zofrex (@zofrex) header
zofrex (@zofrex) profile picture

Any Resem­blance to Ac­tual Persons, Living or Dead, is Purely Co­incidental. Cybersecurity policymaker for my own blog. He/him.

London
Joined April 2009
Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)Photo by zofrex (@zofrex)
I feel like the vibes have really turned for the worse here. I'm giving Bluesky a go — it seems nice! And it's clicking for me in a way that Mastodon never did. Come say hi over there! 👋 I'm @zofrex.bsky.social
1
1
32
zofrex retweeted
11 November 2025.
146
354
137
4,613
290,252
Oh wow. It's been a year! Good job, everyone! Here's to another year 🍾 howmanydayssinceajwtalgnonev…
2
40
Friendly reminder: the YubiKey will look like this after someone performs the side-channel attack and cloning attempt. You’d…probably notice.
18
172
10
1,521
125,448
1
49
zofrex retweeted
Make his finest asset yours Follow & Repost with #XboxCheekyControllerSweepstakes for a chance to win a custom Xbox Series X console & 2 Cheeky Controllers designed by Deadpool.‌ Ages 18+. Ends 8/11/24. Rules: xbx.lv/4cxoA4B @Marvel Studios' Deadpool and Wolverine, in theaters July 26
36,307
182,897
135,623
153,315
25,656,557
Fuck Keir Starmer. At least tories are honest about being tories. If you want the policies Labour stands for, vote Conservative, it's the same stuff but their heart's really in it.
Beth Rigby, "You could raise taxes on the top 5%" Keir Starmer, "It's important to stand up and say I can't afford to do what I said I would do before" Beth Rigby, "Why can't you afford to raise taxes on the top 5% of earners?" Keir Starmer, "To simply stick with something which you know you can't afford" Beth Rigby, "You can afford to raise taxes on higher earners" Keir Starmer, "There are some things we now can't afford because of the damage done to the economy" Stellar questioning by @BethRigby and the answer remains: how is raising taxes on the top 5% something that can't be afforded? 🤷‍♂️
1
69
Councillor Seema Kumar wasn't happy that I posted pictures of her illegal number plate on SM. So she sends @ealingMPS around to gag me. So next time you call the police and they do nothing, it's because they are dealing with real criminals like me. – at Ealing, London
133
74
20
730
341,166
I think its easy for us to say "just do the basics" but has anyone actually ever enumerated the basics...there's a lot there...
17
10
2
99
39,409
Made it to 278 days but SharePoint reset the counter howmanydayssinceajwtalgnonev…
1
3
1
10
1,978
Hi Internet! I'm Drew and THIS IS MY FACE. If this GIF has ever brought you joy in the past, I humbly ask you to consider making a donation to the National MS Society. It would mean a lot to me and to those I know affected by the disease! Donate at BlinkingGuy.com
69
5,137
104
14,520
1,086,428
A startup has bought a domain associated with your brand without your permission and run your content through an AI engine, linking to their company
2
13
4
59
16,587
Modern tech companies in a nutshell: wanting to exploit a valuable public good that other people made and gave away for free, to make a quick profit, even if it destroys it in the process. Gross.
Sorry, but archive.org is down temporarily-- working to restore service. (details: this is our second blast of abusive traffic from an AWS customer today apparently from an AI company harvesting Internet Archive texts at an extreme rate)
1
120
We found an unopened box of Duke Nukem Atomic games! And we're gonna give some away--to THREE lucky winners! Just RETWEET, LIKE & FOLLOW. Each winner gets: A Duke CD from this box, a Duke mouse pad, a leather Duke coaster, a Duke 1996 bumper sticker & signed letterhead!
248
3,521
69
4,290
280,614
This is really going to blow your mind but the correct way to back up your Google Authenticator is to write down the backup codes that the website tells you to write down as a backup 🤯
2
88
Dangerous advice. Every site you add Google Authenticator to shows you backup codes when you set it up. Oddly enough, the backup codes are what you're supposed to back up. For some people & some threat models, backing up the TOTP seeds in the cloud works. But not everyone.
This quoted post is unavailable.
1
168
If you back up your Authenticator in the cloud like that, you are not using it as intended. That means you need to be really, really sure that what you're doing is OK, and that means you can't recommend this without caveats to everyone.
1
107
Look, I'm not going to say software engineering is perfect, but we're usually held to a higher standard than being 100x off on high school level maths
My favorite takes are when people see a journalist (often me) make a mistake and then are like “see, this is the whole problem with journalism!” as if it’s some huge contrast to other industries where everything is perfect all the time.
1
154
Time to reset that counter: Auth0's own jsonwebtoken library was happily declaring alg: none tokens as valid, until yesterday howmanydayssinceajwtalgnonev…
1
2
146
It's a beautiful little trick, but also a very silly footgun that only exists because of the algorithmic agility in the JWT spec. It's possible to write libraries that protect against it, but it's hard. With a good spec, this simply would not be possible in the first place.
1
63
If developers keep making the same mistakes when using a library, it's a bad library. If libraries keep making the same mistakes when implementing a spec, it's a bad spec.
1
3
138