Clemens

MacPorts Developer, PPL/A, Works at Red Hat on Cryptography

searchable

Web: https://neverpanic.de/
GitHub: https://github.com/neverpanic

Public Key

npub1rw93mtjez3dyx6ne20wvyly3xxxk6eula9n4seuza9n8cvwmeycqkw6k34

NIP-05 Address

neverpanic_at_chaos.social@momostr.pink

Profile Code

nprofile1qqsphzca4ev3gkjrdfu48hxz0jgnrrtdv707je6cv7pwjenux8dujvqppamhxue69uhkummnw3ezumn0wuqs6amnwvaz7tmwdaejumr0dsse38c7

Publishing to

nostr.now

nos.lol

relay.damus.io

Author Public Key

npub1rw93mtjez3dyx6ne20wvyly3xxxk6eula9n4seuza9n8cvwmeycqkw6k34

Show more details

Last Notes

2026-10-20 10:47:57 UTC

- reply

Where can I find details about what the CA allegedly did wrong? "trust us" isn't enough here, and documentation for that change and its CVE is scarce to non-existent.

2026-10-18 13:28:51 UTC

- reply

where did you get aarch64 server hardware? Cloud? 'cause everywhere I look, they're not available.

2026-09-10 08:55:48 UTC

- reply

Good! Hard to imagine what would happen if you didn't know how to "maintain a Linux workstation," especially "including X11" 😂
Is there a version for Wayland?

2026-08-27 13:29:54 UTC

- reply

I'd love for some CSS magic doing that from a git history of a markdown doc…

2026-07-29 10:24:27 UTC

- reply

so weit daneben war das Meme gar nicht. Zumindest ist klar wo die Inspiration her ist und auch wo die Reise hin geht.
https://assets.chaos.social/media_attachments/files/117/002/775/162/496/554/original/664fda39bb225f80.jpg

2026-07-16 17:39:46 UTC

- reply

fsck

2026-05-21 11:16:53 UTC

Are you in the US and want to work on Smartcards? My employer has a position available: https://redhat.wd5.myworkdayjobs.com/en-US/jobs/job/Senior-Software-Engineer-in-Crypto--Smart-Cards-_R-056859
(It says Raleigh, but in the likely event that we can't find anybody around there, remote will be considered.)
#GetFediHired #FediHire #RedHat

2026-04-24 19:10:14 UTC

- reply

Can you deploy the diseases?

2026-02-12 06:55:03 UTC

- reply

I guess grub is also compiled with instructions your CPU doesn't support, so yes, it could explain that.
Install method doesn't matter, really — the operating system is compiled for an instruction set your CPU doesn't support, whether you run it through bootc or installed via anaconda doesn't make a difference.

2026-02-12 06:45:49 UTC

- reply

yeah, seems like this doesn't have AVX and AVX2, therefore won't run RHEL 10.

2026-02-11 23:52:50 UTC

- reply

random thought, does the CPU support x86_64v3? It's required for RHEL10 now.

2025-12-15 18:08:27 UTC

- reply

I think the hard part is done, it's all open source. Go for it!
Might want to wait for my FOSDEM talk where I speak about the road to PQC for Fedora, though. I'm guessing a few things from that might be relevant for Arch, too.

2025-12-15 16:28:31 UTC

#RedHat just shipped its first RPM signed with #PostQuantum #Cryptography, completing a major push across multiple teams to make this happen.
`ipmitool-1.8.19-10.el10_1` from https://access.redhat.com/errata/RHBA-2025:23156:
```
[root@rhel-10-1 ~]# rpmkeys -Kv ipmitool-1.8.19-10.el10_1.aarch64.rpm |& head -3
ipmitool-1.8.19-10.el10_1.aarch64.rpm:
Header V6 ML-DSA-87+Ed448/SHA512 Signature, key ID 05707a62: OK
Header V4 RSA/SHA256 Signature, key ID fd431d51: OK
```

2025-11-28 23:08:59 UTC

In October, I gave a talk about post-quantum #cryptography at the #OpenSSL Conference in Prague. Yesterday, the video dropped. If you're interested, head to https://www.youtube.com/watch?v=sXHEweoTj60!
https://assets.chaos.social/media_attachments/files/115/629/839/062/731/968/original/0f111987551a43fd.mp4

2025-08-28 20:18:09 UTC

- reply

Not just anybody. djb is a pretty well-known cryptographer. He helped design the EdDSA signature scheme.
Not the first time he's posted a lengthy PDF attempting to make a point, either.

2025-08-12 18:26:17 UTC

Another commit landed in #OpenSSL: https://github.com/openssl/openssl/commit/6b93db7bfd572e81fac581c5be7b0d7509febb80
This time, it's a drive-by thing inspired by @npub1m7m…2e7k who's working on S/MIME X.509 certificates: the X.509 standards renamed one of the bits in the keyUsage extension from `nonRepudiation` to `contentCommitment`, and OpenSSL only understood the old name.
Slowly improving the world one commit at a time.

2025-06-29 12:53:23 UTC

- reply

do you auto-renew the step-ca issued certs using ACME or are you doing that manually?

2025-01-30 09:33:26 UTC

- reply

Elevate is a fork of LEAPP, which is the tool for RHEL to do that. The upstream repos for that are at https://github.com/oamg/leapp and https://github.com/oamg/leapp-repository.

2024-12-12 18:38:22 UTC

- reply

If only there was a recent case in a large western country where lawful interception interfaces spectacularly backfired and were abused by Chinese hackers – maybe we could learn something from such a case. But, alas, here we are.

2024-12-12 18:18:23 UTC

- reply

so in other words, all the presidencies since that was brought up didn't have the guts or will to actually kill it.

2024-12-12 17:32:41 UTC

- reply

Can a presidency that wants to kill the proposal force a vote?

2024-10-25 21:34:43 UTC

- reply

Can also recommend `bugs` to go to the list of open bugs for a component. I have that setup for MacPorts Trac, but I'm sure it can work with Bugzilla or even Jira, too. Other shortcuts I have are `wp` for Wikipedia, `ctan` for https://www.ctan.org/pkg/%s (from back when I used to write lots of LaTeX), and various dictionaries and translation services.

2024-10-25 20:50:01 UTC

- reply

I have a bookmark for https://docs.python.org/3/library/%s.html with a keyword of `py`, so I can type `py subprocess` to go to the documentation for the subprocess module. Killer feature!