andyrj

6 ms·

1.
by andyrj 9y ago
Add nginx/apache with client certificate authentication in front of this and most of those concerns go away. Plus this way you don't have to worry about exposing the port but you need to distribute your client keys before hand.
2.
by andyrj 11y ago
So next we will hear about this amazing new armor (aka. mirrors) on all our enemies vehicles?
3.
by andyrj 11y ago
Suspicious that aiohttp has peewee async, but falcon gets synchronous sqlalchemy for its orm test? Seems like a fairly biased way to benchmark. Too many variables to actually compare the frameworks as things beside the framework are drasti
4.
by andyrj 12y ago
I understand that this is not an attack on DH. I have not analyzed telegram but the statement I quoted seems to indicate it would need to be able to quickly generate many DH params. That doesn't seem to be a a computationally trivial
5.
by andyrj 12y ago
Do we really need to make all threads with any relation to Google about the whole "90 days vs. Patch Tuesday"?
6.
by andyrj 12y ago
Google expended their resources to find a flaw in a MS product, in which MS was treated as any other vendor. If MS requires the ability to dictate the time alloted to fix their own mistakes, and are unwilling to change their own internal p
7.
Docker Security Immature?(theregister.co.uk)
7 points by andyrj 12y ago|0 comments
8.
by andyrj 12y ago
Sounds like quite an amazing and brave individual. We need more of his caliber. Is there a translation of his writing available in English? I would be very interested in reading more of his "Crops and Seeds"
9.
by andyrj 12y ago
It isn't just the tor browser bundle that causes this. I believe it has more to do with either bots using tor to access google or google forcing captcha on access from known tor exit nodes. I have seen the same behaviour from vanilla
10.
by andyrj 12y ago
I remembered hearing of the signal but thought it still had other plausible explainations. You are right the article does make it seem like everything but ET's is off the board, or atleat thats how I read it. Thanks for clarifying.
11.
by andyrj 12y ago
"If there was a way to efficiently cycle through DH parameters, an active man-in-the-middle attacker could spoof the fingerprint." Isn't this a rather big if? In my limited understanding of the math involved, the whole reaso
12.
by andyrj 12y ago
So when do we start building the giant gyroscope to send Jody Foster through some wormholes? :) Joking aside, this is the first that I have read about any signals being unidentified in origin and not having an explaination other than ET&#
13.
by andyrj 12y ago
Anything other than your speculation to back up your belief in individuals neural plasticity having anything to do with the social advances you mention? Young people have not had a great record of voting. So those changes you are attribut
14.
by andyrj 12y ago
This is obviously the second stage of NORK's sophisticated cyber attacks.