Stas Skipper
0 Followers · 0 Following

  • My pronounces are: your/fucking/boss

  • Joined on 2025-09-03
Repositories Projects Packages Public Activity Starred Repositories
Skipper commented on pull request MarketTakers/arbiter#88 2026-04-11 08:06:21 +00:00
security(useragent): validate server cert fingerprint and host instead of accepting all certificates

I appreciate the effort, but sadly this is wrong solution. So first of all, we pin based on root CA, not leaf CA. This means that we check if signer that signed presented certificate by server…

Skipper commented on issue MarketTakers/arbiter#86 2026-04-09 16:55:35 +00:00
suspicious as keywords

I agree. The problem with those is that fucking sqlite dynamically sizes integers. So fucking diesel implement ToSql for sqlite only for i32.

Skipper deleted branch hashing-proc-macro from MarketTakers/arbiter 2026-04-08 00:18:41 +00:00
Skipper merged pull request MarketTakers/arbiter#82 2026-04-08 00:18:41 +00:00
refactor(hashing): introduce Hashable derive macro and migrate server types
Skipper pushed to main at MarketTakers/arbiter 2026-04-08 00:18:41 +00:00
62dff3f810 Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main
6e22f368c9 refactor(hashing): introduce Hashable derive macro and migrate server types
Compare 2 commits »
Skipper approved MarketTakers/arbiter#82 2026-04-08 00:18:36 +00:00
refactor(hashing): introduce Hashable derive macro and migrate server types

LGTM

Skipper deleted branch push-xrxykvkuxpsv from MarketTakers/arbiter 2026-04-07 19:26:57 +00:00
Skipper pushed to main at MarketTakers/arbiter 2026-04-07 19:26:57 +00:00
f3cf6a9438 Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main
a9f9fc2a9d housekeeping(server): fixed clippy warns
d22ab49e3d refactor(server): moved shared module crypto into arbiter-crypto
a845181ef6 docs: ml-dsa scheme everywhere
0d424f3afc refactor(server): migrated auth to ml-dsa
Compare 5 commits »
Skipper merged pull request MarketTakers/arbiter#80 2026-04-07 19:26:55 +00:00
Post-quantum crypto and better useragent security
Skipper closed issue MarketTakers/arbiter#58 2026-04-07 19:04:05 +00:00
Client key is not integrity-protected
Skipper pushed to push-xrxykvkuxpsv at MarketTakers/arbiter 2026-04-07 15:35:05 +00:00
a9f9fc2a9d housekeeping(server): fixed clippy warns
d22ab49e3d refactor(server): moved shared module crypto into arbiter-crypto
Compare 2 commits »
Skipper created pull request MarketTakers/arbiter#80 2026-04-07 13:40:31 +00:00
WIP: Post-quantum crypto and better useragent security
Skipper pushed to push-xrxykvkuxpsv at MarketTakers/arbiter 2026-04-07 13:40:13 +00:00
a845181ef6 docs: ml-dsa scheme everywhere
0d424f3afc refactor(server): migrated auth to ml-dsa
Compare 2 commits »
Skipper created branch push-xrxykvkuxpsv in MarketTakers/arbiter 2026-04-07 13:40:13 +00:00
Skipper opened issue MarketTakers/arbiter#79 2026-04-07 08:09:46 +00:00
Not using quantum-resistant schemes
Skipper closed issue MarketTakers/arbiter#72 2026-04-06 16:34:01 +00:00
Bootstrap token comparison is not constant-time
Skipper pushed to main at MarketTakers/arbiter 2026-04-06 16:33:58 +00:00
1497884ce6 fix(server::bootsrapper): token compare is now constant-time
Skipper closed issue MarketTakers/arbiter#61 2026-04-06 16:27:28 +00:00
User-agent auth accepts integrity-unavailable state while sealed
Skipper commented on issue MarketTakers/arbiter#61 2026-04-06 16:27:28 +00:00
User-agent auth accepts integrity-unavailable state while sealed

Currently it's intended behaviour, because vault could be sealed and verification couldn't be performed

Skipper commented on issue MarketTakers/arbiter#55 2026-04-06 16:26:33 +00:00
Client identity rebinding

#78