Raphaël Vinot

I have various notes about the French administration.

I also write code and stuff.

Yoyodyne IT: https://www.yoyodyne-it.eu/
Github: https://github.com/rafiot
Lookyloo: https://github.com/Lookyloo/

Last Notes

2026-10-05 15:35:32 UTC

- reply

shrug and ignore. There is no point in arguing (even when being right) against someone that close to AI psychosis.

2026-07-29 14:13:23 UTC

- reply

we've been trained extensively over the last decade or so that software bug are just a fact of life and nothing can be done about it. CrowdStrike bricking a whole bunch of devices 2 years ago had zero consequences.
Now, you can just point in the general direction of any model, shrug, say it did it, and nobody will question it, because software doesn't matter. Yes, I am bitter.

2026-07-06 11:00:50 UTC

Hey, quick question for the #infosec folks: are you still using securelist.com (the Kaspersky blog)? And if yes, have you looked at your traffic when you browse it?
I just added support for websocket traffic on #lookyloo and it is pretty insane. They use yandex webvisor and afaict, the WS session calls home and sends enough data to replay your whole session (mouse movment, scrolling, ...), on top of everything they can get about your browser.
Example: https://lookyloo.circl.lu/tree/7849cb0d-ae4f-4711-9b88-0bded5ca7159

2026-04-03 14:40:51 UTC

Seems we've reached the plot point "hero left behind enemy lines" of Wag the dog?

2026-03-25 17:01:22 UTC

- reply

what about an aggregated log from different macines in local time and no TZ?

2025-09-30 17:53:08 UTC

As a European of the French type, that whole government shutdown thing is absolutely insane. I'm somewhat tuned to the US, and understand on the abstract how y'all can get to that point, so it kinda vaguely makes some sense.
Anything remotely similar in France, the guillotines are in the central squares at 8:30am, and heads on spikes by noon.

2025-07-14 17:41:32 UTC

The whole EU age verification app thing is so exhausting. Yes, the tech specs are public, yes, the wallet app is opensource, yes, it could be done in a worse way.
Yet, it is still the newest attempt to answer the question: "can we tech hard enough to avoid having parents talking to their kids?"
And the answer is still no, you can't.

2025-07-14 10:23:30 UTC

- reply

In case you missed the session last week, and want to listen to me babble about @npub19zt…rf0z for a few hours, the video is available: https://www.youtube.com/watch?v=dRoNGJvFJWA
And so are the slides: https://www.circl.lu/assets/vss-2025/Lookyloo.pdf

2025-07-05 18:44:11 UTC

Friendly reminder that @npub143x…w0tp is running a Virtual Summer School next week, and we start the show on Monday with a 3 hours @npub19zt…rf0z / Lacus / Pandora & the complete toolchain workshop.
As I'm preparing it right now, I'd like to apologize in advance on how dense it's gonna be 🙃
More details:
https://www.circl.lu/pub/vss-2025/

2024-12-27 12:09:48 UTC

- reply

rysiek