Juniperspring

Honda Civics and the Evil Valet

Sat, 13 Jun 2026 00:00:00 +0000

Status update, three years later

Google Calendar, CalDAV, and Home Assistant

Thu, 16 May 2024 00:00:00 +0000

My calendar setup.

Introducing juniperspring.org

Tue, 02 Apr 2024 00:00:00 +0000

Moving away from .xyz domains and why I still like them

React, Formik, and Events

Sat, 30 Mar 2024 00:00:00 +0000

Musings on Formik's API, custom events in React, and why I might leave Formik

SSH Fingerprints, Identicons, and AI Face Generation

Sat, 23 Sep 2023 00:00:00 +0000

While playing around with SSH and Git, I reflected on how SSH’s key fingerprints are essentially an early form of identicon:

The key fingerprint is:
SHA256:xtaA8biLm/Jktn9A/j2sty686uosrRtz0GQIFw6nP2s root@bionic
The key's randomart image is:
+---[RSA 4096]----+
|o +.  .          |
| B .   =         |
|. o o o o        |
| . +  .o o       |
|  + .o. S .      |
|   + .o+         |
|  E.* .+ o       |
| .oO.+  = =      |
|  oBO++oo*oo     |
+----[SHA256]-----+

This made me want to write a blog post about how, now that we have GPU-accelerated terminal emulators¹ and a wide variety of identicon libraries², it would be cool to modularize the SSH key fingerprint generation algorithm. Imagine defining an executable inside your .ssh/config file in addition to an existing VisualHostKey=yes option that, when invoked, would take a public key on stdin and produce an image file on stdout to be displayed directly in your terminal emulator.

The Cleveland Air Show Sucks

Sun, 03 Sep 2023 00:00:00 +0000

The Cleveland Air Show¹² sucks.

Fighter jets kill people; they’re not entertainment
The Cleveland Air Show causes noise pollution
The Cleveland Air Show causes air pollution

Labor Day weekend should be a celebration of the labor movement and workers rights, not a jingoistic endorsement of the military-industrial complex. Why should people across Greater Cleveland put up with the sound of fighter jets buzzing their homes and workplaces? It’s not just on Labor Day itself, either. The exercises start several days in advance. And the organizers have the audacity to charge admittance!

Exploring DNSSEC

Wed, 07 Jun 2023 00:00:00 +0000

A look into the DNS records behind juniperspring.xyz

Using the Ethereum Name Service

Wed, 07 Jun 2023 00:00:00 +0000

Support my work

Honda Civic Reverse Engineering

Wed, 31 May 2023 00:00:00 +0000

Reverse engineering a 2021 Honda Civic and thoughts on the state of automotive security.

Goodbye Gatsby, Hello Hugo

Tue, 30 May 2023 00:00:00 +0000

Migrating the blog from Gatsby to Hugo

Rhodes Tower, Four Dead in Ohio

Mon, 23 Jan 2023 00:00:00 +0000

CSU's etymological connection to the Kent State massacre.

Bi-Directional Authentication with TOTP

Sat, 21 Jan 2023 00:00:00 +0000

Authentication is a two-way street.

Digital Organization

Tue, 01 Nov 2022 00:00:00 +0000

Thoughts on digital minimalism, Linux, and organization.

Locked out of Keybase

Thu, 27 Oct 2022 00:00:00 +0000

How I locked myself out

SSH Comment Injection in OpenWRT

Tue, 20 Sep 2022 00:00:00 +0000

OpenWRT is open source router and Wi-Fi access point software. LuCI is the web-based configuration interface for OpenWRT; one of its features is the ability to import SSH keys. Instead of OpenSSH, OpenWRT uses Dropbear, an SSH server implementation optimized for embedded systems¹.

OpenSSH 8.2, released Feb. 14th, 2020, added support for new FIDO public key types, such as “ecdsa-sk” and “ed25519-sk”². I wanted to see if Dropbear supported these new key types. It was during this time that I discovered a persistent XSS vector in LuCI.

A Love Letter to Open Source Ecology

Tue, 24 May 2022 00:00:00 +0000

Exploring the world of open source and distributive enterprise.