1
Sign arbitrary data with your SSH keys
ssh-keygen can sign and verify signatures, and it's way better than PGP
Andrew Ayer
I'm a software engineer who works on security, usability, networking, and cryptography. I'm the bootstrapped founder of SSLMate , which makes it easy to obtain and monitor SSL certificates, and DNS Helper , which helps your customers add DNS records so you don't have to.
- Popular posts
- 12
- Total points
- 3,222
- HN comments
- 1,555
- Rank
- #437 personal
Visit agwa.name → RSS feedOn Hacker News Jul 2014 – Apr 2026
Security & Privacy 5Networking & Internet 4Systems & Performance 3Web & Frontend 2Software Engineering 2Open Source 2
2
Always Review Your Dependencies, AGPL Edition
Before adding a dependency to one of my software projects, I do some basic vetting of the dependency. Among the things I check are:
3
How to Crash Systemd in One Command
After running this command, PID 1 is hung in the pause system call. You can no longer start and stop daemons. inetd-style services no longer accept connections. You cannot cleanly reboot the system. The system feels generally unstable (e.g. ssh and su hang for 30 seconds since systemd is now integrated with the login…
4
LibreSSL's PRNG is Unsafe on Linux
The first version of LibreSSL portable, 2.0.0, was released a few days ago (followed soon after by 2.0.1 ). Despite the 2.0.x version numbers, these are only preview releases and shouldn't be used in production yet, but have been released to solicit testing and feedback. After testing and examining the codebase, my…
5
Thoughts on the Systemd Root Exploit
Sebastian Krahmer of the SUSE Security Team has discovered a local root exploit in systemd v228 . A local user on a system running systemd v228 can escalate to root privileges. That's bad.