jvehent

36 ms·

331.
Mozilla Security/Server Side TLS(wiki.mozilla.org)
2 points by jvehent 12y ago|0 comments
332.
by jvehent 12y ago
I have been using JSON types in postgres 9.3 for several weeks now. It's nice. It just works. I love being able to mix relational logic on static columns with undefined documents on dynamic columns, all in the same tables.
333.
by jvehent 12y ago
Thank you for that blog post. I managed to retrieve some of them and add a few attack vectors to my checklist: https://jve.linuxwall.info/blog/index.php?post/2014/09/25/Sh... If you find any more of
334.
Shellshock IOC search using MIG(jve.linuxwall.info)
3 points by jvehent 12y ago|0 comments
335.
by jvehent 12y ago
So I'm gonna make a wild guess here and assume you haven't written in Go. If you had, you'd probably find it fun and convenient. Not revolutionary, just fun and convenient. That's enough for me to like it better than pyt
336.
by jvehent 12y ago
Sure, you can treat HTTP as a transport mechanism, which is what we've all been doing for the last 10 years because opening ports on firewalls sucks. But HTTP is a resource manipulation mechanism: GET/POST/PUT/DELETE&#
337.
by jvehent 12y ago
At what point did HTTP and JSON become synonymous to Simple? Yes, a protocol and a data format can be convenient when applied to a specific problem, but that doesn't mean that everything should use them. I've seen people refuse
338.
MIG: Mozilla InvestiGator(mig.mozilla.org)
2 points by jvehent 12y ago|0 comments
339.
Postgres multicolumn indexes to save the day(jve.linuxwall.info)
2 points by jvehent 12y ago|0 comments
340.
by jvehent 12y ago
Don't work for the man. Work for mankind.
341.
by jvehent 12y ago
A process failed, and the DB dump that is published to help contributors improve the MDN site got out unsanitized. The sanitization/publication process will be redesigned to include stricter controls. For now, it is shut down. MDN has
342.
by jvehent 12y ago
It's useful to contributors who work on the site development.
343.
by jvehent 12y ago
It's what django uses, and this site uses django.
344.
by jvehent 12y ago
tldr: an automated data sanitization process failed, emails and salted hashed passwords were disclosed. no server was hacked.
345.
Guidelines for HAProxy termination in AWS(jve.linuxwall.info)
1 points by jvehent 12y ago|0 comments
346.
by jvehent 12y ago
See also https://wiki.mozilla.org/Security/Server_Side_TLS#Haproxy and https://jve.linuxwall.info/ressources/taf/haproxy-aws/
347.
by jvehent 12y ago
C++, Javascript, Python... or Rust ! :)
348.
by jvehent 12y ago
http://startssl.com/ . $0/year. No bullshit.
349.
by jvehent 12y ago
This is exactly what MWoS is about.
350.
Introducing Mozilla Winter of Security 2014(blog.mozilla.org)
37 points by jvehent 12y ago|14 comments
351.
Go for Sysadmins [Gophercon](confreaks.com)
1 points by jvehent 12y ago|0 comments
352.
OpenSSH sshd – memory leak(pastebin.com)
116 points by jvehent 12y ago|42 comments
353.
by jvehent 13y ago
Yet Another Test Script: https://github.com/jvehent/cipherscan It uses openssl to find out the cipher priorities, PFS keys and a few others things from a target site. I wrote it because, while I love SSLLabs and Ivan&#
354.
by jvehent 13y ago
Author of the Mozilla's Server Side TLS here. Glad that you found it helpful. Anything else that you think we should add to it?
355.
by jvehent 13y ago
It's not specific to cryptography. There is a hierarchy in all fields: 1. Top researchers come up with algorithms and techniques - The research corpus reviews them 2. Top programmers implements these techniques - The program
356.
by jvehent 13y ago
And just to add to this :) http://people.mozilla.org/~smartell/cbeard/cbeard-illustrati...
357.
by jvehent 13y ago
People who are going to comment on this blog post need to realize how disturbing this episode has been for Mozillians. We are talking about a small group of people, a couple thousands at best, that work with limited resources to keep the we
358.
by jvehent 13y ago
On small websites, I use git to track /etc and /var/www (where the webapp code is installed). 5 years ago, I would have recommended to rsync the entire server daily. But nowadays it's a lot easier to snapshot an EC2 inst
359.
Mitigate TCP SYN Flood Attacks with Red Hat Enterprise Linux 7 Beta(rhelblog.redhat.com)
5 points by jvehent 13y ago|0 comments
360.
by jvehent 13y ago
Check for the extension: $ echo -e "quit\n" | openssl s_client -connect google.com:443 -tlsextdebug 2>&1| grep 'TLS server extension "heartbeat" (id=15), len=1' TLS server extension "heart

More ›