Matthew Garrett

A reminder that I am no longer here, but am instead here.

Hello!

I recently won a lawsuit against Roy and Rianne Schestowitz, the authors and publishers of the Techrights and Tuxmachines websites.

AWS had an outage today and Signal was unavailable for some users for a while.

I had to rent a house for a couple of months recently, which is long enough in California that it pushes you into proper tenant protection law.

There's a lovely device called a pistorm, an adapter board that glues a Raspberry Pi GPIO bus to a Motorola 68000 bus.

LWN wrote an article which opens with the assertion "Linux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a key from Microsoft that is set to expire in September".

Single signon is a pretty vital part of modern enterprise security.

23 years ago I was in a bad place.

I'm lucky enough to have a weird niche ISP available to me, so I'm paying $35 a month for around 600MBit symmetric data.

As I wrote in my last post, Twitter's new encrypted DM infrastructure is pretty awful.

(Edit: Twitter could improve this significantly with very few changes - I wrote about that here.

Almost two years ago, Twitter launched encrypted direct messages.

As part of their "Defective by Design" anti-DRM campaign, the FSF recently made the following claim: Today, most of the major streaming media platforms utilize the TPM to decrypt media streams, forcefully placing the decryption out of the user's control (…

The distinction between hardware and software has historically been relatively easy to understand - hardware is the physical object that software runs on.

Sometimes you want to restrict access to something to a specific set of devices - for instance, you might want your corporate VPN to only be reachable from devices owned by your company.

Short version: Secure Boot Advanced Targeting and if that's enough for you you can skip the rest you're welcome.

(The issues described in this post have been fixed, I have not exhaustively researched whether any other issues exist) Feeld is a dating app aimed largely at alternative relationship communities (think "classier Fetlife" for the most part), so unsurprisin…

A while back, I wrote about using the SSH agent protocol to satisfy WebAuthn requests.

Closing arguments in the trial between various people and Craig Wright over whether he's Satoshi Nakamoto are wrapping up today, amongst a bewildering array of presented evidence.

We have a cabin out in the forest, and when I say "out in the forest" I mean "in a national forest subject to regulation by the US Forest Service" which means there's an extremely thick book describing the things we're allowed to do and (somewhat longer)…

Libraries are collections of code that are intended to be usable by multiple consumers (if you're interested in the etymology, watch this video).

Earlier this year, after Github accidentally committed their private RSA SSH host key to a public repository, I wrote about how better support for SSH host certificates would allow this sort of situation to be handled in a user-transparent way without any…

There's a decent number of laptops with fingerprint readers that are supported by Linux, and Gnome has some nice integration to make use of that for authentication purposes.

"Why does ACPI exist" - - the greatest thread in the history of forums, locked by a moderator after 12,239 pages of heated debate, wait no let me start again.