diafygi

62 ms·

451.
Second Dell backdoor root cert found(theregister.co.uk)
4 points by diafygi 11y ago|0 comments
452.
How a browser-based Let's Encrypt client works without knowing private keys(github.com)
7 points by diafygi 11y ago|0 comments
453.
Show HN: Gethttpsforfree.com, a browser-based Let's Encrypt client(gethttpsforfree.com)
3 points by diafygi 11y ago|0 comments
454.
by diafygi 11y ago
Have you tried letsencrypt-nosudo[1]? Also, mind testing my new browser-based client, gethttpsforfree[2]? [1]: https://github.com/diafygi/letsencrypt-nosudo [2]: https://github.com/diafygi/gethttps
455.
New Dell computer comes with a eDellRoot trusted root certificate(joenord.blogspot.com)
94 points by diafygi 11y ago|4 comments
456.
by diafygi 11y ago
Right, but the private key is also included(!), so anyone can now sign code that will be trusted by these computers. Edit: Confirmed can issue ssl certs. https://mobile.twitter.com/_xpn_/status/668745489823768576
457.
by diafygi 11y ago
Yeah, unfortunately, the ACME protocol requires registering accounts and making requests using public key signatures, so it's not as user friendly as email confirmations (despite being way more secure and automatable).
458.
by diafygi 11y ago
Ah! Ok, I think you need to add the intermediate certificate[1] that chains the Let's Encrypt Authority X1 to the IdenTrust root. Here's instructions on how to do this for nginx: https://github.com/diafygi/let
459.
by diafygi 11y ago
Howdy, I wrote letsencrypt-nosudo. Sorry that the experience was so painful! Mind filing a detailed issue on the repo so I can fix it and make the user experience better?
460.
by diafygi 11y ago
> While our results are disheartening, we also discuss several ways that participant experiences and responses indicate how PGP could be improved. Have you approached the developers of both Mailvelope and Gmail to discuss these improveme
461.
by diafygi 11y ago
Yep! https://www.mailvelope.com/
462.
by diafygi 11y ago
Boom, done. 428 lines. Only python and openssl as dependencies. https://github.com/diafygi/letsencrypt-nosudo It takes a CSR and user public key as input. Then, it prints the signing commands you need to run (so it doe
463.
by diafygi 11y ago
I work in solar, and here's some quick facts: 1. 1 out of 78 jobs created in the U.S. last year were solar jobs[1]. 2. There are more solar employees in California than utility employees[2]. 3. Soft costs (non-hardware) are 64% of the
464.
by diafygi 11y ago
https://github.com/diafygi/letsencrypt-nosudo If you don't trust the official letsencrypt client, you can use this script to get your free certs. It doesn't install things or ask for sudo access or your priva
465.
by diafygi 11y ago
If you just want a free cert, you can use my letsencrypt-nosudo client[1], which doesn't ask for your private key or sudo access or have to be run on your server (except for one copy-paste line you can inspect). The official letsencryp
466.
by diafygi 11y ago
Doesn't the official client need to have access to your private key?
467.
Show HN: Letsencrypt-nosudo is in beta(github.com)
3 points by diafygi 11y ago|0 comments
468.
by diafygi 11y ago
Very very unlikely. Hardware security modules are designed with the explicit purpose to protect secrets, including from physical tampering.
469.
by diafygi 11y ago
Would Rust be a good alternative? Can you get constant time calculations in Rust?
470.
by diafygi 11y ago
How can I tell what DH size I'm using from the OpenVPN client side when I connect to an OpenVPN server?
471.
by diafygi 11y ago
Does anyone have links to bugs for the affected programs to make 2048 the minimum by default? It seems like we shouldn't have to continue to manually configure secure settings. OpenVPN? SSH? Nginx? Apache? Where are the bugs to make th
472.
Hello there (ESP8266 hosted website)(ureq.solusipse.net)
1 points by diafygi 11y ago|0 comments
473.
by diafygi 11y ago
There's a nice pretty chart on the DOE's soft costs website. http://energy.gov/eere/sunshot/reducing-non-hardware-costs It's from 2010, so stuff has shifted since then, but ~50% soft costs, 15% inst
474.
by diafygi 11y ago
Yep, sorry, SolarCity is mostly residential and commercial, so the cost breakdown is based on their sector.
475.
by diafygi 11y ago
I work in solar, and this is fantastic news...for SolarCity. There's expected to be a solar panel shortage coming soon because the industry is growing so fast[1], so if you don't make your own panels, you can expect panel prices t
476.
by diafygi 11y ago
Senior Python DevOps | https://UtilityAPI.com | Oakland, CA | REMOTE | Solar Job =Company Description= We are a white-label SaaS that is used by solar and energy efficiency companies to collect their customer's utility bill
477.
by diafygi 11y ago
> Apple has never worked with any government agency from any country to create a “backdoor” in any of our products or services. We have also never allowed any government access to our servers. And we never will. Did Apple ever provide
478.
Wikimedia v. NSA update: first hearing(blog.wikimedia.org)
4 points by diafygi 11y ago|0 comments
479.
by diafygi 11y ago
> If we don’t want UBs, why not just use a TLS written in Java or C# or some other safe language? Of course that’s a fine idea! But we’ll have to somehow shoehorn a Java runtime onto those embedded processors with ~64 KB of RAM where Po
480.
by diafygi 11y ago
Would love for the next generation of SRI to include signatures as an option (e.g. integrity="ed25519-<public_key>"). Hashes means you have to specify an exact version, so there's not an easy way to add integrity to thi

More ›