geertj

35 ms·

391.
by geertj 13y ago
Does it need a Java Runtime to run?
392.
by geertj 13y ago
Have a look at my Bluepass project. It uses a much more modern UI and has P2P sync built in. I did a (failed) fundraiser for it on Hacker News 6 months ago. After the fundraiser failed I continued to work on it in my spare time. See bluepas
393.
Lessons learnt from designing the Red Hat Enterprise Virtualization API(restful-api-design.readthedocs.org)
1 points by geertj 13y ago|0 comments
394.
One Day Compilers(venge.net)
2 points by geertj 13y ago|0 comments
395.
by geertj 13y ago
Congrats to MongoDB. But for me they became pretty much irrelevant after PostgreSQL 9.1 added a JSON datatype.
396.
by geertj 13y ago
Let's exclude Java for a second, as it's verbose syntax and baroque directory structures almost require you to use an IDE. My languages are Python, C, C++ and some Haskell and Clojure. > code completion: Vim has Omnicomplete. B
397.
by geertj 13y ago
This is the second IDE announcement on the front page in 2 days (the other one being PyCharm). So far I have resisted the temptation to use an IDE. Whenever I thought I needed a feature from an IDE, I investigated how to achieve it in Vim.
398.
by geertj 13y ago
Hopping on my soap box here.. I'd think that the word "exponentially" is used incorrectly in the title. The trend to use cool math terms in everyday language is a something that has been going on over the last few years. It c
399.
A Capella String Theory: Bohemian Gravity(universetoday.com)
1 points by geertj 13y ago|0 comments
400.
by geertj 13y ago
Amen! Finally someone talking sense. Apart from being a hype, Hadoop is also a wet dream for VCs that want to have "exposure" to "big data". Hadoop is a solution for cases where you have multiple petabytes of data, with
401.
by geertj 13y ago
"It is contrary to the ethical obligations of cryptographers, computer scientists, and engineers to participate in the development of technologies for mass surveillance. It is also a violation of professional codes of conduct." I
402.
HVX: Virtualizing the Cloud(usenix.org)
1 points by geertj 13y ago|0 comments
403.
by geertj 13y ago
ARGH NO ARGH. First, conventional DLP systems also have suspect parameters. Which parameters are those? For a classic DH run, there are just two parameters: a prime p, and a generator g. Normally you generate these yourself. Any safe prim
404.
Comparing AWS, Rackspace and HP: Performance Variability(ravellosystems.com)
3 points by geertj 13y ago|0 comments
405.
by geertj 13y ago
The Keepass format is not suitable for my use. Bluepass uses an append-only database containing a forest of nodes. Each node is a specific password version, and child nodes are updates of a parent. This data structure is used to do conflict
406.
by geertj 13y ago
It depends on how the VPN is setup... Multicast DNS will work if you are in the same L2 domain. Otherwise, a different solution is needed. For example, if you have a smartphone that you bring with you to the office, and that is connected to
407.
by geertj 13y ago
I confirm that [2] is my legitimate Linkedin profile :)
408.
by geertj 13y ago
Regarding the question around Firefox sync: even if you use your own server, you are sending senstive data that is encrypted with a password or passphrase over the Internet. This opens you up to dictionary attacks now, and if the communicat
409.
by geertj 13y ago
Heh, well thanks for the honesty :) > How will you do to P2P without some kind of centralized bootstrapping service with the prevalence of NAT and people who do not know how to port-forward? (I just saw the Github repos, so I will examin
410.
by geertj 13y ago
Why not improve something existing is a valid question, and I did look into it. The difficulty is that a P2P sync requires a completely difference design. Keepass is pretty much a frontend to an embedded database. A P2P node need to have it
411.
by geertj 13y ago
My plans regarding browser plugins was to have a small icon inside a <input type="password"> that can generate a new password, or would allow you to select the password if you already stored it and it's not clear which
412.
by geertj 13y ago
At this point it does not. But a feature to import a keepass DB into the Bluepass native format is in the plan.
413.
by geertj 13y ago
Hi, it's mentioned in the FAQ, little bit further down. The mobile versions will be somewhere between $5 and $10. As a perk for funding Bluepass, whatever the price turns out to be, your version will include unlimited free upgrades. Th
414.
by geertj 13y ago
I've been using a similar approach actually, with a keepass db on Dropbox. It provides a reasonable level of security assuming your passphrases are indeed random and computer generated (humans are lousy random number generators). Howev
415.
by geertj 13y ago
I did consider it, and the Bluepass sync protocol has an option for a node type without an encryption key. Such a node is merely "reflector" of traffic, which can be useful in case you have two disjoint sets of devices that are ne
416.
by geertj 13y ago
Yubikey could be interesting for protecting the local vault. I haven't looked into it yet on how easy it is to do, but it is interesting and I will look into it. I cannot make any guarantees yet though.
417.
by geertj 13y ago
You are at risk of a dictionary attack on your password / passphrase. You need protect it with a long, computer generated passphrase to be secure. I would say at least 128 bits of entropy. By being stored on Dropbox, you have to assume
418.
by geertj 13y ago
Exactly. By default Bluepass uses a long password as well to protect the local database. However, you can opt to choose a shorter password, or no password at all. In this case you are still protected by: * The physical security of your devi
419.
by geertj 13y ago
Kickstarter is US/UK/Canada only. Being Dutch and resident in Italy it would not work. I hadn't really looked at Indiegogo before I was too far along doing my own site. In the end it was relatively simple. I'll open sour
420.
by geertj 13y ago
A few things: * Bluepass does push synchronization. So you wouldn't need to manually sync. * It would work on smartphones / tables too. * Are the remote git repos under your physical control? If not then your setup is vulnerable t

More ›