agwa

77 ms·

841.
by agwa 12y ago
> If decryption has to be moved out into the CDN to support encryption of cat pictures, security has been reduced. That doesn't logically follow. The CDN doesn't have to start handling logins just because the "cat pictur
842.
by agwa 12y ago
> To detect what license, if any, a project is licensed under, we used an open source Ruby gem called Licensee to compare the repository's LICENSE file to a short list of known licenses They should also look in COPYING, which is the
843.
by agwa 12y ago
https://www.ssllabs.com/ssltest/clients.html is a good resource. For reference, the clients listed there that don't support ECDSA are: Android 2.3.7, IE 6 / XP, IE 8 / XP, Java 6u45, and OpenSSL 0.9.8y.
844.
by agwa 12y ago
The users' gmail accounts are at user@gmail.com, but they're sending mail as user@mydomain, via mydomain's authenticated SMTP server. This is exactly the scenario described in the comment at jwz.org.
845.
by agwa 12y ago
In my >5 years experience running a mail server through which gmail users send authenticated mail, that is not accurate. To confirm that nothing has changed, I just looked at the mail logs, and in the last 24 hours I don't see a si
846.
by agwa 12y ago
> Clintonemail.com currently uses an invalid TLS certificate, another method that a man-in-the-middle might use to intercept or spoof emails from the server; but Stanford researcher Jonathan Mayer points out to WIRED that the State Depar
847.
by agwa 12y ago
It's not serving the proper chain certificate: https://whatsmychaincert.com/?app.webmate.io
848.
by agwa 12y ago
I'm troubled by this too. Unfortunately, Ivan Ristic has come to the conclusion that it's not possible to build future-proof cipher suite configuration in a generic way: https://news.ycombinator.com/item?id=847362
849.
by agwa 12y ago
On Linux, shm_open is implemented with /dev/shm, but that's not the case on other platforms.
850.
by agwa 12y ago
I've programmed with POSIX shared memory, and yes, that's the general idea. A very important caveat is that the POSIX shared memory namespace is shared among all processes, so you need to wrap shm_open with a mkstemp()-style algor
851.
by agwa 12y ago
The author says the device is a USB modem. So, under Linux, the author could have simply written a udev rule to use the name "whiteboard" for that particular USB modem's device file.
852.
by agwa 12y ago
> The main issue is that the video decoder MUST be in the same process than the video output, for performance reasons (buffer sharing: memcpy is murder) and for hardware decoders. I was afraid that this was the case. Might shared memory
853.
by agwa 12y ago
Instead of sandboxing the entire app, you should use privilege separation inside VLC. Low-risk code would run in processes with higher privileges, while the high-risk code (e.g. the decoders) would run in highly sandboxed processes and com
854.
by agwa 12y ago
I'm well aware, but that doesn't change my point. It's still more common for non-cops to not be indicted than it is for prosecutors to sabotage their own presentment so that cops aren't indicted. The non-cops have more
855.
by agwa 12y ago
I'm all for getting rid of absolute immunity, but it's a very bad idea to throw out grand jury secrecy just because of what happened in the Michael Brown and Eric Garner cases. In every other grand jury proceeding, the prosecutor
856.
by agwa 12y ago
Are you actually targeted with undisclosed vulnerabilities, or are you just concerned about quickly patching your infrastructure after a vulnerability is disclosed? If it's the latter, I'd love to hear more about your pain points
857.
by agwa 12y ago
Matthew Green, who sits on the CII's advisory board, tweeted: "CII does what's beneficial to its members. Privacy tools aren't" [ https://twitter.com/matthew_d_green/status/56338899320386764
858.
by agwa 12y ago
"If you like to donate Bitcoins you may use the Wau Holland Stiftung account too." Link: https://www.wauland.de/en/donation.html#61
859.
by agwa 12y ago
I'm really dismayed that the Core Infrastructure Initiative, which was created in the aftermath of Heartbleed to fund OpenSSL and other critical software, has chosen to prioritize NTP , and not GnuPG[1]. Most of the companies that re
860.
by agwa 12y ago
Calling GnuPG "email encryption software" really understates its importance. It's also used in countless applications to encrypt data at rest, and GPG signatures are used to secure the distribution of software. For instance
861.
by agwa 12y ago
That's a very interesting idea. It's possible to tell libxml2 to use a custom allocator, but unfortunately it will use that allocator for all objects, not just nodes, and thus would probably be affected by hash table randomizatio
862.
by agwa 12y ago
The biggest offender is timestamps - compiled binaries, documentation, archives, etc. often contain the time at which the file was built. Other problems include non-deterministic filesystem order, randomized hash algorithms, and even the fa
863.
by agwa 12y ago
True, but HSTS (which HN uses) solves that problem on all but the first visit.
864.
by agwa 12y ago
In addition to thwarting state-sponsored attacks mentioned by geofft, HTTPS also prevents ISPs and hotels from injecting ads[1,2]. And using HTTPS even for logged-out users prevents an attacker from sslstripping[3] the link to the login pa
865.
by agwa 12y ago
> You are making a rather critical mistake; you are not realizing that not only are the character associations variable, but so is the "space bar code", which will be unique for each card. I don't know what you mean by &q
866.
by agwa 12y ago
With the codeword broken, we can narrow the gmail password down to a single unknown character! sh(/J3HqAfQsu.Qu.s?
867.
by agwa 12y ago
This is a substitution cipher and it's not very secure. Consider what we can do if we compromise the Amazon password that's given as an example on the website: sh(/J3HqAfQsu..u.rqf Since the password came from Amazon
868.
by agwa 12y ago
Sure. I'm not saying Poly1305 is problem for DJB, just for anyone else trying to implement it, which is a concern DJB has with his other crypto, but not here.
869.
by agwa 12y ago
> Hard-to-implement NIST curves suck, whereas GCM and Poly1305 are recommended. I've always wondered this about DJB - he preaches the gospel of ease-of-implementation with Curve25519 and Salsa/Chacha20, but then for a MAC he ha
870.
by agwa 12y ago
Good grief. They've replaced a SQLite database with a text file that's loaded into an in-memory hash table because "adoption of HSTS is not very widespread yet" so "using any kind of off-the-shelf database to store

More ›