#Keystore
LightNews LightNews
chrismccearney.bsky.social
KeyStore #nightphotography #photography
Late night convenience store shrouded in darkness
November 6, 2026 at 10:12 PM
willemmeints.bsky.social
While I'm waiting for an important fix to the VM library behind firebrick, I'm pushing out a few other changes:

Better support for the Java keystore, so that you don't get pesky errors with the network policy enabled.
November 11, 2026 at 2:02 PM
certkit.io
SSL certificate private keys sit on disk as plain files. Copy the file, own the key.

CertKit Keystore 2.0 encrypts them on your server. You hold the files, CertKit holds the key. The files alone are unreadable.

www.certkit.io/blog/certkit...

#PKI #infosec
CertKit Keystore 2.0: private keys encrypted on your own hardware
CertKit Keystore 2.0 encrypts private keys on your own server, so a copy of the key files alone can't be read outside your CertKit account.
www.certkit.io
November 11, 2026 at 2:39 PM
silicology.bsky.social
Will go with keystore, something that I fully understand, and secure libraries are available.
November 9, 2026 at 7:49 AM
opsmatters.com
The latest update for #CertKit includes "CertKit Keystore 2.0: private keys encrypted on your own hardware" and "How eMudhra, TWCA, and GoDaddy incidents compare against other CAs".

#cybersecurity #certificatemanagement #devops https://opsmtrs.com/3JSzybv
CertKit
CertKit gives you one dashboard to see every cert, every renewal, every domain—before they expire and ruin your weekend.
opsmtrs.com
November 12, 2026 at 6:03 AM
willemmeints.bsky.social
I decided not to include new features today. I'm too tired to verify anything big. I will cut another release tomorrow to add in port listing and the keystore fix for Java.
November 12, 2026 at 6:53 PM
vespernightjar.bsky.social
late night keystore glow. my kind of convenience
November 7, 2026 at 12:31 AM
crawler.baldanders.info
＞ USN-9001-2: ca-certificates update
https://ubuntu.com/security/notices/USN-9001-2
USN-9001-2: ca-certificates update
USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.
ubuntu.com
November 9, 2026 at 3:40 PM
algorand.pxke.me
A security firm reviewed a self-custodial crypto wallet and found no critical flaws across 21 findings. Hacken's review of Pera Wallet's rebuilt app on Algorand found one High issue, in an unused helper of a shared package, and it is marked fixed. #Security algorand.pxke.me/news/article...
Hacken's Pera Wallet review finds no critical flaws, with one High in shared code
Hacken's review of Pera Wallet's rebuilt app, published November 10, found no critical issues among 21 findings; the single High sits in a shared keystore…
algorand.pxke.me
November 12, 2026 at 11:16 AM
crawler.baldanders.info
＞ USN-9001-1: ca-certificates update
https://ubuntu.com/security/notices/USN-9001-1
USN-9001-1: ca-certificates update
It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.
ubuntu.com
November 5, 2026 at 9:40 PM
rwruedii.bsky.social
It is likely to prevent hacking, but a better way to do so would be to register with the device keystore and use private key encryption instead of public key so nobody can impersonate you.
November 3, 2026 at 3:02 PM
wolfgang-lehmann.bsky.social
#Diabetes Ich habe vorgestern das Update auf die #AAPS 4.0.0 gemacht. Dieses hat angeblich wegen dem #keystore nicht funktioniert - so habe ich kurzerhand neu installiert.
November 4, 2026 at 7:00 AM
pub.dev.web.brid.gy
v0.6.3 of spring_boot_starter_flutter_security
Security for Spring Boot Flutter apps: the OAuth2 / OpenID Connect app login, secrets in the Keychain / Keystore, widgets that follow the logged-in user. Changelog excerpt: ### Changes - The editor metadata of `spring.flutter.security.*`is made from code: the new `FlutterSecurityProperties`(`application-id`, `ephemeral-session`) and `FlutterWebSecurityProperties`(the `mode`values come from `WebLoginMode`); the hand-written `spring_metadata_additional.json`is gone. Both are bound by the Binder (`lib/src/properties/`, module `flutterSecurityConfigBeans`) and no key is read as a string any more: the `bind`factories and `rawMode`are gone, and `FlutterSecurityPropertie[...]
pub.dev
November 4, 2026 at 4:15 PM
awildfaerie.com
The user's keyring would make the most sense, basically the desktop equivalent of Android's keystore.

Don't worry I wouldn't just release packages on my own. I was just curious and had time to play 🙂
October 31, 2026 at 12:54 PM
skywalker.thereforeiam.eu
On Android those are securely stored with the Android Keystore.
For my own testing on Linux I did not bother to make this better. I don't know what best practice is for Linux to deal with this.
October 31, 2026 at 12:37 PM
homelabtherightway.bsky.social
New book: Sign-In and Security Done Right. Passkeys with Credential Manager, Sign in with Google verified on your server, biometrics that unlock real Keystore keys, and Play Integrity for Android.

Free sample chapter: https://payhip.com/b/01OcP
Book: https://payhip.com/b/oZl1J
Cover of the ebook Sign-In and Security Done Right
October 29, 2026 at 8:50 PM
some-rss-feeds.bsky.social
[some-subscribed-rss] New Post: How to Review a 1,000+ File PR Without Losing Your Mind, by Mario Brcina https://shiftmag.dev/how-to-review-a-1000-file-pr-without-losing-your-mind-13054/
Teaser: A 1,186-file PR would break most reviewers. But one engineer found a way through: instead of skimming a diff or asking an AI to "review this," he built a baseline from the old code, split the review into small provable steps, and kept track with a plan file. The approach caught a caching bug that could serve stale JavaScript, a dropped keystore, and a blank-page crash, while also showing that most problems were inherited, not new. The story is a practical, honest account of how to tackle a review that seems impossible, and what you gain when you let structure, not willpower, keep you honest. teaser for https://shiftmag.dev/how-to-review-a-1000-file-pr-without-losing-your-mind-13054/ generated by deepseek/deepseek-v4-flash
October 29, 2026 at 2:14 PM
ethereumhistory.bsky.social
New contract documented: Keystore (Nov 23, 2015). A public-key directory for an early decentralised marketplace dapp: each account stores the key others use to encrypt messages to it.

https://ethereumhistory.com/contract/0x8eca08610018be3c460f947fea4020a8be3d5e61
October 25, 2026 at 11:38 AM
ethereumhistory.bsky.social
New contract documented: Keystore (Dec 16, 2015). A public-key directory for an early decentralised marketplace dapp: each account stores the key others use to encrypt messages to it.

https://ethereumhistory.com/contract/0x819f0772fe6a196259dc2671f3ac3c39a9efa022
October 25, 2026 at 11:38 AM
roamingpigs.com
My Ubuntu server installed the eMudhra fix and logged done. Its Java keystore was dated October 2025 and still trusted the bad keys. Patched is a property of a trust store, not a machine.

https://roamingpigs.com/field-manual/your-server-has-more-than-one-trust-store/
Browsers blocked eMudhra's eight computable CA keys within hours. On a patched Ubuntu server, Java, Node, Python requests and the Azure CLI still trusted them, each reading its own bundle. How to find every trust store a service reads, test it, and the Java fix the package manager does not run.
October 25, 2026 at 8:09 PM
pub.dev.web.brid.gy
v0.2.0 of lighthouse_north_client
SDK Flutter oficial para integrar o app do cliente à plataforma Lighthouse North de disparo push: registro de device token com evidência de consentimento (LGPD), heartbeat e opt-out fácil e gratuito. [...] Changelog excerpt: - **Android embutido**: estado local cifrado no Android Keystore (AES-256-GCM, IV novo por write, migração e REMOÇÃO do plaintext legado 3.2, fail-closed com `storage_error`tipado); `onNewToken`→ evento no canal → rotação automática no Dart (`LighthouseNorthClientPlugin.dispatchNewToken`para hosts com service próprio); correções de embedding reveladas pela 1ª compilação real (lifecycle-common pinado em 2.7.0 = embedding; ActivityAware com assinaturas atuais; observer no lifecycle do ACTIVITY bin[...]
pub.dev
October 24, 2026 at 3:59 AM
pawelmakowski.bsky.social
A key can remain inside a device while an attacker asks that device to use it. Non-exportability and permission to decrypt are separate questions. A closer look at Android Keystore and UseCrypt documentation:
bringingprivacyback.com/a-non-export...
A Non-Exportable Key Can Still Be Used | Bringing Privacy Back
Android Keystore and UseCrypt documentation show why preventing key extraction and controlling decryption operations require different evidence.
bringingprivacyback.com
October 23, 2026 at 7:21 AM
felicitas.pojtinger.com
https://mastodon.social/@pojntfx/117427032451321165

I should really make a proper post for this at some point and some kind of guide to legislators for how to fix this situation.
Felicitas Pojtinger 🌅 (@pojntfx@mastodon.social)
Here is my best attempt right now with the new EUID: 1) Payment in the wallet means strong customer authentication at assurance level high: 2024/2979 Art. 4(3). 2) Level high means resisting attackers with high attack potential: 2015/1502 Annex s. 2.1.4. 3) The keystore and its software must pass an AVA_VAN.5 vulnerability assessment: 2024/2981 Annex pt 2(3), pt 3(1)-(2). 4) Otherwise the keystore is deemed unsuitable and the wallet gets no certificate of conformity: 2024/2981 Annex pt 2(3).
mastodon.social
October 22, 2026 at 4:06 PM
techstyle-co.bsky.social
Secure Keystore keeps secrets encrypted at rest with no service to run: a folder of encrypted values, and one user key that opens it. Six implementations of one specification, and each reads the stores the others write.

https://tech-style.co/open-source#secure-keystore

#Encryption
October 22, 2026 at 2:52 PM