Clemens

MacPorts Developer, PPL/A, Works at Red Hat on Cryptography

searchable

Web: https://neverpanic.de/
GitHub: https://github.com/neverpanic

Last Notes

2026-04-24 19:10:14 UTC

- reply

Can you deploy the diseases?

2026-02-12 06:55:03 UTC

- reply

I guess grub is also compiled with instructions your CPU doesn't support, so yes, it could explain that.
Install method doesn't matter, really — the operating system is compiled for an instruction set your CPU doesn't support, whether you run it through bootc or installed via anaconda doesn't make a difference.

2026-02-12 06:45:49 UTC

- reply

yeah, seems like this doesn't have AVX and AVX2, therefore won't run RHEL 10.

2026-02-11 23:52:50 UTC

- reply

random thought, does the CPU support x86_64v3? It's required for RHEL10 now.

2025-12-15 18:08:27 UTC

- reply

I think the hard part is done, it's all open source. Go for it!
Might want to wait for my FOSDEM talk where I speak about the road to PQC for Fedora, though. I'm guessing a few things from that might be relevant for Arch, too.

2025-12-15 16:28:31 UTC

#RedHat just shipped its first RPM signed with #PostQuantum #Cryptography, completing a major push across multiple teams to make this happen.
`ipmitool-1.8.19-10.el10_1` from https://access.redhat.com/errata/RHBA-2025:23156:
```
[root@rhel-10-1 ~]# rpmkeys -Kv ipmitool-1.8.19-10.el10_1.aarch64.rpm |& head -3
ipmitool-1.8.19-10.el10_1.aarch64.rpm:
Header V6 ML-DSA-87+Ed448/SHA512 Signature, key ID 05707a62: OK
Header V4 RSA/SHA256 Signature, key ID fd431d51: OK
```

2025-11-28 23:08:59 UTC

In October, I gave a talk about post-quantum #cryptography at the #OpenSSL Conference in Prague. Yesterday, the video dropped. If you're interested, head to https://www.youtube.com/watch?v=sXHEweoTj60!
https://assets.chaos.social/media_attachments/files/115/629/839/062/731/968/original/0f111987551a43fd.mp4

2025-08-28 20:18:09 UTC

- reply

Not just anybody. djb is a pretty well-known cryptographer. He helped design the EdDSA signature scheme.
Not the first time he's posted a lengthy PDF attempting to make a point, either.

2025-08-12 18:26:17 UTC

Another commit landed in #OpenSSL: https://github.com/openssl/openssl/commit/6b93db7bfd572e81fac581c5be7b0d7509febb80
This time, it's a drive-by thing inspired by @npub1m7m…2e7k who's working on S/MIME X.509 certificates: the X.509 standards renamed one of the bits in the keyUsage extension from `nonRepudiation` to `contentCommitment`, and OpenSSL only understood the old name.
Slowly improving the world one commit at a time.

2025-06-29 12:53:23 UTC

- reply

do you auto-renew the step-ca issued certs using ACME or are you doing that manually?

2025-01-30 09:33:26 UTC

- reply

Elevate is a fork of LEAPP, which is the tool for RHEL to do that. The upstream repos for that are at https://github.com/oamg/leapp and https://github.com/oamg/leapp-repository.

2024-12-12 18:38:22 UTC

- reply

If only there was a recent case in a large western country where lawful interception interfaces spectacularly backfired and were abused by Chinese hackers – maybe we could learn something from such a case. But, alas, here we are.

2024-12-12 18:18:23 UTC

- reply

so in other words, all the presidencies since that was brought up didn't have the guts or will to actually kill it.

2024-12-12 17:32:41 UTC

- reply

Can a presidency that wants to kill the proposal force a vote?

2024-10-25 21:34:43 UTC

- reply

Can also recommend `bugs` to go to the list of open bugs for a component. I have that setup for MacPorts Trac, but I'm sure it can work with Bugzilla or even Jira, too. Other shortcuts I have are `wp` for Wikipedia, `ctan` for https://www.ctan.org/pkg/%s (from back when I used to write lots of LaTeX), and various dictionaries and translation services.

2024-10-25 20:50:01 UTC

- reply

I have a bookmark for https://docs.python.org/3/library/%s.html with a keyword of `py`, so I can type `py subprocess` to go to the documentation for the subprocess module. Killer feature!