![[media/home_page_banner.png]] > [!info]- Open for PGP Information > ``` > -----BEGIN PGP PUBLIC KEY BLOCK----- > Comment: F6BC 5A3E 8CB7 FE15 6210 D93F 31AC A7C6 FDD9 5D6E > Comment: Zack Puhl (CrOwS.dev Blog Signing Key) <[email protected]> > > mDMEaJqOexYJKwYBBAHaRw8BAQdAu5c2nH9Hh14oAVPy3aWsORPwEq6WV5zS3BeA > dsVeLfG0N1phY2sgUHVobCAoQ3JPd1MuZGV2IEJsb2cgU2lnbmluZyBLZXkpIDx6 > cHVobEB4bWl0Lnh5ej6IkwQTFgoAOxYhBPa8Wj6Mt/4VYhDZPzGsp8b92V1uBQJo > mo57AhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEDGsp8b92V1uWUEB > AIll3RxkZvHEEL1Sa6UkU56/+aj8USjpuAd3jzBViecSAP4rz2PULdrw5W8pvcIF > 20CAiECFLsu/eXjsdl8yMz07A7g4BGiajnsSCisGAQQBl1UBBQEBB0DErlmrsSAj > xqvReQZ2V8c4HXdIN1Y4Y521MX+k4M86UQMBCAeIeAQYFgoAIBYhBPa8Wj6Mt/4V > YhDZPzGsp8b92V1uBQJomo57AhsMAAoJEDGsp8b92V1uuNkA/1B79QcW8T/CDy+6 > eUoeK579aZktBx0v9bLj0sAPAuHtAQD2nk9dHaW2E9kJyefEA2GouSsD05SLma5g > oi2KHdOlBw== > =Z06W > -----END PGP PUBLIC KEY BLOCK----- > ``` > > [!tip] Don't Blindly Trust the Credential Above! > > If this is your first time importing my blog's public key, you should check multiple places across the net where I have published it - including my primary site, social networking platforms, public PGP key services (like [openpgp](https://keys.openpgp.org/[email protected]) or [Ubuntu keyserver](https://keyserver.ubuntu.com/pks/lookup?search=zpuhl%40xmit.xyz&fingerprint=on&op=index)), and more - before assuming the above key is legitimate and has not been tampered with. > > > > This key is your **only way** to prove the legitimacy of any source code, information, etc. that I publish on this blog. > > Articles are always signed over the [underlying markdown](https://github.com/NotsoanoNimus/crows-dev-blog) from the ==first non-whitespace character after the posted signature== to and including the ==final non-whitespace character==. > > See my [[Verifying Detached PGP Digital Signatures|brief PGP usage guide]] if you're not familiar with PGP. > > Note that this home page isn't signed because the content is expected to change semi-frequently. Hi, my name is ==Zack Puhl==. I am a systems software engineer from the United States with a background in cybersecurity and network administration. I have a lot of fun in my free time over [on my GitHub](https://github.com/NotsoanoNimus), and I've created this space to talk about whatever I'm up to. If you didn't land here through my [main site](https://xmit.xyz/), please check that out too. ## Welcome Welcome to [CrOwS.dev](https://crows.dev/): my personal developer log, mental dumping ground, and loose portfolio of sorts. Content goes here that spills over from my primary site, where my more formal research and CVEs are published and maintained. My plan for this site is to: - Harbor my ideas that I may or may not ever get to. - Log semi-regular development activities and challenges, particularly those that are ***not*** related to my day-job. - Categorize and explain my many different rotating projects, and document my experience working on them individually. - Discuss in more detail any of my published security research findings or curiosities. - Maintain a regularly-updated developer log for my own custom operating system, [CrOwS](https://github.com/NotsoanoNimus/CrOwS) and its related tooling. For a few months before starting this I had been very interested in getting a _dev blog_ up and running. Having this will be the outlet I need to keep me on track for certain deadlines and side projects. ### Commitment At first, my commitment was to make one article per day (!!!) -- right... After about 2.5 weeks of that I realized it was too much for the amount of content I was writing in each one. I didn't want to force any length restrictions on myself, but I also didn't want to spend hours every day writing. Hence, my commitment has changed from the _idealistic_ "every single day" to a more _realistic_ "every week" instead. Unless I am on a vacation, expect a weekly summary, update, exploration of content -- you name it -- on or around Sunday evening of each week (according to the _Eastern Time_ timezone). On top of regular updates from me, you can also expect a lot of the content I put into these logs to be published into articles (under the "Articles" folder) that act as a full condensation, tutorial, and/or exploration of a particular subject of my fancy. These will usually contain more details than the weekly check-ins. --- ### Current Endeavors Here's what I'm up to from a broad perspective. This list changes semi-regularly depending on what's in-queue and what has entered its "maintenance" phase. ``` - CrOwS: The Cryptography and Ownership System - A toy OS for cryptography and systems security enthusiasts - MFTAH: Media For Tamper-Averse Humans; the CrOwS bootloader - Encrypts and signs bootable system images - Launches these payloads at boot-time - C3: An Evolution of C - This language is incredibly fun and is new; thus I contribute often - CSPAuthD: Crude Single Packet Authorization Daemon - Nanofuzz: A tiny, fast, regex-based text generator for fuzzing - FlexIC: A CAN-based Flexible, Customizable Instrument Cluster display - hookshot: An anonymous-only FTP scanner and scraper ``` --- #### Contact **Question? Suggestion? Bug? Collaboration? \[Query\]?** Contact me directly [via email](mailto:[email protected]), or find me on [LinkedIn](https://linkedin.com/in/xmit-xyz/).