dwviel

9 ms·

1.
by dwviel 9y ago
These were just a selection of quotes that looked good on the web site, particularly the "GREAT JOB!" quote. That's kind of nice to see.
2.
by dwviel 9y ago
Yes, I agree that TLS provides replay protection on a suitably reliable network. Don’t know about DTLS or QUIC but I will look further into these. We didn’t really look to much at TCP and TLS, etc. because early on we made design decisions
3.
by dwviel 9y ago
Thanks for the detailed response. I understand the need to see inside the technology to understand how and why it works. Some of our technology is being patented, so it will be published. Some is trade secrets, so we keep that closely hel
4.
by dwviel 9y ago
Most people leave physics because there are no career opportunities. The glut of Ph.D. scientists in the US is the dirty little secret of academia that is reinforced by official agencies like the NSF and DoD.
5.
by dwviel 9y ago
Yes, but the packet replay protection is due to the sequence number of the packet that happens after the session is established. BTW, our technology uses pre-shared keys.
6.
by dwviel 9y ago
You bring up many valid points. I won’t say much about crypto at this point other than we plan on having FIPS-140-2 certified crypto in the near future. Yes, we are using a new protocol, but I don’t agree that it needs to be a full IETF sta
7.
by dwviel 9y ago
Can my post get "unflagged" now?
8.
by dwviel 9y ago
Great comments. 1. See my reply to theamk above 2. The padding is good, but it needs to be the exact same size for all packets, which implies always using the biggest size. 3. See my reply to theamk above. We are expecting to run over unrel
9.
by dwviel 9y ago
Good points. The port number typically indicates a service that is publicly known and repeatable. This is leaked information, as each service will have a unique port number. The IP protocol of 99 is used for all communications so no diffe
10.
by dwviel 9y ago
BTW, why did you flag this post with out giving me a chance to reply?
11.
by dwviel 9y ago
Great question. Some issues with ZeroMQ: It uses TCP/IP which has security issues that can lead to resource exhaustion. The SYN is sent but the sender never acknowledges the reply, so the server simple keeps the resource reserved wai
12.
by dwviel 9y ago
Thanks. We built it ourselves. We’re not web developers. We just wanted to get info out there. If we get major funding, we’ll spend big on a fancy website.
13.
by dwviel 9y ago
Yes, we have found that the set of Internet Protocols were designed before the kind of security we expect today were appreciated. You are correct that we are not professional crypto people. But, crypto is just the starting point for cyber
14.
by dwviel 9y ago
Great comment. The kinds of industrial controls that you mention are the long-term goal for the technology. We are working on a gateway adapter for some of the most common industrial protocols, such as ModbusTCP, and hope to have a produc
15.
by dwviel 9y ago
Thanks for your thoughtful comments. Yes, I can understand your skepticism, and that is a good sign that you don’t believe whatever folks are just saying. That is particularly good in the cybersecurity field as claims that are unsubstanti
16.
by dwviel 9y ago
I agree with some of the other's comments that time is the most valuable asset. Be productive! Also: 1) Most of the advice that you find online is not really applicable. I like the stuff that Sam Altman (yes, ycombinator) puts out b
17.
ControlMQ – Secure communications for control system applications(cognoscentisystems.com)
9 points by dwviel 9y ago|33 comments