerseits anderes, und andererseits nach 10-12-Stunden-Tagen dann auch keine Muße, zu lesen. Beide Bücher kann ich dafür wärmstens empfehlen. Zum einen war dies der

from my link log —
PostgreSQL is a great pub/sub and job server.
https://webapp.io/blog/postgres-is-the-answer/
saved 2021-12-18 https://

Postgres is a great pub/sub & job server
If you need a publish/subscribe or job server at any point in your project, try using Postgres. It'll give you lots of data integrity and performance guarantees, and it doesn't require you or your team learning any new technology.

#rewind #Morphine 'Radar'
Mark Sandman, (1952-1999), Dana Colley, Billy Conway (1956-2021), Jerome Deupree
#Musik #music

from my link log —
Vulnerabilities show why STARTTLS should be avoided if possible.
https://blog.apnic.net/2021/11/18/vulnerabilities-show-why-starttls-should-be-avoided-if-possible/
saved 2021-11-18

Vulnerabilities show why STARTTLS should be avoided if possible | APNIC Blog
Guest Post: Study finds more than 40 STARTTLS-related security flaws in many different software products, both client-side and server-side.

from my link log —
PostgreSQL text search: balancing query time and relevancy.
https://about.sourcegraph.com/blog/postgres-text-search-balancing-query-time-and-relevancy/
saved 2021-10-21

from my link log —
Clojure from a Schemer's perspective.
https://www.more-magic.net/posts/thoughts-on-clojure.html
saved 2021-03-05 http…