jgeralnik

7 ms·

31.
by jgeralnik 4y ago
But that's the thing - even with double encryption tailscale and your SSO can run commands on your machines 1) Run tailscale --ssh on your server 2) A malicious SSO or tailscale add a new machine to your network and update your ACL suc
32.
by jgeralnik 4y ago
I didn't mean binary as in "binary blob" but as in "standalone program separate from the tailscale program". Sorry for any confusion :)
33.
by jgeralnik 4y ago
So @bradfitz when are you releasing https://tailscale.com/connect/ for real? :) Context for the uninitiated - as a crazy idea on the podcast Security Cryptography Whatever (hosted by tptacek and others less well known
34.
by jgeralnik 4y ago
Double encryption doesn't actually help in that case though - if tailscale (maliciously) added nodes to your network the ssh session being encrypted wouldn't change the fact that they can run commands on your machines. And if they
35.
by jgeralnik 4y ago
For what it's worth I encountered the same issue and came up with a solution: https://github.com/cloudflare/cloudflared/issues/574 Cloudflare have ignored the github issue (which includes a solution) but
36.
by jgeralnik 4y ago
You can't have a string of 4242T zeroes immediately after the first 101T digits but presumably you could have them sometime later (say after another 10000T digits)
37.
Bizarro World: World Record Tetris (2007)(archive.boston.com)
36 points by jgeralnik 5y ago|3 comments
38.
by jgeralnik 5y ago
The second population contains 100 people without the disease. Of them we expect one person to have a false positive. In addition the person who actually has the disease will test positive. So on average 2 people will test positive, one of
39.
WhyProfiler – hybrid profiler for Jupyter notebook and Python(home.robusta.dev)
1 points by jgeralnik 5y ago|0 comments
40.
by jgeralnik 5y ago
IPv6 doesn't mean no firewall and NAT!=firewall You should still be blocking incoming requests for IPv6 endpoints and only open ports you intend to serve publicly.
41.
by jgeralnik 5y ago
The author went out of their way to hide the factors of N, presumably so that nobody else would actually be able to generate signed certificates. However, they did this by hiding half the digits of the factors. Revealing so many digits of t
42.
by jgeralnik 6y ago
Some more information - I found this YouTube channel which has videos of various hacks of Kongregate games. I don't think I ever saw it as a child but it brings back memories of various things we would do. Here is a tool called Ragnaro
43.
by jgeralnik 6y ago
Yes! I was definitely on Kongrehack and used Niflheim. I never used mass submission of badges, I would break each game individually. Hacking the game became the challenge, and games that nobody else on Kongrehack had managed to cheat at wer
44.
by jgeralnik 6y ago
I spent middle school hacking games on Kongregate to obtain badges and high scores. There were incredible tools available for hacking flash games - debuggers, decompilers, cheat engine like tools. Most of the tools were dedicated to kongreg
45.
Bitcoin blockchain surpasses 2^92 hashes(twitter.com)
1 points by jgeralnik 6y ago|0 comments
46.
by jgeralnik 7y ago
As long as only one side of the connection is behind a corporate NAT you could simply try all 65535 ports until you find the one that works. The side behind the NAT would receive the packet and then be able to respond.
47.
by jgeralnik 7y ago
The really cool part about this is that the server does not need to know the client's ip address. Instead a new original form of ICMP hole punching is used to allow any client to punch the NAT so that the server can dynamically learn t
48.
Pwnat – Autonomous Nat Traversal (2010)(samy.pl)
97 points by jgeralnik 7y ago|40 comments
49.
by jgeralnik 8y ago
My favorite story that I've talked about as the first "cyber" attack for years is from the time of the second Jewish temple, a few hundred years B.C. The Jewish calendar is based on the lunar cycle, and each month has either
50.
by jgeralnik 8y ago
True, but the GP claimed that if we can order alphabetically we can create a one to one correspondence with natural numbers. Obviously we can order reals (using <), I interpreted the original post as referring not to your definition but
51.
by jgeralnik 8y ago
The challenges are years old and not actively maintained. Until this thread I haven't seen any people who passed level 12 or so
52.
by jgeralnik 8y ago
The challenge in question is just a jpg of the logo of ruxcon 2004. The password for the next level is presumably steganographically encoded in it. The challenge is much easier (and perhaps only possible) given the original image, but the l
53.
by jgeralnik 8y ago
+1 to vortex. I participate often in CTF competitions and it's my go to recommendation for serious people looking to get more involved. Most of the early stages are great because they are no nonsense - they give you the papers explaini
54.
by jgeralnik 8y ago
Not quite, you can't order all natural numbers alphabetically either but that doesn't mean you can't count them. A better way to count based on names would be to first count all single letter names alphabetically, then all tw
55.
Many Bluetooth Implementations and OS Drivers Affected by Crypto Bug(bleepingcomputer.com)
4 points by jgeralnik 8y ago|0 comments
56.
Catching integer overflows with template metaprogramming (2015)(capnproto.org)
88 points by jgeralnik 10y ago|32 comments
57.
by jgeralnik 10y ago
> The worm spreads by jumping directly from one lamp to its neighbors, using only their built-in ZigBee wireless connectivity and their physical proximity. The attack can start by plugging in a single infected bulb anywhere in the city,
58.
IoT Goes Nuclear: Creating a ZigBee Chain Reaction(iotworm.eyalro.net)
7 points by jgeralnik 10y ago|1 comments
59.
by jgeralnik 11y ago
The original source for this puzzle was the 2013 MIT Mystery Hunt: http://www.mit.edu/~puzzle/2013/coinheist.com/rubik/a_regula...
60.
by jgeralnik 11y ago
The email field on hn profiles is hidden, if you want people to see it you should post it in the about field.

More ›