Stas Skipper
0 Followers · 0 Following

  • My pronounces are: your/fucking/boss

  • Joined on 2025-09-03
Repositories Projects Packages Public Activity Starred Repositories
Skipper pushed to refactor-integrity-check at MarketTakers/arbiter 2026-04-18 11:39:17 +00:00
929d50b589 housekeeping(server): clean too-broad visibility markers and organize imports
70acfc99b5 merge: refactor-integrity-check into main
62dff3f810 Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main
6e22f368c9 refactor(hashing): introduce Hashable derive macro and migrate server types
Compare 4 commits »
Skipper created branch refactor-integriy-check in MarketTakers/arbiter 2026-04-18 11:38:26 +00:00
Skipper pushed to refactor-integriy-check at MarketTakers/arbiter 2026-04-18 11:38:26 +00:00
929d50b589 housekeeping(server): clean too-broad visibility markers and organize imports
70acfc99b5 merge: refactor-integrity-check into main
Compare 2 commits »
Skipper deleted branch push-zmvtzuwrnyyv from MarketTakers/arbiter 2026-04-17 19:20:52 +00:00
Skipper merged pull request MarketTakers/arbiter#89 2026-04-17 19:20:51 +00:00
housekeeping(server): dependencies upgrade
Skipper pushed to main at MarketTakers/arbiter 2026-04-17 19:20:51 +00:00
28f84d03ab Merge pull request 'housekeeping(server): dependencies upgrade' (#89) from push-zmvtzuwrnyyv into main
e88df432fb housekeeping(server): dependencies upgrade
Compare 2 commits »
Skipper pushed to refactor-integrity-check at MarketTakers/arbiter 2026-04-17 19:05:40 +00:00
4a8e51ef32 docs: updated to new auth challenge format and removed stale TOCTOU race condition note
9ee86afc19 fix(useragent): now using new challenge format
790026e93b fix(server::tests): api surface of auth challenge changed
0e09afda5d refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
51e6571d80 refactor(server): now keeps track of useragents, instead of
Compare 7 commits »
Skipper created pull request MarketTakers/arbiter#90 2026-04-16 16:44:02 +00:00
refactor-integrity-check
Skipper pushed to refactor-integrity-check at MarketTakers/arbiter 2026-04-16 16:39:59 +00:00
f49e995c2f WIP: kameo::messages wiring for transport generalization
Skipper created branch refactor-integrity-check in MarketTakers/arbiter 2026-04-16 16:39:58 +00:00
Skipper created pull request MarketTakers/arbiter#89 2026-04-14 17:10:55 +00:00
housekeeping(server): dependencies upgrade
Skipper created branch push-zmvtzuwrnyyv in MarketTakers/arbiter 2026-04-14 17:10:45 +00:00
Skipper pushed to push-zmvtzuwrnyyv at MarketTakers/arbiter 2026-04-14 17:10:45 +00:00
e88df432fb housekeeping(server): dependencies upgrade
Skipper commented on issue MarketTakers/arbiter#79 2026-04-14 16:27:44 +00:00
Not using quantum-resistant schemes

Useful top-level research: https://gemini.google.com/share/0d54d7176359

quite focused on blockchain itself. Sadly, not much can be done from our side, aside from migrating our own auth

Skipper pushed to push-wxnlsulvnrpz at MarketTakers/arbiter 2026-04-14 13:31:27 +00:00
8c4c63f51e WIP: kameo::messages wiring for transport generalization
87ee0fe87b feat(user-agent): add VaultGate for sealed vault authentication
205227a3df fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly
a4070e7df7 fix(useragent): unsafe, but working implementation of ml-dsa
6b8da567dd fix(server::user_agent): useragents now self-sign themselves on bootstrap
Compare 6 commits »
Skipper created branch push-wxnlsulvnrpz in MarketTakers/arbiter 2026-04-14 13:31:27 +00:00
Skipper commented on pull request MarketTakers/arbiter#83 2026-04-11 08:07:44 +00:00
security(server): bind grant revocation state (revoked_at) to integrity hash

mixing concerns: should create a new business-object for signing containing this field

Skipper suggested changes for MarketTakers/arbiter#83 2026-04-11 08:07:44 +00:00
security(server): bind grant revocation state (revoked_at) to integrity hash
Skipper commented on pull request MarketTakers/arbiter#83 2026-04-11 08:07:10 +00:00
security(server): bind grant revocation state (revoked_at) to integrity hash

We discuseed this: don't mix concerns

Skipper closed pull request MarketTakers/arbiter#88 2026-04-11 08:06:21 +00:00
security(useragent): validate server cert fingerprint and host instead of accepting all certificates