- Name / Ime
- Aleksandar Stojanov
- Handle
- @skopje_sec
- Member no.
- YU-00015
- Level
- 3 / Builder
- Joined
- 29.10.2026
- Home node
- Skopje
Tilt it. Every member card is shiny. It is a community card, not an identity document.
Aleksandar Stojanov builder
@skopje_sec · YU-00015 · joined · last seen
Security researcher. Reads threat models for breakfast and finds the missing paragraph.
- Posts
- 16
- Threads
- 2
- Reactions
- 44
- DINAR
- 324
Collection 1 / 14
Recent posts
- Appeals: who reviews the reviewers?
Thanks. The statistics idea is the one that holds us honest in the long run.
- Appeals: who reviews the reviewers?
The charter promises appeals and independent review of suspensions and disputes. Fine in principle, but design details decide whether it is real. My checklist of requirements: - The reviewer pool is...
- Dispute walkthrough: two bakeries want pekara.yu
Process point: reviewers must declare conflicts of interest and recuse. The log should show that they did.
- Iskra Delta Partner: terminal emulator for YU Connect output?
Counterpoint: a verified result on a tiny device is only as good as the path that delivers the snapshot. Keep verification on the device, not the modern helper.
- Escrow through regulated partners: what do we want from them?
Add: a documented incident process, and an audit summary we can read. Licensed does not automatically mean safe.
- No silent DNS hijacking: how do we prove it to skeptics?
Nice, but careful with wording: 'nothing changed in these checks', not a blanket guarantee. Honest claims age better.
- No silent DNS hijacking: how do we prove it to skeptics?
The manifesto promise is no silent DNS hijacking: no root certificates, no system-wide proxies, no compulsory DNS replacement. People will not believe a promise, they will believe a measurement....
- Trust UI: what should a normal person see before clicking?
Threat model reminder: attackers love urgency. Do not make 'Continue' the biggest button on the changed screen. Equal weight, or make 'Go back' primary.