The Curious Engineer

All blogs / Security

Dhole Moments

soatok.blog

Dhole Moments, Soa Talks, and Other Bad Puns... Follow My Blog Get new content delivered directly to your inbox.

SecuritySociety / politics / economyEssays / personal

’20’21’22’23’24’25’26
Posts
200 from 21 Apr 2020 to 29 Oct 2026
Posting
monthly (17 in the last year)
Kind
personal blog
Feed
https://soatok.blog/feed/

2026 14

  1. Your Cryptography Conspiracy Theory Is Wrong
  2. Touching Grass Isn’t Enough: The Furry Fandom’s Issues Are Structural
  3. The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library
  4. Multi-Track Fursuiting?!
  5. The Long Tail of Work Left Until ActivityPub Has E2EE
  6. Soatok’s Informal Guide to Threat Models
  7. Hybrid Constructions: The Post-Quantum Safety Blanket
  8. Cryptography Engineering Has An Intrinsic Duty of Care
  9. Cryptographic Issues in Matrix’s Rust Library Vodozemac
  10. Is End-to-End Encryption Optional For Large Groups?
  11. On Discord Alternatives
  12. Software Assurance & That Warm and Fuzzy Feeling
  13. Practical Collision Attack Against Long Key IDs in PGP
  14. Everything You Need to Know About Email Encryption in 2026

2025 27

  1. The Revolution Will Not Make the Hacker News Front Page
  2. Announcing Key Transparency for the Fediverse
  3. Moving Beyond the NPM elliptic Package
  4. The Dreamseeker’s Vision of Tomorrow
  5. Are You Under the Influence? The Tail That Wags The Dog
  6. It’s a Cold Day in Developer Hell, So I Must Roll My Own Crypto
  7. Barking Up The Ratchet Tree – MLS Is Neither Royal Nor Nude
  8. Improving Geographical Resilience For Distributed Open Source Teams with FREEON
  9. Age Verification Doesn’t Need to Be a Privacy Footgun
  10. Against the Censorship of Adult Content By Payment Processors
  11. Jurisdiction Is Nearly Irrelevant to the Security of Encrypted Messaging Apps
  12. Checklists Are The Thief Of Joy
  13. Furries Need To Learn That Sunlight Is The Best Disinfectant
  14. What Does It Even Mean To Be “Great” Anyway?
  15. Tech Companies Apparently Do Not Understand Why We Dislike AI
  16. Retrospective: Five Years Blogging About Cryptography as a Gay Furry Online
  17. The Authenticity Drought
  18. The Practical Limitations of End-to-End Encryption
  19. Post-Quantum Cryptography Is About The Keys You Don’t Play
  20. On The Insecurity of Telecom Stacks in the Wake of Salt Typhoon
  21. Shaming Isn’t Shielding: The Moral Panics That Cry Wolf
  22. Reviewing the Cryptography Used by Signal
  23. Hell Is Overconfident Developers Writing Encryption Code
  24. Too Many People Don’t Value the Time of Security Researchers
  25. Session Round 2
  26. Don’t Use Session (Signal Fork)
  27. Collatzeral Damage: Bitwise and Proof Foolish

2024 30

  1. Roasted Christmas Spam from Muhu.ai
  2. The Better Daemons Of Our Profession
  3. Ideas and Execution
  4. Furry, Queer, and Lonely
  5. Imagining Private Airspaces for Bluesky
  6. Beyond Bcrypt
  7. Key Transparency and the Right to be Forgotten
  8. Some Thoughts on the Twitter Mass Exodus
  9. What To Use Instead of PGP
  10. Ambition, The Fediverse, and Technology Freedom
  11. Why are furry conventions offering HIV testing to attendees?
  12. Cryptographic Innuendos
  13. The Continued Trajectory of Idiocy in the Tech Industry
  14. E2EE for the Fediverse Update – We’re Going Post-Quantum
  15. Invisible Salamanders Are Not What You Think
  16. Doesn’t Matter
  17. Introducing Alacrity to Federated Cryptography
  18. Federated Key Transparency Project Update
  19. Security Issues in Matrix’s Olm Library
  20. Against XMPP+OMEMO
  21. What Does It Mean To Be A Signal Competitor?
  22. Featured Furries
  23. My Furry Blog Has Lasted Longer Than the Confederacy
  24. My Furry Blog is NOT an Opportunity to Develop Your Brand
  25. Blowing Out the Candles on the Birthday Bound
  26. Towards Federated Key Transparency
  27. Furries Are Losing the Battle Against Scale
  28. It’s Time for Furries to Stop Using Telegram
  29. The Tech Industry Doesn’t Understand Consent
  30. KEM Trails – Understanding Key Encapsulation Mechanisms

2023 13

  1. This Would Be More Professionally Useful If Not For the Furry Art
  2. Aural Alliance – Furry Music to Wag / Pounce to
  3. A Plan for Multicast Support in Noise-based Protocols
  4. I Don’t Care if Strangers Can Take Me Seriously
  5. Return to Office Is Bullshit And Everyone Knows It
  6. DEFCON Quantum Village 2: Electric Boogaloo
  7. On Furries and the Media
  8. Something to Always Keep in Mind
  9. Asymmetric Cryptographic Commitments
  10. Database Cryptography Fur the Rest of Us
  11. Dogwhistles and Other Falsehoods Uttered About Furries
  12. How You Respond to Security Researchers Says Everything About You
  13. Hindsight is 2022

2022 22

  1. What We Do in the /etc/shadow – Cryptography with Passwords
  2. Extending the AES-GCM Nonce Without Nightmare Fuel
  3. Security Research on Twitter: Before and After Musk’s Takeover
  4. Towards End-to-End Encryption for Direct Messages in the Fediverse
  5. Contemplating the Future
  6. Should You Delete Your Patreon Account After They Laid Off Their Entire Security Team?
  7. Hobbies Don’t Need to be Policed
  8. Cryptographic Agility and Superior Alternatives
  9. Burning Trust at the Quantum Village at DEFCON 30
  10. Introducing Cupcake
  11. A Greymuzzle’s Lament
  12. When Soatok Used Bugcrowd
  13. Guidance for Choosing an Elliptic Curve Signature Algorithm in 2022
  14. Was the Buffalo Shooter A Furry?
  15. Bad Furries Aren’t Representative of the Entire Fandom
  16. The Dark Truth About the “Furry Protocol”
  17. On the (In)security of Social Media Callouts
  18. Using RSA Securely in 2022
  19. That One Time Furries Saved a Library
  20. The Controversy Surrounding Hybrid Cryptography
  21. Don’t Dunk the Gunk
  22. How to Remove Twitter Spaces

2021 38

  1. For Your Infurmation
  2. Understanding HKDF
  3. My Blog Isn’t a Platform for Internet Randos
  4. Threema: Three Strikes, You’re Out
  5. Against Web3 and Faux-Decentralization
  6. Furry Porn Against NFTs: A Call to Forearms
  7. The Bi-Symmetric Encryption Fraud
  8. Programmers Don’t Understand Hash Functions
  9. Timing Attack on SQL Queries Through Lobste.rs Password Reset
  10. Safer Illinois, Isn’t
  11. Lightning Round
  12. Selfishness: The Pandemic We Can’t Develop a Vaccine Against
  13. Canonicalization Attacks Against MACs and Signatures
  14. Furry Amino Sucks at Art Attribution
  15. Blue Alerts: Security Theater and Copaganda
  16. A Furry’s Guide to Telegram
  17. On the Word “Nonce” in Cryptography and the UK
  18. Dead Ends in Cryptanalysis #2: Timing Side-Channels
  19. Why Furries Make Excellent Hackers
  20. A Balanced Response to Allen Gwinn
  21. Avoiding the Frigid Hellscape of Online Marketing
  22. World Dhole Day 2021
  23. Why I Chose to Be Vaccinated Against COVID-19
  24. Against Hierarchies
  25. A Furry’s Guide to Cryptocurrency
  26. The Furry / Sexuality Blog Post
  27. No, It’s Not Just You That’s Having a Hard Time Lately
  28. Understanding Extended-Nonce Constructions
  29. No Gates, No Keepers
  30. Cryptography Interface Design is a Security Concern
  31. On The Toxicity of Zed A. Shaw
  32. Crackpot Cryptography and Security Theater
  33. Twitter’s Birdwatch is Fundamentally Flawed
  34. No, You’re Not a “Sigma Male”
  35. Please Stop Encrypting with RSA Directly
  36. Welcome to the Furry Fandom
  37. Block Cipher Structures: Ranked
  38. Masks Off for TheDonald.win

2020 56

  1. The Story So Fur
  2. Cryptographic Wear-Out for Symmetric Encryption
  3. Putting Scammers on Scan on Twitter
  4. Opinionated Guides by Vega Deftwing
  5. The Subtle Hazards of Real-World Cryptography
  6. Going Bark: A Furry’s Guide to End-to-End Encryption
  7. Deplatforming Hate and Harassment
  8. You’re Not Alone; It Gets Better
  9. A Brief Introduction to Deniability
  10. Bizarre Design Choices in Zoom’s End-to-End Encryption
  11. Solving For “Why?”
  12. Nearly Everyone Underestimates the Importance of Good Friendships
  13. Commission Prices for Furries and Artists
  14. Politics? In My Fandom?
  15. Vanity, Vendors, and Vulnerabilities
  16. Dead Ends in Cryptanalysis #1: Length Extension Attacks
  17. Two Weebs and a Furry Walk into a Bar
  18. Extinguishing a Flaming Pile of Bad Takes on My Doorstep
  19. EduTech Spyware is Still Spyware: Proctorio Edition
  20. Designing New Cryptography for Non-Standard Threat Models
  21. Soatok’s Guide to Side-Channel Attacks
  22. Amazing Furry Animators on YouTube
  23. A Few Missing Lessons from American Education
  24. All About Dholes and Dhole Fursonas
  25. A Brief Opinionated Overview of NIST’s Post-Quantum Cryptography Round 3 Candidates
  26. A Canned Response to My Viral Tweet
  27. Dorking Your Way to Search Results That Don’t Suck
  28. Kerlissions – Trivial Collisions in Iota’s Hash Function (Kerl)
  29. Comparison of Symmetric Encryption Methods
  30. A Word on Anti-Furry Sentiments in the Tech Community
  31. GNU: A Heuristic for Bad Cryptography
  32. Don’t Forget to Brush Your Fur
  33. Rhyner Writes – How to Chat with Furries
  34. How and Why America Was Hit So Hard By COVID-19
  35. On Death and Subculture
  36. Resolving The Reoccurring Discourse on Furry Twitter
  37. The World Needs More Furry Bloggers
  38. Fuzzball Storytime – “The Fandom”: A Blast From the Past
  39. How To Learn Cryptography as a Programmer
  40. #PrideMonth
  41. Furward Momentum – Introduction
  42. Learning from LadderLeak: Is ECDSA Broken?
  43. Why AES-GCM Sucks
  44. How to De-Anonymize Scam/Knock-off Sites Hiding Behind CloudFlare
  45. Fraudulent Apps on the Google Play Store: COVID-19 Contact Tracing Edition
  46. Putting the “Fun” in “Hash Function”
  47. Hedged Signatures with Libsodium using Dhole
  48. Furiosity Thrilled the Cat: Questions People Ask About the Furry Fandom
  49. Why Server-Side Input Validation Matters
  50. A Furry’s Guide to Digital Signature Algorithms
  51. Never Underestimate the Furry Fandom
  52. What Your Favorite Video Game Genre Says About Your Moral Character
  53. “Source Code Leak” is Effectively Meaningless to Endpoint Security
  54. Elliptic Curve Diffie-Hellman for Humans and Furries
  55. Authenticated Key Exchanges
  56. Welcome to Soatok.blog