Trouble.org

crypto, philosophy, security, tech, web

certificates and security

August 5, 2014

npm is the defacto package manager for the node.js javascript network programming environment thingee. The folks who make npm have taken a security leap: npm no longer supports its self-signed certificates...

audit, data, philosophy, security, tech

The Dynamic and Depreciating Value of Computers

July 6, 2014

I wrote this while I was at my company Elemental, and was meant for engineers to implement, so despite some of the very specific language for implementation purposes it was never meant to...

feminism, people, philosophy, science, security, sexism, tech

Def Con, Jeff Moss, and Sexism

July 1, 2014

I suppose this could be subtitled “why I won’t be going to Def Con again.” Last August I wrote a letter to Jeff Moss (who is the founder of Def...

dinosaur, philosophy, work

Post Millenium Tension

June 22, 2014

Perhaps this should be subtitled Why I’ll Never Work at Microsoft. I don’t know, I don’t know, I don’t know where to begin, as the song goes. I started writing...

BMC, crypto, embedded, ipmi, tech, work

Even more IPMI, woohoo!

June 5, 2014

I wrote a small paper surveying the scene of IPMI in the wild – Sold Down the River – the title of which might give you some clue as to...

code, embedded, ipmi, security

more IPMI than you can shake a stick at….

May 12, 2014

I’ve long wanted a Get Channel Cipher Suite command w/o authentication, so I wrote a script to do so; those interested can get it here: https://github.com/zenfish/ipmi/blob/master/ipmi-get-ciphers.py Actually none of the...