dguido

16 ms·

121.
by dguido 9y ago
I think the only solution you want to use are AppContainers. AppJailLauncher (our code) wraps them to make taking advantage of AppContainers easier. I think the one other useful sandboxing-related tool for Windows comes from Project 0, and
122.
by dguido 9y ago
I competed in that! It was a fun contest and if you want to read more about it, we have a section on our blog dedicated to it with lots of rich technical detail: https://blog.trailofbits.com/category/cyber-grand-challen
123.
by dguido 9y ago
hahah same! Then you can use these instructions then: https://github.com/trailofbits/algo#ubuntu-server-1604-examp...
124.
by dguido 9y ago
The Ubuntu instructions will work fine! We have many Arch users. You need to check the Y box for "Linux Network Manager support" during install. Make sure you're using a current version of Arch.
125.
by dguido 9y ago
Yes, we offer the option to turn those on during the install. It's one of only about 5 questions we ask. In general, the configuration is so minimal, so hardened, and intended to be ephemeral that updates are rendered somewhat moot. Fo
126.
by dguido 9y ago
1) Kind of (more details in the link below). You need a supervised profile on iOS in order to ensure that _every_single_packet_ gets sent over the VPN. Only large enterprises configure their devices this way and it requires wiping your devi
127.
by dguido 9y ago
I really don't feel like auditing this entire install script ( https://s3.amazonaws.com/webdigi/VPN/Unified-Cloud-Formation... ) but a quick glance leaves a lot to be desired. Weak authentication and crypto, la
128.
by dguido 9y ago
That's described in detail in this blog post on Algo: https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th... ----- Streisand is no better Good concept. Poor implementation. It installs ~40 servi
129.
by dguido 9y ago
You can start up a machine on either of those providers and then run the install scripts locally. Plenty of people have done it. Note: this is the same answer for every hosting provider, as long as they support Ubuntu 16.04 or 17.04.
130.
by dguido 9y ago
What platform? We test on every current major client platform (macOS 10.12, Windows 10, Ubuntu 17.04, iOS 10, Android 7, etc.)
131.
by dguido 9y ago
Hi! Author of Algo here. Probably not! Algo is not made for circumvention, it's made for security. You need to go to the extremes of anti-circumvention tech to get ANYTHING to work in China too. It's not a matter of OpenVPN vs IPS
132.
by dguido 9y ago
Hi! Author of Algo here. You can read the full information about why we think a self-hosted VPN is better than a VPN service here: https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th...
133.
by dguido 9y ago
Hi, author here. First, that issue was way overblown (it's exactly what streisand does, and assumes an attacker with local access to your VPN server... which means you are already wayyyy owned). Second, yes, we moved certificate genera
134.
by dguido 9y ago
Hi, author here. Yes! IPSEC works great in most of the major client platforms. All the information to set them up is documented in the Algo readme: https://github.com/trailofbits/algo#configure-the-vpn-client...
135.
by dguido 9y ago
Hi! Author of Algo here. The beauty of Algo is that it takes care of all the server security for you, including deleting the keys used to access it if you want. There's nothing additional to secure after you install the server. Try it
136.
by dguido 9y ago
Hi, author here. We support a diversity of different hosting providers (Google, Azure, DigitalOcean, AWS), including your own self-hosted server. It's an install script, we don't pick the host for you, that's your decision.
137.
by dguido 9y ago
Author of Algo here: Pritunl looks great, but Algo aims to use less code to get the job done. Less code = less that can go wrong. We reduced the attack surface to a minimum, don't support out of date clients or crypto, and turned up op
138.
by dguido 9y ago
There's a variety of models that others have experimented with, and they all tend to fail at bugs this deep. For instance, Google tried a thing where you open a bug ticket once you think you've found an issue and you stream out ev
139.
by dguido 9y ago
I know precisely who you are, and I think you're jumping to conclusions in this case. People love to read morals, ethics, and politics into analyzing bug bounty submissions, but none of that is the primary factor here. In general, it&#
140.
by dguido 9y ago
Article quote-ee here. You're not describing the same thing the people in the article were describing. The bugs that Apple is looking for take time and resources to find yet you can't depend on the $200k of revenue to feed yoursel
141.
by dguido 9y ago
> By the way, is it possible to have all hosts connected to reach each other, as in a lan? Yes! Change this variable to N, then deploy your server: https://github.com/trailofbits/algo/blob/master/confi
142.
by dguido 9y ago
Literally no information to judge whether this service is competent or not... As a security expert myself, I mostly have recommended tinfoilsecurity.com and tenable.io to the small businesses I consult with. In cases where you want more tha
143.
by dguido 9y ago
Nothing in this article remotely qualifies as news. IBM builds computers, fast ones, to crack passwords for the US DOD. They engage with academia to apply research in building and programming them. Is that surprising? Even if it were, there
144.
Manticore: Symbolic execution for humans(blog.trailofbits.com)
5 points by dguido 9y ago|0 comments
145.
by dguido 9y ago
Trail of Bits! Topics include software security, control flow integrity, reverse engineering, program analysis, fuzzing, compilers, etc. https://blog.trailofbits.com
146.
by dguido 10y ago
One extra thought: You only asked fuzzer vs tests, but I'd offer that you should update your build settings before fuzzing. New compilers have a lot more diagnostics than they used to. But then I'd set up libFuzzer or AFL.
147.
by dguido 10y ago
Disclaimer: I have not looked at your codebase, so this should only be taken as my 2 cents. I might have a different recommendation if I had greater familiarity with your exact problem. I'm biased, but I would start with a fuzzer. Fuzz
148.
by dguido 10y ago
Yep, it's maybe a little more complicated than I let on. We went through the same process you described on a recent engagement and here was the outcome: https://github.com/trailofbits/protofuzz
149.
by dguido 10y ago
> An open-source alternative of Microsoft's SAGE/Springfield would be cool We're working on one (!) and I hope we can offer it for free to non-commercial projects. For now, there is Microsoft Springfield [1] for Windows so
150.
by dguido 10y ago
Very short answer: For web testing, you should run Burp Suite in headless mode. Lots of people use Carbonator to do this: https://portswigger.net/bappstore/showbappdetails.aspx?uuid=... Burp Suite is planning on adding

More ›