jvdh

13 ms·

1. 91.▲
   by jvdh 12y ago

   You are not encrypting everything everywhere. It is putting things in a different envelope for each hop you are doing in the post. Yes, it is secured in transit, but there is no way that you can verify that everything went securely.
2. 92.▲
   by jvdh 12y ago

   I am still not convinced by the "encrypt all the SMTP traffic" argument. It adds more encrypted traffic, but these mails are still decrypted on the mail servers to inspect them and then to forward them again. Worse still, most mai
3. 93.▲
   What caused today's Internet hiccup(bgpmon.net)

   188 points by jvdh 12y ago|27 comments
4. 94.▲
   by jvdh 12y ago

   This article has already been submitted 3 days ago under the pastebin link: http://pastebin.com/raw.php?i=cRYvK4jb ( https://news.ycombinator.com/item?id=8155177 )
5. 95.▲
   by jvdh 12y ago

   In all honesty, if the SSLLabs is too technical for you, you should not be running a site that requires HTTPS.
6. 96.▲
   by jvdh 12y ago

   Except that this does not really give you that much security. Maybe only in the transport, but certainly not verification of content. HTTPS (or SSL/TLS for that matter) only verifies the identity of the server the content is coming fro
7. 97.▲
   by jvdh 12y ago

   Please, please, please integrate this into OwnCloud? OwnCloud already has document support, but with this it would make it a killer Google Docs replacement.
8. 98.▲
   by jvdh 12y ago

   TLDR version: SSL/TLS does not verify content. Maven central allows users to upload content, so you can obviously not link a certificate with that content. Maven Central has users sign content with PGP keys. PGP keys are also a poor me
9. 99.▲
   by jvdh 12y ago

   Funny how things have not changed in 20 years.
10. 100.▲
    by jvdh 12y ago

    Like I said: "... something like portupgrade." Portupgrade still does the job, it's not broken, and still supported.
11. 101.▲
    by jvdh 12y ago

    The upgrade process is fairly simple and as always there is FreeBSD Handbook page available that describes this: http://www.freebsd.org/doc/handbook/pkgng-intro.html The ports system still exists, tracking of the
12. 102.▲
    by jvdh 12y ago

    Copyright is not something you can take away. It exists from the moment you create something creatively and originally. You can however license someone to use something that is protected by copyright. This is what licenses do; they give you
13. 103.▲
    A Qualitative Assessment of the 2012 Botnet Internet Census [pdf](sigcomm.org)

    1 points by jvdh 12y ago|0 comments
14. 104.▲
    How to manipulate curve standards: a white paper for the black hat [pdf](safecurves.cr.yp.to)

    3 points by jvdh 12y ago|0 comments
15. 105.▲
    by jvdh 12y ago

    So pcapd on iOS is supposed to allow you to capture packets from a trusted computer: http://support.apple.com/kb/HT6331?viewlocale=en_US&locale=e... pcapd supports diagnostic packet capture from an iOS device t
16. 106.▲
    Letter to PNAS Editor calling for retraction of Facebook study article [pdf](james.grimmelmann.net)

    1 points by jvdh 12y ago|0 comments
17. 107.▲
    by jvdh 12y ago

    You are never going to take away the human from this equation. Notes are taken over the course of the day, and many of the proposed systems end up taking more time: nurses do their rounds, use pen and paper to take notes while walking aro
18. 108.▲
    by jvdh 12y ago

    This description of a typical day on the ward is of course ridiculously inefficient to us as digital natives. We deal with information flows every day and can imagine ten different systems that could do this without even opening the door to
19. 109.▲
    Morality on the Internet(1sand0s.nl)

    1 points by jvdh 12y ago|0 comments
20. 110.▲
    by jvdh 12y ago

    I do really hope that we can prevent the knee-jerk reaction of just preventing all of UTF-8... Having said that, what is the best way to prevent this in comments without blocking UTF-8?
21. 111.▲
    by jvdh 12y ago

    Just for scale, backbone links these days are not 10 gigabits/sec, more in the order of 40-100 gigabits/sec. The Amsterdam Internet Exchange is the largest and most important exchange in Europe, and it's peak traffic each day
22. 112.▲
    by jvdh 12y ago

    TL;DR version Telegram is completely open-source and has an open API. There is no PKI, so the public key of the Telegram is hard coded in the application. An attacker could simply take the source code, change the server IP and public-key an
23. 113.▲
    by jvdh 13y ago

    As far as I understand it this has very little impact on the security of OpenSSL and can only be abused by someone with access to a signing system (and then you have more problems anyway). What happens is that during the signing phase the c
24. 114.▲
    Making DNSSEC more accessible(1sand0s.nl)

    1 points by jvdh 13y ago|0 comments
25. 115.▲
    by jvdh 13y ago

    I briefly enabled Google+ for one of my accounts. It has been disabled since at least 6+ months. My colleagues are still getting emails that seem to be coming from me about sharing stuff on Google+.
26. 116.▲
    by jvdh 13y ago

    This is a great example of how to lie with statistics, or what someone can claim by applying just college-level statistics. Those trend lines are completely worthless. See the trend lines for Futurama: http://graphtv.kevinformati
27. 117.▲
    by jvdh 13y ago

    I never claimed that it worked perfectly. We masters just know what to do and feel secure. More clueful webmaster know to look further. For DNSSEC most don't even have a clue what to do and Google fu is not going to help and that'
28. 118.▲
    by jvdh 13y ago

    For what it's worth, I was planning to write this already for a few weeks but did not get around to it. It struck more of a nerve than I thought. I know the draft was earlier, but implementation really should have started after the dra
29. 119.▲
    by jvdh 13y ago

    Dnssec was already in use before by using trusted anchors.
30. 120.▲
    by jvdh 13y ago

    So you also know how to do key rollovers?