Johnathan Corgan's avatar
Johnathan Corgan
npub19wav...8p6k
🎢 Older now, but still running against the wind 🎢 Scientist, engineer, consultant, pilot. Slinger of bits and reducer of gradients. EN/ES ☸️
Johnathan Corgan's avatar
jcorgan 1 month ago
GM β˜• I love the smell of freedom packets in the morning!
Johnathan Corgan's avatar
jcorgan 1 month ago
GM β˜• A full night's sleep is underrated. But why do I still need coffee?
Johnathan Corgan's avatar
jcorgan 1 month ago
GM β˜• The other day I had to send a FAX, play voicemail phone tag, and deal with correspondence by postal mail. Ah, to be young again 😏
Johnathan Corgan's avatar
jcorgan 1 month ago
GM β˜• It is a thoroughly satisfying feeling seeing the FIPS mesh networking software enable so many different use cases, especially ones I would never have thought of in the first place. But it's not without a bit of anxiety--real world usage means real world consequences of screwing up. I put a lot of effort into specification, review, adversarial testing, and documentation, but that of course isn't always enough. Your bug reports, feature requests, and code contributions are the kind of "closed loop" feedback needed to keep things on track. Anyway, thanks to everyone for deploying FIPS and helping make it better.
Johnathan Corgan's avatar
jcorgan 1 month ago
image I was supposedly retired from open source but something happened.
Johnathan Corgan's avatar
jcorgan 1 month ago
Fallacies of distributed computing: The network is reliable. Latency is zero. Bandwidth is infinite. The network is secure. Topology doesn't change. There is one administrator. Transport cost is zero. The network is homogeneous. - L. Peter Deutsch, Sun Microsystems, 1994.
Johnathan Corgan's avatar
jcorgan 1 month ago
image Learning Chinese geography, one distillery at a time.
Johnathan Corgan's avatar
jcorgan 1 month ago
fips-initramfs 0.1.0 is out. Unlock a LUKS-encrypted server over a FIPS mesh, from anywhere. No static IP, no port forwarding, no inbound reachability at all. The machine dials out to its peers during early boot and comes up at the same mesh address every time. You record that address once at install, then unlock with a single ssh command. Console passphrase entry always still works, so a failure leaves you at the normal prompt instead of stranded. Tested end to end on Debian 12 and 13 and Ubuntu 22.04, 24.04 and 26.04: real encrypted machines, booted and unlocked over a live mesh. MIT licensed, .deb for amd64: #fips #linux #luks
Johnathan Corgan's avatar
jcorgan 2 months ago
GM β˜• "Now, here, you see, it takes all the running you can do, to keep in the same place. If you want to get somewhere else, you must run at least twice as fast as that!" - Unknown maintainer, after his fifth unsolicited LLM security review
Johnathan Corgan's avatar
jcorgan 3 months ago
GM β˜• In spite of the somber mood surrounding recent events, I'm pretty excited to be traveling this week to join the second half of @Sovereign Engineering eighth cohort. I have found my tribe again πŸ˜€
↑