mattm.bsky.social - Profile | ThreadSky | a Reddit-style client for Bluesky

I'll be speaking at the Ontario #Cryptography Day! ontario-crypto-day.github.io Where: University of Waterloo Davis Centre (DC) 1301 and 1302 When: Friday, June 6, 2025, from 10am to approx. 4:30pm I hope anyone in the area interested in cryptography is able to attend!

submitted 22 days ago • 1 comment

OK, this is wild. In September 2023, geophysicists across the world started monitoring a very odd signal coming from the ground under them. It was picked up in the Arctic. And Antarctica. It was detected everywhere, every 90 seconds, as regular as a metronome, for nine days. What the HELL? 1/

submitted 24 days ago • 762 comments

A lot of Americans don't know this, but the winner of the Canadian election will be required live in a small cottage located in the backyard of the palace where the viceroy to the King of England lives. The cottage just recently got a new wifi router, which was very exciting for all Canadians.

submitted 38 days ago • 105 comments

Array indices start at 0 in C, but start at 32 in F.

submitted 48 days ago • 2 comments

Of all the things I didn’t expect to ever happen, iOS Safari actually got a certificate viewer in 18.4! webkit.org/blog/16574/w...

submitted 65 days ago • 0 comments

We've issued our first short-lived (6 day) certificate! letsencrypt.org/2025/02/20/f...

submitted 105 days ago • 0 comments

Chrome has published version 1.6 of their root store policy. Notably, this includes a deadline of June 15, 2026 to get TLS Client Auth out from any intermediates under roots in Chrome's program. TLS client cert users from public CAs may need to make changes. www.chromium.org/Home/chromiu...

submitted 111 days ago • 1 comment

Congratulations to the Firefox team for shipping CT enforcement! > Starting in Firefox 135, Certificate Transparency is now enforced on all desktop platforms. groups.google.com/a/mozilla.or...

submitted 121 days ago • 1 comment

Canadian MP Charlie Angus: Our beloved Canada is under threat. The threat comes from the president of the US—a convicted felon and known predator. But the threat is also being driven by the hate algorithms of oligarchs like Elon Musk….

submitted 125 days ago • 989 comments

heads up for fans of the "ship is stuck" genre, the Manitoulin is currently stuck in icy Lake Erie just outside Buffalo www.reddit.com/r/GreatLakes...

submitted 131 days ago • 1 comment

Boatify wrapped 2024! Stats, maps, timelapses and silly stuff from my AIS receiver and webcam overlooking the Firth of Forth. (recommend viewing on a grown up computer, works on phones but not optimised for them) vessels.marinesightings.com/review/2024/

submitted 132 days ago • 2 comments

I'm speaking at #SREcon in Santa Clara this March! Come learn how Let's Encrypt issues millions of certificates with just a handful of staff and servers! www.usenix.org/conference/s...

submitted 134 days ago • 0 comments

I hear that the Ontario Government is directing Metrolinx to start investigating 'the massing link' and if it actually amounts to anything is quite impactful project for Toronto region passenger and freight

submitted 146 days ago • 1 comment

2024 update for my chart on the landscape of quantum computing: sam-jaques.appspot.com/quantum_land... Not much visible on the chart, but Google's result (the one with the recent press attention) is a pretty big deal

submitted 175 days ago • 2 comments

La Côte-Nord a connu des conditions météorologiques extrêmes ces dernières semaines. Environ 75 mm de verglas se sont accumulés sur nos lignes de transport à certains endroits et nous avons dû y dépêcher des équipes rapidement afin de déglacer les lignes.

submitted 177 days ago • 11 comments

The train livery for the return of the Ontario Northland Railway "Northlander" train. Source: news.ontario.ca/en/r...

submitted 180 days ago • 0 comments

I made a calendar where every month is also a crossword, and you can get one today! Introducing the 2025 Crossword Calendar: crosswordcal.com/products/202...

submitted 198 days ago • 2 comments

how do you all remember every UUID? I find it really hard. so I wrote them all down on every uuid dot com the list has fast search across all 2^122 values (so you can find your favorites) - hoping to add some social features like "trending UUIDs" soon!

submitted 181 days ago • 50 comments

Intel launched the Pentium processor in 1993. Unfortunately, dividing sometimes gave a slightly wrong answer, the famous FDIV bug. Replacing the faulty chips cost Intel $475 million. I reverse-engineered the circuitry and can explain the bug. 1/9

submitted 181 days ago • 17 comments

Do you use Let's Encrypt certificates? Do you use the "client auth" extended key usage with them? (I.E: Do you use Let's Encrypt as a client certificate). Chrome's root program is looking to phase out its use in roots they trust. I'd love to hear from anyone who would be affected.

submitted 184 days ago • 2 comments

Great to see more organizations sharing their use of Rustls :) www.memorysafety.org/blog/rustls-...

submitted 184 days ago • 0 comments

pardon me as I explain why Danforth is a right bastard, because this is one of my areas of intense nerdery

submitted 195 days ago • 12 comments

🧵SALT🧵 It's been snowing in the UK and the road gritters are out in force, begging the question: Have you ever wondered where that grit actually COMES from? The answer is more magical, beautiful and fascinating than you probably realised. 1/14

submitted 198 days ago • 192 comments

overheard: #homelab is where the #heartlab is

submitted 199 days ago • 1 comment

How does the new iOS inactivity reboot work? What does it protect from? I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented. naehrdine.blogspot.com/2024/11/reve...

submitted 200 days ago • 12 comments

Oh, I never posted my gotofail story on here. Early 2014, someone came to me about a catastrophic vulnerability in Apple's TLS implementation. I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures.

submitted 200 days ago • 7 comments

Today in relatable science: Gulls making a mysterious daily trip that turned out to be to a potato chip factory

submitted 202 days ago • 252 comments

More on iPhones rebooting themselves to resist cracking. www.404media.co/apple-quietl...

submitted 208 days ago • 2 comments

I swear there was the top of a mountain just there, but it disappeared. It must have pulled a sneak peak.

submitted 223 days ago • 2 comments

look at this absolute unit

submitted 231 days ago • 343 comments

The cross-sign of ISRG Root X1 by DST Root CA X3 has now expired.  It's been 10 years in the making, but Let's Encrypt is now a fully standalone certificate authority, trusted by the vast majority of browsers and other devices 🔐

submitted 247 days ago • 0 comments

OpenSSH 9.9 has just been released. New features include support for hybrid ML-KEM X25519 post-quantum key exchange (using a formally-verified implementation), improved controls to drop and penalise unwanted connections, faster NTRUPrime key exchange code and more. www.openssh.com/releasenotes...

submitted 259 days ago • 2 comments

If you want to use an application that uses OpenSSL like nginx with RusTLS, you can use this new compatibility layer to seamlessly switch to a modern, memory-safe TLS implementation: www.memorysafety.org/blog/rustls-...

submitted 393 days ago • 0 comments

The solar eclipse that will cast a visible shadow across the U.S. on Monday is already leaving an obvious mark on hotel prices. About 300 Super 8s are within the path of solar eclipse in totality, and 100 of those were sold out for Sunday or Monday. nyti.ms/43KrUWe

submitted 427 days ago • 4 comments

Reading the timeline of the pressure campaign to convince the xz maintainer to hand over control is… awful. Merciless guilt-tripping. One lesson I’m taking from this is to be even more ruthless with blocks. Whining about maintenance? Blocked. Zero chances. research.swtch.com/xz-timeline

submitted 429 days ago • 6 comments

Extremely excited to introduce Sunlight, a Certificate Transparency log backed by object storage, based on sumdb-style tiles, and with no merge delay. It’s designed to be cheap, easy, and safe to operate, and to bring CT into the growing tlog ecosystem. sunlight.dev

submitted 448 days ago • 3 comments

NEW EPISODE! iMessage is getting a big post-quantum upgrade! Douglas Stebila joined us to talk about his security analysis of the new PQ3 protocol update and not indulge our wild Apple speculations: securitycryptographywhatever.com/2024/03/03/p... youtu.be/ogPy5XOEj3s

submitted 459 days ago • 0 comments

I’m excited to share River, a plan to build a new http reverse proxy built in Rust using Cloudflare’s pingora libraries: www.memorysafety.org/blog/introdu...

submitted 463 days ago • 2 comments