dadrian

21 ms·

211.
by dadrian 10y ago
Go Gulshan!
212.
by dadrian 10y ago
The getrandom() system call does this. See http://man7.org/linux/man-pages/man2/getrandom.2.html
213.
Users Really Do Plug in USB Drives They Find [pdf](zakird.com)
3 points by dadrian 11y ago|2 comments
214.
by dadrian 11y ago
Congrats Jon!
215.
Internet Voting in the Utah GOP Caucus: What Happened(medium.com)
2 points by dadrian 11y ago|0 comments
216.
by dadrian 11y ago
The MITM attack is only viable due to a bug introduced by handling of export ciphers, even though it affects non-export ciphers. So export ciphers are the real issue here.
217.
by dadrian 11y ago
Why argue about which battle to fight, and try to do both? Get widespread support for ECDSA; get RSA implementations up to date with modern padding schemes. We don't need to pick and choose which modern crypto to use; use modern crypto
218.
by dadrian 11y ago
Due to CVE-2015-3197, many servers using OpenSSL reported they supported no SSLv2 ciphers, which causes OpenSSL-based SSLv2 clients to hang up. However, if you aggressively choose a cipher and continue the handshake, the server will still n
219.
by dadrian 11y ago
I've taken a crack at something similar, I'd love to see what you came up with. I ended up with this super-meh solution: https://github.com/zmap/ztag/blob/master/ztag/transform.py#L...
220.
by dadrian 11y ago
I initially thought the article was satire.
221.
by dadrian 11y ago
Congratulations jdkasten!
222.
by dadrian 11y ago
My totally unscientific estimates tend to be about 1 minute for 2048-bit primes and 20 minutes for 4096-bit primes.
223.
by dadrian 11y ago
Our cipher recommendations on the Weak DH site come directly from Mozilla. See https://wiki.mozilla.org/Security/Server_Side_TLS#Recommende...
224.
by dadrian 11y ago
Beyond that, generating prime numbers >= to 2048 bits takes a non-trivial amount of time, sometimes close to a minute. This isn't feasible for servers to do on launch, and might not even be feasible to generate during install---whic
225.
by dadrian 11y ago
Censys developer here, happy to answer questions about the service.
226.
by dadrian 11y ago
What do you suggest they use instead? No encryption?
227.
In Search of SYNful Routers(zmap.io)
2 points by dadrian 11y ago|0 comments
228.
by dadrian 11y ago
Case in point: OpenSSL. More of a TLS specification than the RFC is, nowadays.
229.
by dadrian 11y ago
Python and C++. C++ server-side, and Python client-side. Python has been a larger struggle than C++.
230.
by dadrian 11y ago
I've been using gRPC for the last several months. It's a reasonably nice API and integrates nicely in with protobuf, which I think is it's main draw. We were already passing data around as protobufs, so we just took the dive.
231.
by dadrian 11y ago
A good reminder that your public keys are, in fact, public. For most people, this is probably a good thing, unless you're specifically trying to hide your identity.
232.
by dadrian 11y ago
This would have been great during my grad school compilers class.
233.
by dadrian 11y ago
They're defaulting away from SSLv3, nice!
234.
by dadrian 11y ago
Firefox patched.
235.
by dadrian 11y ago
I'd also lean toward Logjam, but I'm biased. :)
236.
by dadrian 11y ago
>Suddenly, a significant percentage of the people who had spoken well about impressive-sounding projects failed, in some cases spectacularly, when given relatively simple programming tasks. This indicates to me that either the "simp
237.
by dadrian 11y ago
The CSR is signed by the key that is going to be used for HTTPS on the website requesting a certificate. If the CSR wasn't transmitted over HTTPS, since the Let's Encrypt CA has no idea what your key is, a network adversary could
238.
by dadrian 11y ago
Ed largely opposes mass surveillance, etc. See some of his posts on Freedom to Tinker: https://freedom-to-tinker.com/blog/author/felten/
239.
by dadrian 11y ago
The Estonian Internet voting referenced in the article was shown to have several major security issues last May. See https://estoniaevoting.org/
240.
by dadrian 12y ago
Of all the things to complain about HTML and modern web development, this ranks pretty low on my list.

More ›