Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

blog.filippo.io

Filippo.io

Get the latest updates from Filippo.io directly as they happen.

Follow now 202 followers

Latest posts

Last updated 7 days ago

The Geomys Standard of Care

7 days ago

One of the most impactful effects of professionalizing open source maintenance is...

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

20 days ago

Lack of memory safety is such a predominant cause of security issues...

Maintainers of Last Resort

3 months ago

Geomys is an organization of professional open source maintainers, focused on a...

Cross-Site Request Forgery

3 months ago

Cross-Site Request Forgery (CSRF) is a confused deputy attack where the attacker...

Go Assembly Mutation Testing

3 months ago

While maintaining and developing the Go cryptography standard library, we often spend...

Encrypting Files with Passkeys and age

4 months ago

Typage (age-encryption on npm) is a TypeScript1 implementation of the age file...

You Should Run a Certificate Transparency Log

4 months ago

Hear me out. If you are an organization with some spare storage...

Benchmarking RSA Key Generation

10 months ago

RSA key generation is both conceptually simple, and one of the worst...

frood, an Alpine initramfs NAS

11 months ago

My NAS, frood, has a bit of a weird setup. It’s just...

Accumulated Test Vectors

about 1 year ago

I like tests. I especially like reusable test vector libraries. Sometimes test...

The FIPS Compliance of HKDF

about 1 year ago

HKDF is an HMAC-based key-derivation function specified in RFC 5869. It’s nice...

Let’s All Agree to Use Seeds as ML-KEM Keys

about 1 year ago

Last week, NIST published the final version of the ML-KEM[1] specification, FIPS...