Let’s Encrypt suffered from a major service disruption today leaving users unable to access various services. The cause of the problem seems to have been an update to Boulder (ACME CA) which has since been reversed.

It’s live, prepare to self-destruct in 3..2..1..

HTTP Public Key Pinning (HPKP)

A new HTTP header that allows web host operators to instruct user agents to remember (“pin”) the hosts’ cryptographic identities over a period of time. During that time, user agents (UAs) will require that the host presents a certificate chain including at least one Subject Public Key Info structure whose fingerprint matches one of the pinned fingerprints for that host. Source: RFC 7469

Referrers from a domain called anonymizeme.pro have been filling up my logs lately. I initially believed it was visitors using an anonymizing service, but alas, it’s yet another referrer scam.

It’s time to take privacy to the next level and ship this website off to the dark web. As a longtime Tor user it has been a source of embarrassment to not have my content available in onionland. However, that’s all in the past and this website is currently available at slackiuxopmaoigo.onion

I’ve also mentioned a few times that I’m sick and tired of WordPress so I’ve gone and replaced it with the Hugo website engine (on the new site). If you’re fed up with WordPress and want something simple and powerful I would suggest giving Hugo a shot, it’s that awesome. By the way, I have not yet migrated all my old content to Hugo, but I’m hoping to find a solution for this in the future.

In an attempt to have a WordPress theme optimized for running on the Raspberry Pi 3, I went through the hurdles of writing my own theme. Among my goals was to create something entirely free of third party CSS and JavaScript frameworks. Actually, I wanted a theme free from JavaScript altogether and in my opinion there are already more than enough websites built on the Bootstrap framework (you’ll recognize them, they all look the same).

By working in the “web business” I do get my hands on a fair share of malware kits as attackers continuously try to infect any website available with their automated scripts.