einaros

6 ms·

1.
by einaros 3y ago
Sure. That's not really my issue though. I got a few thousand followers, in batches, after random press coverage through the years, but never had much of anything I wanted to share. Trying to communicate anything, to build further foll
2.
by einaros 3y ago
I've never (within otherwise normal times) been more stressed out and miserable than during periods when I've tried to interact systematically with and through Twitter.
3.
by einaros 8y ago
I’ve been meaning to translate the WebGL version embedded there, but never got that far. The downloadable versions (linked under the video) for Windows and Mac both have subtitles of the audio log, as well as the UI. And both have more corr
4.
by einaros 12y ago
Not entirely sure what you mean by that. But I realised some time ago how lucky, and extremely privileged, I was to grow up with the unconditional support my mother gave me. And I wasn't the only one to get her support. She was a socia
5.
by einaros 12y ago
Thank you. I'm very sorry to hear that your mother passed so early. Missing someone, even after many years, is a testimony to the strong bond you shared. The loving memory lives on.
6.
by einaros 12y ago
Thank you, although I feel much more sorry for her loss, than I do for mine. Cancer stole her life at a time when everything was supposed to be getting better. A brutal reminder for everyone around her to make the most of their time. And to
7.
by einaros 12y ago
Mother's day or not, those who can make that call, should. My mother passed away one week ago. I really, really wish I could call her today.
8.
by einaros 12y ago
https://encrypt.today - who said the new TLDs were useless?
9.
by einaros 12y ago
Ah. Well if you want to dig, I've still got the 43 GB from CloudFlare!
10.
by einaros 12y ago
I didn't actually write mine to collect primes :) I'm working with data dumped from other network devices, and for the most running various Yara rules during and after collection.
11.
by einaros 12y ago
Doing realtime prime detection is trivial in mine as well. Either pipe the outfile or add to the lib. I didn't write the dump tool with keys as primary target; they just happened to be there.
12.
by einaros 12y ago
No, the primes (and thus key) can be retrieved at any time, but it may be more frequently found right after reboot. I would recommend you to gather at least a gigabyte before digging for the key - preferably more. I dumped 43 GB from CloudF
13.
by einaros 12y ago
I've published another toolset in Python here: https://github.com/einaros/heartbleed-tools The final test I did before publishing yielded ~100Mbit/sec of bleed from the challenge server, and had the prime in
14.
by einaros 12y ago
Could you shed some light on how this research was conducted? From reading the OpenSSL source and docs it seems pretty clear that the RSA struct will be on the heap somewhere.
15.
Finding RSA keys in Heartbleed memory dumps(hacking.ventures)
3 points by einaros 12y ago|0 comments
16.
How not to provide binary checksums (looking at you, Oracle)(hacking.ventures)
2 points by einaros 13y ago|0 comments
17.
Don't trust Instagram on shared wireless networks(2x.io)
2 points by einaros 13y ago|0 comments
18.
by einaros 13y ago
That would pretty much cover the use of CDNs that have proper versioning schemes. Analytics, however, will remain something I'm not overly fond of. For many sites it's unnecessary. For others it's something they could nearly
19.
by einaros 13y ago
While an absolute necessity, it doesn't solve the immediate issue of NSLs and widespread use of unnecessary services. Let's say that the NSA would like to track bitcoin transactions through MtGox. I don't know how easy it wou
20.
by einaros 13y ago
Where did you read that it's mail traffic they were after? I'm beginning to strongly believe that it's Google's other services are considered for use in specific attacks. Imagine if some foreign service, that is outside
21.
by einaros 13y ago
This doesn't just affect services that are hosted by Google, but also encrypted sites that pull scripts in from Google Analytics, Google's CDN, etc. I wrote a semiparanoid rant about this a couple of days ago ... but didn't t
22.
by einaros 13y ago
And here I was thinking I was being an all paranoid nutter when I expressed privacy concerns with US hosted CDNs and analytics services .. https://2x.io/read/would-the-nsa-infiltrate-cdns-to-circumve...
23.
by einaros 13y ago
Firefox: "about:config" and "media.peerconnection.enabled = false"
24.
Local IP discovery with HTML5 WebRTC: Security and privacy risk?(2x.io)
24 points by einaros 13y ago|15 comments
25.
Should CDNs be used with caution with HTTPS, in light of NSA crypto revelations?(2x.io)
4 points by einaros 13y ago|0 comments
26.
by einaros 14y ago
That works quite well. I've been doing the same for http://einaros.github.com/http-tunnel for some time now; it essentially establishes a tcp tunnel over a custom http upgrade protocol and allows reverse http / https requests to pass thro
27.
by einaros 15y ago
That is very strange, but sadly not unexpected. There has been a lot of noise lately, with the websocket draft changes in new browser versions. Would you mind sending me a dump of whatever error messages the chrome console shows? If there a
28.
by einaros 15y ago
Here's an example replay: http://draw.2x.io/replay#/history/wt/978429455589549135/dl The db should probably be split across more mongodb instances, as it quickly grows wickedly huge - but granted a bit of patience, it does work.
29.
Show HN: A multi-user HTML5 whiteboard, which can replay anything - anytime :)(d.2x.io)
2 points by einaros 15y ago|6 comments
30.
by einaros 15y ago
Uses node.js, socket.io and express.js as server. Strokes are stored in mongodb, and cached gzipped for replays. The current state is also preserved on the server, using node-canvas. An example of the replay feature: http://draw.2x.io/repl

More ›