ejcx

33 ms·

301.
by ejcx 10y ago
Signal would be an improvement, but the status of signal as open source, and the details of what you get security wise is not very transparent with all of these new "signal integrations" that open whisper is doing. Signal is defin
302.
/dev/random – a new approach(lwn.net)
2 points by ejcx 10y ago|0 comments
303.
by ejcx 10y ago
That sounds like exactly the type of thing you would want to/have to acquire, right? I think a good example is Instagram. 1b sounded like a lot, but it now looks like a grand bargain.
304.
by ejcx 10y ago
No it would not, you're right, but there's more too it. Most ISPs, it's just easier to get an OCA in their data center that going through the process of throttling traffic or whatever else they want to do with it. TLS SNI is
305.
Bringing HSTS to www.google.com(security.googleblog.com)
112 points by ejcx 10y ago|73 comments
306.
Our statement on the results of the Jacob Appelbaum investigation(blog.torproject.org)
100 points by ejcx 10y ago|114 comments
307.
by ejcx 10y ago
A lot of people in this thread are seeing $6 in revenue next to Apple's huge worth and dismissing it. That's a lot of money, and it is growing. In my opinion, Apple is undervalued right now (I'm biased, I own a trivial amount
308.
by ejcx 10y ago
Performance is actually the reason I started this project. A friend of mine was creating a product based on mitmproxy for a client and was running in to performance projects. He asked me for advice and I pointed him to just how little work
309.
by ejcx 10y ago
That's what the benefit of using openresty is. I can print and hack on http requests in an already mature ecosystem. It's two ways to do the same thing, but I like my way, and mine uses software that is production ready as a proxy
310.
by ejcx 10y ago
My problem with using mitm proxy is that it isn't as easy to hack on. I'm an nginx person, so learning a new python code base to hack on features I want is way harder than having something simple I can add on to, as needed.
311.
by ejcx 10y ago
Wow. Incredibly detailed and technical. Wonderful blog post. High five. There isn't enough of this type of research happening and being published (in a detailed form)
312.
Making your own web debugging proxy(twiinsen.com)
87 points by ejcx 10y ago|21 comments
313.
Visualizing Modulo Bias(twiinsen.com)
26 points by ejcx 10y ago|1 comments
314.
by ejcx 10y ago
So, we aren't only overdue but a quake seems imminent? The upper bound of time between quakes was very slim. This is a stupid and selfish question, but what does a quake on the San Andres fault mean for San Francisco? My knowledge of a
315.
by ejcx 10y ago
Just to chime in since I'm the OP of this subcomment. Generating 128 byte identifiers is ridiculously overkill. I can safely say if you generate 128 byte identifiers securely, the earth will cease to exist before a collision is found.
316.
Visualizing Modulo Bias(twiinsen.com)
4 points by ejcx 10y ago|0 comments
317.
by ejcx 10y ago
Yes you could, but you still end up with this dependence on a lookup when you store revocations. Once you do that you lose the stateless benefit of cryptographically signing the object, and at that point you could just store the whole objec
318.
by ejcx 10y ago
Signing something is great but it comes with some possibly unintended consequences. If you want a stateless cookie, you won't be able to revoke it down the road. Which means if the cookie is long lived, someone who gets their hands on
319.
by ejcx 10y ago
Just wanted to give OP, CiPHPerCoder, a shoutout. His work is all really high quality and he works very hard. Halite is great for the PHP crypto crowd (if you are unfortunate enough to be in that crowd...it is small). Really high quality pr
320.
by ejcx 10y ago
This might be a dumb question. How does that compare to Uber? I see Uber has been raising like a billion dollars every month I'm guessing their spending is a lot higher (especially having something ridiculous like 5000 non-driver emplo
321.
by ejcx 10y ago
Having patched one of this researchers race conditions, while I was at lastpass, I did exactly that. This only applies to coupon redemption
322.
by ejcx 10y ago
Contact our recruiter, ed@cloudflare.com, and he will take care of you.
323.
by ejcx 10y ago
Just want to say to those of you who don't have great communication skills, and know it. This recipe pretty much applies to all cold emails, or any email with a party that you want something from and don't know well. Job interview
324.
by ejcx 10y ago
CloudFlare https://www.cloudflare.com/ | San Francisco, CA; London, UK; Singapore, SG; Urbana-Champaign, IL; Austin, TX | VISA, ONSITE CloudFlare is building a better Internet -- performance and security optimization at the
325.
by ejcx 10y ago
Cool! I'll write it this week and get back to you.
326.
by ejcx 10y ago
I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do. It's free. It's a breeze to set up, all you need to do is point it at
327.
by ejcx 10y ago
I have built a lot of random stuff in Go. I picked up go about two years because it seemed to be a really cool middle-of-the-road language. It wasn't great at anything but was pretty good at most things. Before, I had written a lot of
328.
by ejcx 10y ago
I always assumed this anti-pasting was a requirement of some braindead auditor who insisted that this was a necessary security mechanism. If they aren't, there's a lot of "debt" in the passwords space, like Troy mentions
329.
by ejcx 10y ago
Thanks for the feedback tedminston.
330.
by ejcx 10y ago
Totally the truth. I got my technician license with about an hour of studying and the "experts" were great folks, and desperate for new blood. Young people aren't learning about radio as much these days. One of the old guys t

More ›