diff --git a/post/2019-02-18-ghcq-exceptional-access-e2ee-decentralization-reproducible.md b/post/2019-02-18-ghcq-exceptional-access-e2ee-decentralization-reproducible.md
index ebdd49b..9298f0c 100644
--- a/post/2019-02-18-ghcq-exceptional-access-e2ee-decentralization-reproducible.md
+++ b/post/2019-02-18-ghcq-exceptional-access-e2ee-decentralization-reproducible.md
@@ -399,7 +399,7 @@ Then,
 
 [^ssh-tofu]: SSH users, for example, may be familiar with the almost-violent
     warning when the server fingerprint changes.
-  Server fingerprints are stored in `~/.ssh/known_hosts` the first time they
+  Server fingerprints are stored in `\~/.ssh/known_hosts` the first time they
     are contacted,
       and those fingerprints are used for verification on all subsequent
       connection attempts.
@@ -685,7 +685,7 @@ How can _all_ users be confident that the FooRelay client they download
   System-wide reproducibility is the topic of [_bootstrappable
     builds_][bootstrappable-builds].
 
-[trusting-trust]: https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf
+[trusting-trust]: https://www.archive.ece.cmu.edu/\~ganger/712.fall02/papers/p761-thompson.pdf
 [bootstrappable-builds]: http://bootstrappable.org/http://bootstrappable.org/
 
 [_Reproducible builds_][reproducible-builds] are required to solve this