Kushal Das :python: :tor: 🇸🇪

https://toots.dgplug.org/@kushal

Public Interest Technologist at https://sunet.se . Core team member of [@torproject](https://mastodon.social/@torproject ) and Core developer of #Python. Fellow and ex-director at Python Software Foundation. Fedora developer :fedora: , digital #security / #privacy trainer helping out citizens/ journalists/whistleblowers. #Stockholm #Sweden #ProtectYourSources 🇵🇸🇸🇪

Photos at https://pixel.kushaldas.photography/kushal

Blog: https://kushaldas.in
Github: https://github.com/kushaldas
Tor Project: https://www.torproject.org/about/people/
Pronoun: He/Him

Public Key

npub18hea3xa4nfj07awa235hl49n92kdwlar4y9umzflwvenjq2uyzysfj8d3x

NIP-05 Address

kushal_at_toots.dgplug.org@momostr.pink

Profile Code

nprofile1qqsrmu7cnw6e5e8lwhw4g6tl6jej4txh0736jz7d3ylhxveeq9wzpzgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsp96srj

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub18hea3xa4nfj07awa235hl49n92kdwlar4y9umzflwvenjq2uyzysfj8d3x

Show more details

Published at

2026-09-04T05:30:32Z

Kind type

0 Metadata

Event JSON

{ "id": "b9eca8fc90ea76859ef755c514e3d89d7566d06665687883c6639cc236f2fa44", "pubkey": "3df3d89bb59a64ff75dd54697fd4b32aacd77fa3a90bcd893f733339015c2089", "created_at": 1788499832, "kind": 0, "tags": [ [ "emoji", "fedora", "https://tootsmedia.dgplug.org/toots-dgplug/custom_emojis/images/000/025/636/original/6beaa86b97d07dd1.png" ], [ "emoji", "python", "https://tootsmedia.dgplug.org/toots-dgplug/custom_emojis/images/000/025/635/original/7b730389c6aade0a.png" ], [ "emoji", "tor", "https://tootsmedia.dgplug.org/toots-dgplug/custom_emojis/images/000/002/571/original/0c1652d8852a3e25.png" ], [ "t", "python" ], [ "t", "stockholm" ], [ "t", "sweden" ], [ "t", "protectyoursources" ], [ "t", "security" ], [ "t", "privacy" ], [ "proxy", "https://toots.dgplug.org/users/kushal", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://toots.dgplug.org/users/kushal", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Kushal Das :python: :tor: 🇸🇪\",\"about\":\"Public Interest Technologist at https://sunet.se . Core team member of [@torproject](https://mastodon.social/@torproject ) and Core developer of #Python. Fellow and ex-director at Python Software Foundation. Fedora developer :fedora: , digital #security / #privacy trainer helping out citizens/ journalists/whistleblowers. #Stockholm #Sweden #ProtectYourSources 🇵🇸🇸🇪\\n\\nPhotos at https://pixel.kushaldas.photography/kushal\\n\\nBlog: https://kushaldas.in\\nGithub: https://github.com/kushaldas\\nTor Project: https://www.torproject.org/about/people/\\nPronoun: He/Him\\n\",\"website\":\"https://toots.dgplug.org/@kushal\",\"picture\":\"https://tootsmedia.dgplug.org/toots-dgplug/accounts/avatars/000/000/001/original/2448e664df394a97.png\",\"banner\":\"https://tootsmedia.dgplug.org/toots-dgplug/accounts/headers/000/000/001/original/9bb0d08e804c523e.png\",\"nip05\":\"kushal_at_toots.dgplug.org@momostr.pink\"}", "sig": "248fdbe89fad4dc70019eba03e67e4ae88ba8916479470c8de9026536f38bdc961c0868decee6b8db928163015bf7b968bb500cb7334056537bde4ee6f2ae4df" }

Last Notes

2026-07-28 09:00:44 UTC

- reply

I am guessing there is a link missing somewhere :)

2026-07-21 06:47:48 UTC

Dear #network teachers, students and #hacker friends, I have a #browser based network simulator to enable learning #networking. Please have a look and tell me what do you think. Share about friends. This works on not phone screens :D
https://howcomputer.works/netsim/ Everything is in the browser, and there is documentation.
The goal is to allow kids to start learning while their schools/systems are not big enough to be able to build lab networks. It has a small/minimal #curl implementation too. @npub1cm0…enqe
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/116/956/613/716/430/930/original/894b8f5914e15193.png

2026-06-23 19:19:16 UTC

- reply

I don't know, the ones I used are part of the same deployment.

2026-04-30 12:31:28 UTC

- reply

how do you feel about the current command line usage?

2026-04-29 20:24:58 UTC

Do I folks in my timeline anyone who in running high performance long running web services in #kotlin? #jvm

2026-04-29 13:55:45 UTC

- reply

Please try the latest 0.5.1 release, you have to link the card with the command for ssh, but all things should just work.

2026-04-27 08:50:07 UTC

- reply

haha, I decided to add one feature in next release and you decided to try that one :p But yes, tclig is the drop in replacement for other bash scripts/git etc. meanwhile `tcli` is for the human. I will add those features, one by one.

2026-04-27 08:21:50 UTC

- reply

tumpa-cli? please let me know how you find it.

2026-04-27 07:45:07 UTC

- reply

ah, that appimage thing is too old, we are working on new version and proper packages. But for the command line users try this https://github.com/tumpaproject/tumpa-cli#quickstart It has caching No rpm yet.

2026-04-26 21:39:31 UTC

- reply

https://github.com/tumpaproject/tumpa-cli#quickstart here is another rust tool :) I will release 0.4.0 tomorrow hopefully :)

2026-04-26 21:38:14 UTC

- reply

looking for friends who can test https://github.com/tumpaproject/tumpa-cli#quickstart before I release the next version tomorrow :)

2026-04-26 21:00:50 UTC

Who all in my timeline regularly using #git commit sign using smartcards and #openpgp? or doing #ssh using OpenPGP authentication subkey

2026-04-26 09:14:37 UTC

A #git #sign bug how a modern #LLM helped me to identify the issue in git. https://kushaldas.in/posts/a-git-sign-bug.html #opus4.7 #anthropic

2026-04-22 09:53:19 UTC

Oh my #cmake

2026-04-20 20:53:38 UTC

- reply

it is part of https://tumpa.rocks , uses the same #rpgp. The goal is to have tools which simpler to use for normal folks.

2026-04-20 11:01:54 UTC

Do you use #OpenPGP for #ssh or #git #sign? #tumpa-cli is the developer friendly tool to keep like simpler for all us and replaces the usage in password-store https://github.com/tumpaproject/tumpa-cli#quickstart The original desktop application Tumpa will have a new release very soon.
Please boost for more visibility

2026-04-17 09:13:07 UTC

Cleaned the `target` directories and got back 76GB space.

2026-04-16 21:54:33 UTC

Installing #fedora 44. Gold release very soon.
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/116/416/603/331/340/303/original/20fa6f1d6f2d7629.png

2026-04-12 10:11:27 UTC

- reply

https://v2.tauri.app/security/

2026-04-12 06:39:57 UTC

- reply

emails, and depending of number of threads and front end interactions vs backend auto sync vs uo response and what server allows etc

2026-04-11 18:13:30 UTC

syncing is a very hard problem.

2026-04-11 15:51:20 UTC

- reply

tauri is special, it does not pack the browser inside. We are pushing for security first in chithi as much as we can. A lot of fix and add as in regular features , it is only a week old.

2026-04-10 06:34:45 UTC

Today #SBOMFocus #stockholm
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/116/379/017/528/812/456/original/3e0e16916735323f.jpeg

2026-04-07 19:35:10 UTC

- reply

Maybe [@shanselman](https://hachyderm.io/@shanselman ) knows the answer! Help!

2026-04-07 19:25:06 UTC

Even #Copilot does not know how to identify the actual sender email address from the #GraphAPI for person account in outlook.com #o365 😭 😭 😭 😭

2026-04-07 13:14:54 UTC

Anyone in my timeline from #Microsoft who can help me to get a developer tenant/sandbox? I need that for adding a new client id / secret for a desktop application.

2026-03-31 10:28:33 UTC

Do I have any #pdf #signing #expert in my timeline? I need help to understand about a specific error and how acrobat reader verifies.

2026-03-31 10:10:42 UTC

- reply

många nya ord, men jag förstår :)

2026-03-28 11:57:27 UTC

Big news from #Europe https://itbrief.co.uk/story/euro-office-launches-as-europe-s-open-source-office-rival #office #opensource

2026-03-25 10:29:01 UTC

RE: https://mastodon.social/@bagder/116289274149475474
Almost fell down from chair laughing 🤣🤣🤣🤣🤣🤣
#note1mhu…e7dz

2026-03-23 11:05:11 UTC

I did `# virsh net-start default` and the server decided not to talk to me anymore :(

2026-03-23 08:43:04 UTC

Anyone in my timeline is from #hackthebox ? I need a help (related to billing).

2026-03-22 16:01:30 UTC

- reply

also, a project of this size need funding to get it done. Very less chance otherwise.

2026-03-22 15:53:42 UTC

- reply

I have to assume like any other open source project, hopefully some folks will, or there will be a better replacement.

2026-03-22 15:17:44 UTC

- reply

Tack :)

2026-03-22 10:41:32 UTC

- reply

Nu är det klart. Jag är stolt över mig själv :D

2026-03-22 09:09:56 UTC

- reply

tack tack :)

2026-03-22 09:06:31 UTC

Insane anxiety, but I am trying to read a book today morning. #swedish

2026-03-21 16:03:36 UTC

Anyone in my timeline is using #confidentialvm ? I would love to have a chat.
Please boost for more reach.

2026-03-21 08:20:13 UTC

- reply

I think i understood now

2026-03-20 17:27:56 UTC

- reply

I still don’t understand sub posts, I just thought of writing this information. Sorry if I did a mistake.

2026-03-20 09:45:35 UTC

- reply

where I grew up most of us had chairs in house, but many others did not have them.

2026-03-19 15:06:32 UTC

- reply

I also use uv.

2026-03-19 14:42:57 UTC

- reply

no, uv is open source and maintained by Astral for now.

2026-03-19 14:27:30 UTC

Big news in #Python land. #OpenAI buying up #Astral https://astral.sh/blog/openai

2026-03-18 09:00:38 UTC

- reply

I know even if I sell myself, I can not afford those extra 3TB in the current market :p

2026-03-18 08:30:19 UTC

- reply

I am worried that the system will freeze.

2026-03-18 08:28:35 UTC

I can finally use Google Chrome. Hope this amount of #ram will do.
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/116/249/225/027/329/363/original/ef8af0aaa6f73db8.png

2026-03-10 10:08:04 UTC

- reply

I count it as a different firmware and OS.

2026-03-10 08:49:34 UTC

In many cases when you need sane performance and good library support, #java seems to be the only option.

2026-03-09 09:12:41 UTC

I wrote about my recent work in the land of #XML
https://kushaldas.in/posts/in-the-land-of-xml.html

2026-03-05 21:28:11 UTC

- reply

https://pyuppsala.readthedocs.io/en/latest/examples.html here are some examples in the docs.

2026-03-05 18:06:56 UTC

- reply

Enjoy :)

2026-03-05 18:04:26 UTC

Help needed: Someone removed the #PyLadies #stockholm admins and changed the name of the meetup group, changed logo/header photos of the past event. I wrote about the person and their post in linkedin https://www.linkedin.com/feed/update/urn:li:activity:7435384140042039297/ I hope the larger #python #community can comment in the linkedin post and point out why this is bad. Please boost for more reach.

2026-03-05 09:31:05 UTC

I published the #python binding for my #XML library called pyuppsala https://pypi.org/project/pyuppsala/
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/116/175/865/869/018/681/original/63f52db62f40b0d1.png

2026-02-27 14:21:25 UTC

https://www.thelocal.se/20260227/ombudsman-to-re-investigate-waiting-times-at-swedish-migration-agency it seems the current waiting time reached 47 months :D #sweden #migration

2026-02-26 14:35:59 UTC

I don't know what the #Swedish industry is thinking about #hiring talented folks from outside of Sweden but https://www.riksdagen.se/sv/dokument-och-lagar/dokument/motion/kunskapstest-i-svenska-som-en-del-i-svenskt_hd022283/ putting 8 years minimal waiting and this (from the link) kind of pressure to learn the language is more of punishment than anything else. This particular politician wants people to know Class 9 level Swedish to get citizenship. #migration #sverige

2026-02-26 10:42:38 UTC

A very clear and simple explanation of the selective disclosure and zero knowledge proof (#ZKP) in the digital-wallet world from @npub1t0y…gqz9 https://siros.org/blog/zero-knowledge-proofs-selective-disclosure-and-the-future-of-scalable-wallets
Many people know a lot, but the skill of explaining things to mass is different skill set. I wish to write this clearly.

2026-02-26 09:40:11 UTC

- reply

safe travels :)

2026-02-26 08:55:21 UTC

- reply

thank you, I am also using Caddy and finally solved the issues. there were issues related to .well-known and "Access-Control-Allow-Origin" and opening up more different ports for coturn and livekit and then some more configuration was needed.

2026-02-26 07:37:15 UTC

- reply

manual, I guess this is firewall issue.

2026-02-26 07:09:43 UTC

In a test #matrix / #element setup via containers when I am trying to make a call via "Element X" app I am getting "MISSING_MATRIX_RTC_FOCUS" error. Any tips? #devops #sysadmin
Please boost for more focus.

2026-02-25 20:13:06 UTC

- reply

Say "hi" to Odin please.

2026-02-25 14:22:29 UTC

To the wider #XML and #XMLSEC folks can you please verify this example of #XSW attack and defense makes sense to you? https://github.com/kushaldas/secexample #security

2026-02-24 21:15:10 UTC

- reply

Thank you :) I am building the stack for SAML, this is the base. https://crates.io/crates/bergshamra is the second layer.
@npub1tl7…rlqf

2026-02-24 21:01:39 UTC

- reply

Yay 🎉 🎉 Please let me know if I am missing something.
@npub1tl7…rlqf

2026-02-24 19:39:35 UTC

- reply

I am missing all the context :)

2026-02-24 16:41:11 UTC

RE: https://toots.dgplug.org/@kushal/116126397672236446
Added a section on #Security #hardening #XSW #XML #SAML in this release.
#note10jz…3c59

2026-02-24 15:50:46 UTC

- reply

heh, the image shows wrong version :)

2026-02-24 15:50:06 UTC

Along with the #XML library I also have a #rust #rustlang #xmlsec replacement library https://crates.io/crates/bergshamra Is there anyone in my timeline who can play around/test/verify? #security #saml

2026-02-24 15:35:04 UTC

I have released new version of https://crates.io/crates/uppsala my new #XML library in #rust #rustlang. I am wondering if any Rust #XML user is in my timeline who can try this out. The latest version should be good in performance in x86_64 machines.

2026-02-22 15:31:55 UTC

- reply

I was stuck in the middle of publishing a group crates, finally managed to publish them one by one from the workspace (with 10 minutes gap between). https://crates.io/crates/bergshamra Please have a look if you have free time :)

2026-02-22 14:34:12 UTC

Anyone from #crates #rustlang support/admin team here in my timeline #rust? https://crates.io

2026-02-22 12:32:58 UTC

- reply

Yes.

2026-02-22 11:36:06 UTC

I released a small #XML library in #rustlang #rust https://crates.io/crates/uppsala without any dependency and okay in performance (not as fast as #roxmltree), but this will give me a one library to both parse and write XML as needed.

2026-02-22 08:53:44 UTC

- reply

Thank you for pointing that out. My SPEC reading game is not good enough it seems.

2026-02-22 08:34:26 UTC

Dear #XML #security and #cryptography folks in my timeline, should the DH-ES for XMLENC allows 1024-bit DH key? I added a `p>=2048` check but that makes my code to fail in 1 of the #xmlsec1 existing testcase. @npub1t0y…gqz9

2026-02-21 10:17:54 UTC

- reply

I was in the mood of "how difficult will it be to write full XML implementation from scratch?" and now i have the answer.

2026-02-21 09:57:35 UTC

Dealing with some very old magic from yesterday, #XML.

2026-02-19 12:21:10 UTC

My typing game finally slaps.

2026-02-19 08:41:08 UTC

- reply

Hi there :) Are you on IRC/matrix or #signal ? if you have some time for a chat :)

2026-02-19 08:37:05 UTC

After 2005 for the first time I am looking at #Java.

2026-02-18 10:20:35 UTC

Swedish migration rules are telling people not to come to #Sweden with a hope for future https://www.thelocal.se/20260217/swedish-migration-court-denies-teen-deportation-appeal-in-guiding-ruling

2026-02-16 21:57:45 UTC

Is anyone in my timeline using #graalpy #graalvm ? #python

2026-02-09 16:17:38 UTC

- reply

They are saying this is helping to keep the criminal folks away from citizenship. Don't ask anyone for details though.

2026-02-09 15:16:15 UTC

Idag driver #Sverige igenom lagar som tvingar oss att vänta i åtta år på #medborgarskap, samtidigt som resandet är mycket begränsat under dessa åtta år. Detta förstör både människors karriärer och liv. https://www.svt.se/nyheter/inrikes/skarpta-krav-for-svenskt-medborgarskap

2026-02-09 15:12:48 UTC

Today #Sweden pushing the laws to make us wait for 8 years for #citizenship while traveling is very much restricted during these 8 years. Destroying people's career and life at the same time.

2026-02-02 09:21:22 UTC

- reply

welcome back :)

2026-02-01 12:19:03 UTC

- reply

Grattis :)

2026-02-01 10:46:06 UTC

I have a whole-day meeting in March and I have to start planning to learn all related #Swedish words and phrases for it.

2026-01-31 10:39:48 UTC

RE: https://floss.social/@karen/115989273871852642
I can see @npub1fz8…mmaw :)
#note1das…a830

2026-01-31 10:36:20 UTC

Dear friends in #FOSDEM I am writing this guide (and hoping to keep it updated as needed) for phone #security and #privacy features in #iOS #Android and @npub1kwa…e0nj #GrapheneOS https://security.kushaldas.se/chapter_1.html Please boost and share to your friends. Also available in Swedish language.

2026-01-31 10:30:12 UTC

- reply

https://security.kushaldas.se/sv/grapheneos_security.html

2026-01-31 09:39:14 UTC

- reply

also I guess I misunderstood the Swedish word. That is the safest option for people to use, just that they have to buy Pixel phones (for now).

2026-01-31 09:25:43 UTC

- reply

Jag har det, men jag behöver verifiera det. Kanske kan du göra det :) Ge mig lite tid.

2026-01-31 09:20:20 UTC

- reply

Missing you all :(
@npub1yau…atjv

2026-01-31 08:37:30 UTC

RE: https://mastodon.social/@hugovk/115988796370614877
So happy to see that quote on the #FOSDEM stage. Some people freaked out when I gave the lighting talk "All code is political" a few hours ago in #PyCon
#note1rck…xwch

2026-01-31 07:55:49 UTC

Jag började skriva ner mina anteckningar om säkerhets- och integritetsfunktioner för mobiltelefoner.
https://security.kushaldas.se/sv/chapter_1.html
https://tootsmedia.dgplug.org/toots-dgplug/media_attachments/files/115/988/634/608/708/901/original/fa0b9c873ed557bf.png

2026-01-30 09:03:00 UTC

- reply

Congratulations :)

2026-01-30 08:32:43 UTC

Anyone from #google #gemini team here?