3 ms·
I love this! Using a 2000+ year cipher to circumvent Deep Packet Inspection seems almost poetic. I feel like the article missed out on mentioning one key thing
by MadsRC 5y ago
I love this! Using a 2000+ year cipher to circumvent Deep Packet Inspection seems almost poetic.
I feel like the article missed out on mentioning one key thing: Using a deny-list doesn’t work. It’s much more viable to default block and allow the stuff you know you’ll allow. Defaulting to allow and blocking stuff you don’t want is how you end up being owned by rot13.
- pdkl95 5y agohttp://www.ranum.com/security/computer_security/editorials/dumb/ http://www.ranum.com/security/computer_security/editorials/d... "The Six Dumbest Ideas in Computer Security" > #1) Default Permit > #2) Enumerating Badness
- MiddleMan5 5y agoReading point #4 on a site called "Hacker News" seems rather ironic. I wonder how you might encourage deeper introspection into software infrastructure security vulnerabilities, both from closed source companies and from obscure open source projects, without "spreading breadcrumbs for the roaches"
- c0balt 5y agoThank you for sharing the post. It made my day so far, I actually want to re-read it and take notes.