glass-

8 ms·

31.
by glass- 11y ago
mtier employs a couple of OpenBSD developers to do those builds.
32.
by glass- 11y ago
> Which language? Haven't you been paying attention? You're supposed to write your security-critical code in a language that was released 5 months ago and has no major deployments yet.
33.
by glass- 11y ago
> "They should be contributing their changes back to OpenSSL versus forking". I suppose that this attitude comes from people who think the fork happened solely because of Heartbleed, when the real reasons are a little more intr
34.
LibreSSL, and the new libtls API(openbsd.org)
185 points by glass- 11y ago|67 comments
35.
by glass- 11y ago
This blog post about Wasabi is worth a read (another perspective from someone who worked there): http://www.tedunangst.com/flak/post/technical-debt-and-tacki...
36.
by glass- 11y ago
With those categorisations a maybe-probably-theoretical-phase-of-the-mooon vulnerability such as CVE-2010-1633 gets put into the same category ("remote information leak") as Heartbleed. This is why severity levels exist.
37.
Why I say Linux instead of GNU/Linux(micahflee.com)
2 points by glass- 11y ago|0 comments
38.
by glass- 11y ago
> Rust So instead of using C we should write our security-critical software in a language that was released 3 months ago and has no major deployments.
39.
BSD Now 103: Interview with Bryan Cantrill(jupiterbroadcasting.com)
2 points by glass- 11y ago|1 comments
40.
by glass- 11y ago
> Unless all you use is enterprisey crap or play AAA titles from bad companies Is Photoshop a AAA title or enterprisey crap? How about all other common software that many, normal people use daily that doesn't run under Wine?
41.
by glass- 11y ago
And instead people are going to use what?
42.
by glass- 11y ago
ABP is not a one-man show, it's now developed by a company (Eyeo GmbH) that makes a lot of money getting companies like Google to buy into their "acceptable ads" scheme. ABP also considers ads that track people (such as Googl
43.
by glass- 11y ago
I run multiple exits and consider much of what is written about the risks of running exit nodes to be overblown scaremongering, so it is nice to see an article about the actual reality of running exits: it's boring. There are legitimat
44.
by glass- 11y ago
Google and Snopes exist and yet people still forward hoax emails to their friends and post/share hoaxes on Facebook.
45.
by glass- 11y ago
This policy was created in 2009 in response to the controversy when NoScript started messing around with ABP and broke functionality so that ads would display on the NoScript developer's website. https://adblockplus.org&#x2F
46.
by glass- 11y ago
No it doesn't. This is some bizarre myth that keeps being perpetuated.[0] [0] https://github.com/gorhill/uBlock/wiki/Does-uBlock-block-ads...
47.
by glass- 11y ago
Google Analytics had a self-hosted version, or more specifically Google Analytics was a self-hosted solution when it was Urchin before Google acquired it. You could still get the self-hosted version for a price until Google killed it in 201
48.
by glass- 11y ago
You don't find it offensive. I and millions of other people do. You deal with it.
49.
by glass- 11y ago
It's not only about the VPN leak. WebRTC also leaks internal IP addresses which provide additional entropy that can be used for fingerprinting.
50.
by glass- 11y ago
> They talk about FreeBSD in the original article and the guy tests that on other OS and say it's not a serious vuln? Mr Hansteen is saying it is not a serious OpenSSH vuln, like the tech media is claiming it is. > This is a ser
51.
by glass- 11y ago
The messenger reported the problem privately 9 months ago[0] and it was only fixed as they were preparing to go to the press. The day before the "stunt hacking" Jeep were claiming it was not a problem[1]. [0] https://tw
52.
The OpenSSH Bug That Wasn't(bsdly.blogspot.com)
129 points by glass- 11y ago|86 comments
53.
by glass- 11y ago
Because Theo is right, having to write programs to observe programs is insane. While spender is wrong for multiple reasons. Such as that /var is mounted nosuid on OpenBSD by default so their hypothetical "httpd chmod'ing to s
54.
by glass- 11y ago
Are they person who runs the @grsecurity twitter account that seems terminally bitter about everything OpenBSD does?
55.
by glass- 11y ago
People thinking and saying that this only works for small teams should take a look at how many devs are listed in OpenBSD's latest release announcement. Hint: it's more than 2, more than 3, and more than 50.
56.
by glass- 11y ago
Developer changes code and create a diff. This diff is sent to the mailing list or other developers to test and review. The patch only gets committed when other developers have ok'd it.
57.
by glass- 11y ago
You can also view the source on the cvs web mirror: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/
58.
by glass- 11y ago
It reminds me of Douglas Crockford's talk where he mentioned that a company asked him for an exemption to the "do no evil" clause in the JSON License, and he said he didn't want to name the company as that would embarras
59.
by glass- 11y ago
+1 for Fastmail. I really enjoy spam filtering based on personal bayes rather than a global database.
60.
by glass- 11y ago
I see spam from gmail all the time, and for about the last year they wouldn't accept reports from SpamCop (that changed a couple of weeks ago).

More ›