Tessera
Folgen

Torsten Curdt

@tcurdt.bsky.social

CTOish person. Open Source at the ASF. Building Software Infra Teams. Worked at soundcloud, joost, gilt, honeypot and others. Trying to pass on 30y+ of software engineering experience without being grumpy. (Might not always work) Love sailing!

241 Posts446 Follower252 Folgt
Filippo Valsorda@filippo.abyssdomain.expert · 3mo ago

… are fucking kidding me. A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!! This is not what taking the role of supply chain stewards seriously looks like.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog

A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.

wiz.io

Filippo Valsorda@filippo.abyssdomain.expert · 4mo ago

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

A Cryptography Engineer’s Perspective on Quantum Computing Timelines

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

words.filippo.io

Torsten Curdt@tcurdt.bsky.social · 4mo ago

I am not sure that's me just being annoyed, but here is a prediction: Having a good human support team might become an even stronger factor for the success of a company than it was before AI. Remind me in 3 years.

Tuta@tuta.com · 4mo ago

You did it! 🥳 European Parliament just decided that Chat Control 1.0 must stop. This means on April 6, 2026, Gmail, LinkedIn, Microsoft and other Big Techs must stop scanning your private messages in the EU. #PrivacyWins 💪

Bild
Tuta@tuta.com · 5mo ago

🚨No Joke: Conservatives in the EU Parliament (EVP) want the vote on #ChatControl 1.0 to be repeated this Thursday - even though the Parliament already voted NO! 😡 Make sure your MP stays strong. Contact them now! 👉 fightchatcontrol.eu#contact-tool

Screenshot from fightchatcontrol with a template to write to MPs
Torsten Curdt@tcurdt.bsky.social · 6mo ago

Apple not supporting a login to the AppStore on a virtual machine is such a pain. It would be so nice for testing. Why Apple? Why do you hate us developers so much? github.com/utmapp/UTM/i...

macOS Guest - App Store/iCloud Login Failure · Issue #3617 · utmapp/UTM

Describe the issue I have a macOS guest (12.2.1) that works amazingly well with one strange issue - I am unable to log into iCloud nor the App Store. Both fail with the helpful error message "The a...

github.com

Torsten Curdt@tcurdt.bsky.social · 6mo ago

So, apparently IMDB got bought by Amazon ages ago but now pushes the use of the Amazon account. I guess the surprise is only really the time it took. I don't mind allowing to connect accounts - but forcing universal logins is so bad. It always has - it will always will be.

Torsten Curdt@tcurdt.bsky.social · 7mo ago

Alan Dye, the "genius" behind Liquid Glass, is leaving Apple for Meta. Stephen Lemay is taking over. Now there's at least a little hope they might fix things. I can already hear developers and users rejoicing.

Dr Paris Buttfield-Addison@hey.paris · 8mo ago

posted about my Apple ID woes, please share widely? hey.paris/posts/appleid/

20 Years of Digital Life, Gone in an Instant, thanks to Apple

Here’s how Apple “Permanently” locked my Apple ID. I am writing this as a desperate measure. After nearly 30 years as a loyal customer, authoring technical books on Apple’s own programming languages (...

hey.paris

Dr Paris Buttfield-Addison@hey.paris · 8mo ago

yep so my apple account is permanently gone, so I guess time to switch to linux and android eh

Torsten Curdt@tcurdt.bsky.social · 8mo ago

Chat control fight - round two. reclaimthenet.org/eu-council-a... This feels like we are fighting on two fronts at the same time. The blue/brown crowd and the ones that make it hard to argue for the EU. The road to hell is paved with good intentions. fightchatcontrol.eu

EU Council Approves New “Chat Control” Mandate Pushing Mass Surveillance

By disguising coercion as consent, the EU’s plan enlists tech companies as willing agents in its quiet expansion of digital surveillance.

reclaimthenet.org

Torsten Curdt@tcurdt.bsky.social · 8mo ago

Shared package registries and to some extend CI/CD pipelines are becoming more and more of a liability. Providing your CI/CD pipeline with terraform/k8s/ssh access? You better know what you are doing.

Socket@socket.dev · 8mo ago

We have updated this list to include more than 500 packages and 700+ affected versions, as well as a technical analysis of the attack. socket.dev/blog/shai-hu.... cc: @campuscodi.risky.biz @typescript.fm @bleepingcomputer.com @theregister.com