<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <updated>2026-03-24T07:12:14Z</updated>
  <generator>https://nostr.now</generator>

  <title>Nostr notes by Kees Cook</title>
  <author>
    <name>Kees Cook</name>
  </author>
  <link rel="self" type="application/atom+xml" href="https://nostr.now/npub17q5j4ty2qxulwkef3n3n7zvsn4yh4uechcg4d70zqu4klnjv2hhs46t6ax.rss" />
  <link href="https://nostr.now/npub17q5j4ty2qxulwkef3n3n7zvsn4yh4uechcg4d70zqu4klnjv2hhs46t6ax" />
  <id>https://nostr.now/npub17q5j4ty2qxulwkef3n3n7zvsn4yh4uechcg4d70zqu4klnjv2hhs46t6ax</id>
  <icon>https://media.hachyderm.io/accounts/avatars/114/496/361/371/860/664/original/73cb705a2f20c70f.jpg</icon>
  <logo>https://media.hachyderm.io/accounts/avatars/114/496/361/371/860/664/original/73cb705a2f20c70f.jpg</logo>




  <entry>
    <id>https://nostr.now/nevent1qqsxq2zg9zc26j40tw47am7lkvk72t42v9vwjag5rzxy3v2vkk3tfhczyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277e6hft6</id>
    
      <title type="html">We can remove strncpy() from the Linux kernel finally! I did the ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqsxq2zg9zc26j40tw47am7lkvk72t42v9vwjag5rzxy3v2vkk3tfhczyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277e6hft6" />
    <content type="html">
      We can remove strncpy() from the Linux kernel finally! I did the last 6 instances, and dropped all the implementations:&lt;br/&gt;&lt;a href=&#34;https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/log/?h=dev/v7.0-rc2/strncpy&#34;&gt;https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/log/?h=dev/v7.0-rc2/strncpy&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;Over the last 6 years working on this, there were 362 commits by 70 contributors. The folks with more than 1 commit were:&lt;br/&gt;&lt;br/&gt;    211  Justin Stitt &amp;lt;justinstitt@google.com&amp;gt;&lt;br/&gt;     22  Xu Panda &amp;lt;xu.panda@zte.com.cn&amp;gt;&lt;br/&gt;     21  Kees Cook &amp;lt;kees@kernel.org&amp;gt;&lt;br/&gt;     17  Thorsten Blum &amp;lt;thorsten.blum@linux.dev&amp;gt;&lt;br/&gt;     12  Arnd Bergmann &amp;lt;arnd@arndb.de&amp;gt;&lt;br/&gt;      4  Pranav Tyagi &amp;lt;pranav.tyagi03@gmail.com&amp;gt;&lt;br/&gt;      4  Lee Jones &amp;lt;lee@kernel.org&amp;gt;&lt;br/&gt;      2  Steven Rostedt &amp;lt;rostedt@goodmis.org&amp;gt;&lt;br/&gt;      2  Sam Ravnborg &amp;lt;sam@ravnborg.org&amp;gt;&lt;br/&gt;      2  Marcelo Moreira &amp;lt;marcelomoreira1905@gmail.com&amp;gt;&lt;br/&gt;      2  Krzysztof Kozlowski &amp;lt;krzk@kernel.org&amp;gt;&lt;br/&gt;      2  Kalle Valo &amp;lt;kvalo@kernel.org&amp;gt;&lt;br/&gt;      2  Jaroslav Kysela &amp;lt;perex@perex.cz&amp;gt;&lt;br/&gt;      2  Daniel Thompson &amp;lt;danielt@kernel.org&amp;gt;&lt;br/&gt;      2  Andrew Lunn &amp;lt;andrew@lunn.ch&amp;gt;&lt;br/&gt;&lt;br/&gt;Thank you to all of you! (And especially to Justin Stitt who took on the brunt of the work.)
    </content>
    <updated>2026-03-24T06:31:30Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqsrm9phxml4gxd9rn46l8gtsgtddpdz3vu97ewmlau5jvs4uehpwpczyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277gsfy2s</id>
    
      <title type="html">@nprofile…tq3v The &amp;#34;continue to function properly&amp;#34; ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqsrm9phxml4gxd9rn46l8gtsgtddpdz3vu97ewmlau5jvs4uehpwpczyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277gsfy2s" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsv28wqn9sdqf6me4nwv90k2frxtpyn00ule4mm7t03jr3pyzt6r7spzemhxue69uhhyetvv9ujuerfw36x7tnsw43z79e7eww&#39;&gt;nevent1q…7eww&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;&lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyq6ce9npjetvwjp6galfsvx6eghm7kgdam54whsmveeqdf8s8u8cc50tq3v&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;Linus Torvalds&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;nprofile…tq3v&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; The &amp;#34;continue to function properly&amp;#34; language came from Vizio, though. That&amp;#39;s not a claim SFC ever made. That wouldn&amp;#39;t even be covered by GPLv3. 🤷&lt;br/&gt;&lt;a href=&#34;https://sfconservancy.org/news/2025/dec/24/vizio-msa-irrelevant-ruling/&#34;&gt;https://sfconservancy.org/news/2025/dec/24/vizio-msa-irrelevant-ruling/&lt;/a&gt;
    </content>
    <updated>2025-12-25T00:21:03Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqs97wcrs7xv6hfm79n5q6smy5lyaxhay77ztrpuhvvstp7pjpk5u8czyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf327743mekg</id>
    
      <title type="html">When a kernel commit starts with &amp;#34;In A.D. 1582 Pope Gregory ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqs97wcrs7xv6hfm79n5q6smy5lyaxhay77ztrpuhvvstp7pjpk5u8czyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf327743mekg" />
    <content type="html">
      When a kernel commit starts with &amp;#34;In A.D. 1582 Pope Gregory XIII found that ...&amp;#34; you know you&amp;#39;re in for a ride:&lt;br/&gt;&lt;a href=&#34;https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f076ef44a44d02ed91543f820c14c2c7dff53716&#34;&gt;https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f076ef44a44d02ed91543f820c14c2c7dff53716&lt;/a&gt;&lt;br/&gt;tl;dr: Rockchip decided November should have 31 days...
    </content>
    <updated>2025-12-01T16:27:52Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqsygwksve3m58zqrg9e2ctkksrwclef9jd6r2z7z4ex3sepd2hg0tszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277ddt8sa</id>
    
      <title type="html">@nprofile…gkm9 I think you mean the yellow circle ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqsygwksve3m58zqrg9e2ctkksrwclef9jd6r2z7z4ex3sepd2hg0tszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277ddt8sa" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqstgjsc8j23r572qz34mvq2urxujlngmrq68xv08ld2ufpmvhrl75gpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7tj6dsr&#39;&gt;nevent1q…6dsr&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;&lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyplqplmnaynrc3tuu0q2ckz8fq7t23vz80g6chjq7uw8nkked805qjugkm9&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyplqplmnaynrc3tuu0q2ckz8fq7t23vz80g6chjq7uw8nkked805qjugkm9&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;nprofile…gkm9&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; I think you mean the yellow circle (&amp;#34;publicly know  flaws&amp;#34;) where it is outside the green circle (&amp;#34;fixed flaws&amp;#34;) and pink circle (&amp;#34;security flaws&amp;#34;)? Does that match?
    </content>
    <updated>2025-11-08T00:43:05Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqsfruw3p7d7zvum8v5tfugkh4skv5g7s0s8v0yejqpywyl42dy48qszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf32775zgfmz</id>
    
      <title type="html">Today is also the 10 year anniversary of the Linux Kernel ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqsfruw3p7d7zvum8v5tfugkh4skv5g7s0s8v0yejqpywyl42dy48qszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf32775zgfmz" />
    <content type="html">
      Today is also the 10 year anniversary of the Linux Kernel Self-Protection Project. &lt;a href=&#34;https://kspp.github.io/&#34;&gt;https://kspp.github.io/&lt;/a&gt;&lt;br/&gt;I&amp;#39;m proud that we&amp;#39;ve gotten A LOT done in the last decade to harden Linux against security flaws.&lt;br/&gt;&lt;br/&gt;I posted this before, but here&amp;#39;s a review of the last ten years:&lt;br/&gt;&lt;a href=&#34;https://outflux.net/slides/2025/lss/kspp-decade.pdf&#34;&gt;https://outflux.net/slides/2025/lss/kspp-decade.pdf&lt;/a&gt;&lt;br/&gt;And the video:&lt;br/&gt;&lt;a href=&#34;https://youtu.be/c_NxzSRG50g&#34;&gt;https://youtu.be/c_NxzSRG50g&lt;/a&gt;
    </content>
    <updated>2025-11-06T03:18:53Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqs0wr5mm22czst30f66yhqjnfwvestcu4lhvddfryw2ehvga529tmszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277svv92h</id>
    
      <title type="html">Happy 70th birthday to the Flux Capacitor! ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqs0wr5mm22czst30f66yhqjnfwvestcu4lhvddfryw2ehvga529tmszyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf3277svv92h" />
    <content type="html">
      Happy 70th birthday to the Flux Capacitor!&lt;br/&gt;&lt;br/&gt;&lt;video controls width=&#34;100%&#34; class=&#34;max-h-[90vh] bg-neutral-300 dark:bg-zinc-700&#34;&gt;&lt;source src=&#34;https://media.hachyderm.io/media_attachments/files/115/498/186/554/939/357/original/210106bf3269ea88.mp4&#34;&gt;&lt;/video&gt;
    </content>
    <updated>2025-11-05T17:09:33Z</updated>
  </entry>

  <entry>
    <id>https://nostr.now/nevent1qqsvfsk9ld5pagrngwlpludt6cuh55tjwmnzqh6g389hthdfx6t6jzgzyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf32775qr679</id>
    
      <title type="html">This graph is the one I&amp;#39;m most excited about: the lifetime of ...</title>
    
    <link rel="alternate" href="https://nostr.now/nevent1qqsvfsk9ld5pagrngwlpludt6cuh55tjwmnzqh6g389hthdfx6t6jzgzyrczj24v3gqmna6m9xxwx0cfjzw5j7hn8zlpz4heugrjkm7wf32775qr679" />
    <content type="html">
      This graph is the one I&amp;#39;m most excited about: the lifetime of security flaws in Linux is finally starting to get shorter (and the number of fixed flaws continues to rise).&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://hachyderm.io/@LinuxSecSummit@social.kernel.org/114750428620118674&#34;&gt;https://hachyderm.io/@LinuxSecSummit@social.kernel.org/114750428620118674&lt;/a&gt;&lt;br/&gt;&lt;br/&gt; &lt;img src=&#34;https://media.hachyderm.io/media_attachments/files/114/750/908/087/006/458/original/e0cfd3d62a9ae344.jpg&#34;&gt; 
    </content>
    <updated>2025-06-26T17:45:19Z</updated>
  </entry>

</feed>