F30

7 ms·

31.
by F30 9y ago
MITM attacks are designed to not be detectable, so the solution is to have tooling which prohibits them – exactly what is lacking in this case. For web, using TLS (SSL) is a good start. This could be improved further by using HSTS, HPKP, DA
32.
by F30 11y ago
So, can anybody elaborate on the history of and relationship between StatusNet, identi.ca, GNU social and pump.io? It seems like this fragmentation is another obstacle for success, besides the obvious issue of gaining traction. And then the
33.
by F30 12y ago
It is out of question that you can do it wrong without typing A-E-S: Crypto is hard, and you can always fuck up in an infinite amount of ways. That being said, do you have any reference on MCRYPT_RIJNDAEL_256 being an actual problem? The li
34.
by F30 12y ago
For more information on the multi-processing feature, check out this blog post: http://www.ghacks.net/2014/07/12/mozilla-plans-release-elect... Some general information regarding the features of coming-up ver
35.
by F30 13y ago
Basically yes. However, from my experience, package update urgencies are no good indicator of the updates's actual priority. It's in the +*-security" channels and you're supposed to apply all updates from there.
36.
by F30 13y ago
They may be, but JsDelivr appears to have no deep affiliation with Mozilla: > Who is behind jsDelivr? > Basically just me, Dmitriy A. or @jimaek. But a lot of other people are involved, giving their advice and helping me out. I always
37.
by F30 13y ago
Wow. Those are some strong allegations for someone who admits they are completely unfounded.
38.
by F30 13y ago
OK, the answer to that is at the end of Adam Lengley's analysis: https://www.imperialviolet.org/2014/02/22/applebug.html The lack of hostname checking for IP addresses in Apple's cURL is a completel
39.
by F30 13y ago
That's not correct. The cURL version shipped with OS X uses SecureTransport.
40.
by F30 13y ago
I'm able to reproduce your results with cURL. However, Safari on OS X correctly shows a warning. Can anybody explain that?
41.
by F30 13y ago
The Exploration and Exploitation of an SD Memory Card: http://youtu.be/r3GDPwIuRKI Fast Internet-wide Scanning and its Security Applications: http://media.ccc.de/browse/congress/2013/30C3_-_55
42.
by F30 13y ago
There are 10 kinds of people in this world: Those who understand ternary, those who don't, and those who mistaken it for the binary system.
43.
by F30 13y ago
Was about to suggest 2-factor auth as well. At least for the "first" machine, where the SSH key for the others is.
44.
Writing an app for kids(medium.com)
1 points by F30 13y ago|0 comments
45.
by F30 13y ago
There are a lot of usecases for bot of them, mostly debugging I's say. So I'm gonna tell you what I used them for in the past months: The ASCII table might be useful when you're dealing with encoding problems and want to know
46.
by F30 13y ago
This is the size of the AES key. AES is a symmetric algorithm and 128 bit are still considered solid there, although the trend is moving towards 256 bit. What we're talking about here is the key size of RSA, which is an asymmetric algo
47.
by F30 13y ago
Including Berlin, seriously? I'm tempted to agree with you on the rest of eastern Germany, at least rural regions. But Berlin is more of a multicultural, open-minded island. Southern Germans however, as you say, tend to be quite cons
48.
by F30 13y ago
> People really do just assume that everything to do with computers is directly related, and that they can ask anyone to fix it for free because "it'll only take a second". I totally get your point, but to be honest they&#