<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Duesee&#39;s Blog</title>
		<link>https://duesee.dev/</link>
		<description>Recent content on Duesee&#39;s Blog</description>
		<generator>Hugo</generator>
		<language>en-us</language>
		
		
		
		
			<lastBuildDate>Sun, 24 Nov 2024 13:37:57 +0100</lastBuildDate>
		
			<atom:link href="https://duesee.dev/index.xml" rel="self" type="application/rss+xml" />
			<item>
				<title>(Avoid) implementing STARTTLS</title>
				<link>https://duesee.dev/p/avoid-implementing-starttls/</link>
				<pubDate>Sun, 24 Nov 2024 13:37:57 +0100</pubDate>
				<guid>https://duesee.dev/p/avoid-implementing-starttls/</guid>
				<description>&lt;h1 id=&#34;avoid-implementing-starttls&#34;&gt;(Avoid) Implementing STARTTLS&lt;/h1&gt;&#xA;&lt;p&gt;STARTTLS seems simple.&#xA;It consists of a single message to switch to encryption.&#xA;But as you zoom in, you start to see&#xA;&lt;a href=&#34;https://nvd.nist.gov/vuln/detail/CVE-2020-9941&#34;&gt;increasingly&lt;/a&gt;&#xA;&lt;a href=&#34;https://nvd.nist.gov/vuln/detail/CVE-2020-9941&#34;&gt;intricate&lt;/a&gt;&#xA;&lt;a href=&#34;https://nvd.nist.gov/vuln/detail/CVE-2020-15685&#34;&gt;issues&lt;/a&gt;&#xA;&lt;a href=&#34;https://nvd.nist.gov/vuln/detail/CVE-2020-15917&#34;&gt;that&lt;/a&gt;&#xA;&lt;a href=&#34;https://nvd.nist.gov/vuln/detail/CVE-2020-14954&#34;&gt;keep&lt;/a&gt;&#xA;&lt;a href=&#34;https://gitlab.com/muttmua/mutt/-/issues/246#note_366182002&#34;&gt;unfolding&lt;/a&gt;.&#xA;&lt;a href=&#34;https://www.usenix.org/conference/usenixsecurity21/presentation/poddebniak&#34;&gt;It&amp;rsquo;s best to avoid it&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;figure&gt;&lt;a href=&#34;#ZgotmplZ&#34;&gt;&lt;img src=&#34;https://duesee.dev/p/avoid-implementing-starttls/Sierpinski_carpet_6.svg&#34; width=&#34;400em&#34;&gt;&lt;/a&gt;&lt;figcaption&gt;&#xA;&#x9;&#x9;&#x9;&lt;h4&gt;Sierpiński carpet. Infinite perimeter and zero area. Start with a square, split the square into 9 equal squares, remove the central square, and continue recursively.&lt;/h4&gt;&#xA;&#x9;&#x9;&lt;/figcaption&gt;&#xA;&lt;/figure&gt;&#xA;&#xA;&lt;h2 id=&#34;yet-someone-needs-it&#34;&gt;Yet&amp;hellip; someone needs it.&lt;/h2&gt;&#xA;&lt;p&gt;You start bargaining: You know that STARTTLS is a &lt;a href=&#34;https://dl.acm.org/doi/10.1145/2815675.2815695&#34;&gt;real-world&lt;/a&gt; &lt;a href=&#34;https://www.rfc-editor.org/rfc/rfc7258&#34;&gt;attack target&lt;/a&gt;.&#xA;And you know that it&amp;rsquo;s an &lt;a href=&#34;https://nostarttls.secvuln.info&#34;&gt;easy target&lt;/a&gt;.&#xA;You &lt;em&gt;really&lt;/em&gt; want to avoid it.&#xA;You try to make STARTTLS &lt;a href=&#34;https://docs.rs/imap-types/latest/imap_types/#features&#34;&gt;unattractive&lt;/a&gt;, convince your colleagues to repeat their &lt;a href=&#34;https://archive.fosdem.org/2024/schedule/event/fosdem-2024-2179--protocols-security-of-starttls-in-the-e-mail-context/&#34;&gt;talk about STARTTLS at FOSDEM&amp;rsquo; 24&lt;/a&gt;, submit a follow-up talk to FOSDEM &amp;lsquo;25, too, and &lt;a href=&#34;https://duesee.dev/p/avoid-implementing-starttls&#34;&gt;keep repeating that we should avoid it&lt;/a&gt;&lt;/p&gt;</description>
			</item>
			<item>
				<title>The European Union must keep funding free software</title>
				<link>https://duesee.dev/p/the-european-union-must-keep-funding-free-software/</link>
				<pubDate>Sat, 20 Jul 2024 15:37:57 +0200</pubDate>
				<guid>https://duesee.dev/p/the-european-union-must-keep-funding-free-software/</guid>
				<description>&lt;h1 id=&#34;the-european-union-must-keep-funding-free-software&#34;&gt;The European Union must keep funding free software&lt;/h1&gt;&#xA;&lt;p&gt;Initially publishead by &lt;a href=&#34;https://ps.zoethical.org/pub/lettre-publique-aux-ncp-au-sujet-de-ngi/&#34;&gt;petites singularités&lt;/a&gt;.&#xA;English translation provided by &lt;a href=&#34;https://www.ow2.org/view/Events/The_European_Union_must_keep_funding_free_software_open_letter&#34;&gt;OW2&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If you want to sign the letter, please publish the letter on your website and complete the table &lt;del&gt;below&lt;/del&gt; &lt;a href=&#34;https://pad.public.cat/lettre-NCP-NGI&#34;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h2 id=&#34;open-letter-to-the-european-commission&#34;&gt;Open Letter to the European Commission&lt;/h2&gt;&#xA;&lt;p&gt;Since 2020, Next Generation Internet (&lt;a href=&#34;https://www.ngi.eu&#34;&gt;NGI&lt;/a&gt;) programmes, part of European Commission&amp;rsquo;s Horizon programme, fund free software in Europe using a cascade funding mechanism (see for example NLnet&amp;rsquo;s &lt;a href=&#34;https://www.nlnet.nl/commonsfund&#34;&gt;calls&lt;/a&gt;). This year, according to the Horizon Europe working draft detailing funding programmes for 2025, we notice that Next Generation Internet is not mentioned any more as part of Cluster 4.&lt;/p&gt;</description>
			</item>
			<item>
				<title>About</title>
				<link>https://duesee.dev/about/</link>
				<pubDate>Tue, 22 Aug 2023 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/about/</guid>
				<description>&lt;h1 id=&#34;hello-world&#34;&gt;Hello, World!&lt;/h1&gt;&#xA;&lt;p&gt;I&amp;rsquo;m Damian Poddebniak, a software engineer and IT security researcher who believes in free software, open access to knowledge, and a world with net-zero greenhouse gas emissions.&#xA;I always enjoyed programming but fell in love with (the) Rust (community).&#xA;Thus, expect to read a lot about Rust in this blog!&#xA;However, I am also human and may write about other things.&lt;/p&gt;&#xA;&lt;h1 id=&#34;freelancing&#34;&gt;Freelancing&lt;/h1&gt;&#xA;&lt;p&gt;I recently started a journey as a freelancing software engineer to work on projects and with clients that share my passion for open-source software.&lt;/p&gt;</description>
			</item>
			<item>
				<title>A gentle introduction to IMAP</title>
				<link>https://duesee.dev/p/a-gentle-introduction-to-imap/</link>
				<pubDate>Thu, 20 Jul 2023 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/p/a-gentle-introduction-to-imap/</guid>
				<description>&lt;h1 id=&#34;hello-world-again&#34;&gt;Hello, World!, again!&lt;/h1&gt;&#xA;&lt;p&gt;When asked for advice on what to do as a fresh Ph.D. student a few months ago, I said confidently: &amp;ldquo;Create a blog and publish regularly.&amp;rdquo; &lt;sup id=&#34;fnref:1&#34;&gt;&lt;a href=&#34;#fn:1&#34; class=&#34;footnote-ref&#34; role=&#34;doc-noteref&#34;&gt;1&lt;/a&gt;&lt;/sup&gt;&#xA;So&amp;hellip; two and a half years, a move to Hamburg, an excursion as a cryptography engineer, and a few new hobbies later, here&amp;rsquo;s the next post!&lt;/p&gt;&#xA;&lt;p&gt;Joking aside, the last blog post was crucial to me as it paved the way toward a &lt;a href=&#34;https://nlnet.nl/project/imap-codec/&#34;&gt;grant from the NLnet Foundation&lt;/a&gt;! &lt;a href=&#34;https://nlnet.nl/&#34;&gt;NLnet&lt;/a&gt; heavily contributes to an open information society and helps to fix the Internet. I recommend looking at &lt;a href=&#34;https://nlnet.nl/foundation/can_do.html#helpout&#34;&gt;what NLnet can do for you&lt;/a&gt; and thinking about &lt;a href=&#34;https://nlnet.nl/donating/&#34;&gt;what you can do for NLnet&lt;/a&gt;!&lt;/p&gt;</description>
			</item>
			<item>
				<title>Type-Driven Development</title>
				<link>https://duesee.dev/p/type-driven-development/</link>
				<pubDate>Tue, 26 Jan 2021 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/p/type-driven-development/</guid>
				<description>&lt;h1 id=&#34;hello-world&#34;&gt;Hello, World!&lt;/h1&gt;&#xA;&lt;p&gt;I was &lt;a href=&#34;https://twitter.com/SwiftOnSecurity/status/1479598531803590666&#34;&gt;recently reminded&lt;/a&gt; about &lt;a href=&#34;https://en.wikipedia.org/wiki/Ward_Cunningham&#34;&gt;Cunningham&amp;rsquo;s Law&lt;/a&gt; &amp;hellip;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&amp;ldquo;The best way to get the right answer on the internet is not to ask a question; it&amp;rsquo;s to post the wrong answer.&amp;rdquo; &lt;!-- raw HTML omitted --&gt;&lt;/p&gt;&#xA;&lt;p&gt;&amp;ndash; Ward Cunningham&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&amp;hellip; and it made me think.&lt;/p&gt;&#xA;&lt;p&gt;During my Ph.D. I used &lt;a href=&#34;https://obsidian.md&#34;&gt;Obsidian&lt;/a&gt;, an app to write and cross-reference Markdown documents, to sort my thoughts. However, I didn&amp;rsquo;t share most of it and never discussed it with a broader audience.&lt;/p&gt;</description>
			</item>
			<item>
				<title>Archives</title>
				<link>https://duesee.dev/archives/</link>
				<pubDate>Mon, 25 Jan 2021 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/archives/</guid>
				<description></description>
			</item>
			<item>
				<title>Publications</title>
				<link>https://duesee.dev/publications/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/publications/</guid>
				<description></description>
			</item>
			<item>
				<title>Search</title>
				<link>https://duesee.dev/search/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/search/</guid>
				<description></description>
			</item>
			<item>
				<title>Software</title>
				<link>https://duesee.dev/software/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/software/</guid>
				<description></description>
			</item>
			<item>
				<title>Talks</title>
				<link>https://duesee.dev/talks/</link>
				<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
				<guid>https://duesee.dev/talks/</guid>
				<description></description>
			</item>
	</channel>
</rss>
