Secure Communication

My Profiles

• @sneak on my BBS (you are invited to join)
• @sneak@sneak.berlin on the ActivityPub fediverse
• @sneak on Hacker News
• @sneak on Wikipedia
• @sneak on self-hosted Gitea
• @sneak on GitHub (deprecated: read why)
• @sneakdotberlin on GitLab (deprecated: read why)
• @sneakdotberlin on Twitter (deprecated: read why)

Other Pages

There are some other pages published here.

Projects

These are projects for which I am responsible.

• Console Do Not Track

Software

The following is some software that I maintain periodically.

• sanelogging (python module) (python, WTFPL)
• tvid (python web application) (python, WTFPL)
• mfer (manifest file generator) (go, WTFPL)
• timingbench (timing benchmarking tool) (go, WTFPL)
• Design rule for Camera File system interface (go, WTFPL)

CVEs

The following are CVEs attributed to me. This is not a comprehensive list of my security research or publications.

• CVE-2015-3774: Three finger press on any word OS-wide on macOS < 10.10.5 transmits the clicked word in cleartext from the machine.
• CVE-2019-19766: Bitwarden uses an insecure KDF
• CVE-2022-32857: M1 (ARM) macOS < 12.5 transmits permanent unchangable hardware identifiers in cleartext from the machine on every OS update.

Ideas

I have more project ideas than I have time to build.

Links

I maintain a list of other useful webpages.

For Context

You are encouraged to read about my personal context.

My Tools

These are the tools that I use.

Words Which Will Make Me Leave The Party

• "heads-down"
• touch base
• cyber.*
• webinar
• infographic

Other Information

• I explicitly opt in to receiving communication under Crocker's Rules.

Posts

• 17 Jul 2015: How To Blog
• 07 Jan 2017: My Current Daily Carry
• 16 Oct 2018: That Time I Tried To Contribute To Open Source Software
• 22 Oct 2018: sneak's Law
• 24 Oct 2018: Javascript Cheatsheet
• 29 Oct 2018: So Much For Tokens
• 21 Feb 2019: Around The World In 40 Days
• 21 Mar 2019: Some Cool Stuff I Found, Q1 2019 Edition
• 30 Mar 2019: Apple Is Not Trying To Screw You (On Hardware, Anyway)
• 30 Mar 2019: Browsers Are Stuck In The 90s
• 21 May 2019: Writing Is Hard For Me
• 29 Sep 2019: Keybase iOS Has A Backdoor
• 11 Oct 2019: Stupid Unix Tricks
• 19 Nov 2019: Your Money Isn't Yours
• 01 Dec 2019: On Communicating Accurately With Americans
• 18 Jan 2020: You Don't Need To See My ID
• 29 Jan 2020: Starlink is a Big Deal
• 04 Feb 2020: Don't Talk About Your Health Unless It's Good
• 10 Feb 2020: Quora Doesn't Know What A Contract Is
• 11 Feb 2020: The Problem With Instagram
• 11 Feb 2020: Your Website Is Likely Broken
• 15 Feb 2020: An Open Offer Of Personal Proxy
• 20 Feb 2020: Discord Is Not An Acceptable Choice For Free Software Projects
• 07 Mar 2020: The Case Against Microsoft and GitHub
• 21 Apr 2020: Normalcy Bias As It Relates To Our Communications Systems
• 04 Jun 2020: If Zoom Is Wrong, So Is Apple
• 28 Jun 2020: The Problem With Police In America
• 08 Aug 2020: Partisan Politics Are Boring
• 29 Oct 2020: Stop Emailing Like A Rube
• 29 Oct 2020: Traffic
• 31 Oct 2020: Goodbye, Twitter.
• 12 Nov 2020: Your Computer Isn't Yours
• 04 Dec 2020: On Trusting Macintosh Hardware
• 02 Feb 2021: macOS 11.2 Network Privacy
• 24 Apr 2021: How Not To Run A Vulnerability Disclosure Program
• 25 Apr 2021: Signal Is Wrecking Your Images and Videos
• 13 Feb 2022: Unstoppable Payments Are Coming.
• 09 Apr 2022: Apple is Still Tracking You Without Consent
• 15 Jan 2023: Apple Has Begun Scanning Your Local Image Files Without Consent
• 05 Oct 2023: Apple OSes Are Insecure By Design To Aid Surveillance
• 10 Jun 2024: My 2024 Code Styleguide