The Curious Engineer

All blogs / Security

Simon Josefsson's blog

blog.josefsson.org

SecurityLinux / UnixDevOps / SRE / infrastructure

’10’15’20’25
Posts
143 from 20 Sep 2006 to 4 Sep 2026
Posting
monthly (8 in the last year)
Kind
personal blog
Feed
https://blog.josefsson.org/feed/

2026 4

  1. Soft-launching the DiffOS project
  2. Backup of S3 Objects Using rsnapshot
  3. Debian Libre Live 13.3.0 is released!
  4. Debian Taco – Towards a GitSecDevOps Debian

2025 10

  1. Reproducible Guix Container Images
  2. Guix on Trisquel & Ubuntu for Reproducible CI/CD Artifacts
  3. Container Images for Debian with Guix
  4. Introducing the Debian Libre Live Images
  5. Independently Reproducible Git Bundles
  6. Building Debian in a GitLab Pipeline
  7. GitLab Runner with Rootless Privilege-less Capability-less Podman on riscv64
  8. Verified Reproducible Tarballs
  9. On Binary Distribution Rebuilds
  10. Reproducible Software Releases

2024 7

  1. OpenSSH and Git on a Post-Quantum SPHINCS+
  2. Guix Container Images for GitLab CI/CD
  3. Towards Idempotent Rebuilds?
  4. Reproducible and minimal source-only tarballs
  5. Towards reproducible minimal source code tarballs? On *-src.tar.gz
  6. Apt archive mirrors in Git-LFS
  7. Trisquel on arm64: Ampere Altra

2023 15

  1. Validating debian/copyright: licenserecon
  2. Classic McEliece goes to IETF and OpenSSH
  3. Trisquel on ppc64el: Talos II
  4. Enforcing wrap-and-sort -satb
  5. Coping with non-free software in Debian
  6. Streamlined NTRU Prime sntrup761 goes to IETF
  7. How To Trust A Machine
  8. A Security Device Threat Model: The Substitution Attack
  9. Sigstore for Apt Archives: apt-cosign
  10. More on Differential Reproducible Builds: Devuan is 46% reproducible!
  11. Sigstore protects Apt archives: apt-verify & apt-sigstore
  12. Trisquel is 42% Reproducible!
  13. OpenPGP master key on Nitrokey Start
  14. Apt Archive Transparency: debdistdiff & apt-canary
  15. Understanding Trisquel

2022 10

  1. Preseeding Trisquel Virtual Machines Using “netinst” Images
  2. OpenPGP key on FST-01SZ
  3. Second impressions of Guix 1.4
  4. Guix 1.4 on NV41PZ
  5. Trisquel 11 on NV41PZ: First impressions
  6. How to complicate buying a laptop
  7. On language bindings & Relaunching Guile-GnuTLS
  8. Privilege separation of GSS-API credentials for Apache
  9. Static network config with Debian Cloud images
  10. Towards pluggable GSS-API modules

2021 2

  1. What’s wrong with SCRAM?
  2. OpenPGP smartcard with GNOME on Debian 11 Bullseye

2019 6

  1. Passive Icinga Checks: icinga-pusher
  2. OpenPGP smartcard under GNOME on Debian 10 Buster
  3. Offline Ed25519 OpenPGP key with subkeys on FST-01G running Gnuk
  4. Installing Gnuk on FST-01G running NeuG
  5. OpenPGP 2019 Key Transition Statement
  6. Planning for a new OpenPGP key

2017 3

  1. Vikings D16 server first impressions
  2. OpenPGP smartcard under GNOME on Debian 9.0 Stretch
  3. GPS on Replicant 6

2016 1

  1. Why I don’t Use 2048 or 4096 RSA Key Sizes

2015 13

  1. Let’s Encrypt Clients
  2. Automatic Replicant Backup over USB using rsync
  3. Combining Dnsmasq and Unbound
  4. Cosmos – A Simple Configuration Management System
  5. SSH Host Certificates with YubiKey NEO
  6. Scrypt in IETF
  7. Certificates for XMPP/Jabber
  8. Laptop decision fatigue
  9. Laptop indecision
  10. EdDSA and Ed25519 goes to IETF
  11. Laptop Buying Advice?
  12. Replicant 4.2 0003 on I9300
  13. OpenPGP Smartcards and GNOME

2014 9

  1. Dice Random Numbers
  2. The Case for Short OpenPGP Key Validity Periods
  3. Wifi on S3 with Replicant
  4. Replicant 4.2 0002 and NFC on I9300
  5. Offline GnuPG Master Key and Subkeys on YubiKey NEO Smartcard
  6. OpenPGP Key Transition Statement
  7. Creating a small JPEG photo for your OpenPGP key
  8. Replicant 4.2 on Samsung S3
  9. Necrotizing Fasciitis

2013 2

  1. Replicant 4.0 on Samsung Galaxy S III
  2. BLURB: Software repository metadata convention

2012 2

  1. Portable Symmetric Key Container (PSKC) Library
  2. Using OATH Toolkit with Dropbox

2011 5

  1. Small syslog server
  2. Unattended SSH with Smartcard
  3. OpenWRT with Huawei E367 and TP-Link TL-WR1043ND
  4. Introducing the OATH Toolkit
  5. On Password Hashing and RFC 6070

2010 7

  1. GNU SASL with SCRAM-SHA-1-PLUS
  2. Debian on Lenovo X201
  3. GS2-KRB5 using GNU SASL and MIT Kerberos for Windows
  4. Bridging SASL and GSS-API: GS2
  5. OpenWRT 10.03 “Backfire”
  6. GS2-KRB5 in GNU SASL 1.5.0
  7. Fellowship interview

2009 5

  1. Nordic Free Software Award 2009
  2. Storing OpenPGP keys in the DNS
  3. Thread Safe Functions
  4. CACert and GnuTLS
  5. OpenWRT 8.09 plus Huawei E220

2008 8

  1. Redmine on Debian Lenny Using Lighttpd
  2. FSCONS / Nordic Free Software Award Nomination
  3. Cyclomatic Code Complexity
  4. My blog uses Yubikey authentication
  5. Home Wireless Network
  6. Real-world Performance Tuning with Callgrind
  7. IDNA flaws with regard to U+2024
  8. PAM module for Yubico

2007 30

  1. Response to GnuTLS in Exim Debate
  2. Fscons
  3. On TLS-AUTHZ
  4. Home Audio Server
  5. GnuTLS v2.0
  6. Building GnuTLS and GNU SASL without running ./configure
  7. 1 TeraByte
  8. OpenMoko first impressions
  9. OpenMoko Neo1973 order confirmed
  10. Linksys WRT54G3G + Huawei E600 + OpenWRT Kamikaze = Internet at summer house
  11. Neo1973 / OpenMoko ordered
  12. GNU General Public License version 3
  13. Porting to uClinux
  14. Libidn now uses Git
  15. Free-ietf-review
  16. Youbico
  17. Hacking Jobo device
  18. First TLS v1.2 HTTPS browser in the world?
  19. Buggy IMAP authentication on Nokia 6233
  20. Jobo Giga Vu Pro Evolution 80GB
  21. TLS-AUTHZ Patent Concerns
  22. Boycott scan.coverity.com!
  23. EnigForm – HTML/HTTP forms with OpenPGP
  24. Password-based Authentication Protocol
  25. New SASL GS2 document published
  26. Libntlm 0.3.13
  27. Debian etch on Dell Precision M65
  28. Announcing krb5dissect
  29. Gitco
  30. LibIDN 0.6.11

2006 4

  1. Cypak LoginKey
  2. Base encoding
  3. Update of Kerberos V5 over TLS draft
  4. Kerberos 5 Credential Cache file format