jvehent

42 ms·

391.
by jvehent 13y ago
Yes, the goal is to provide a ciphersuite that can be copied directly. But instead of stopping after the first paragraph, we explain why we think this ciphersuite is best. The guideline is not just a ciphersuite, it's a study of the s
392.
by jvehent 13y ago
This is correct, I am looking for a way to understand the score from the UI directly. Glad to see it's on the roadmap for V2, and thanks for the hard work! As a side note, while researching this guideline, we found that the benefit of
393.
by jvehent 13y ago
SSLLabs is great already, I use it constantly. The one thing that could be improved is showing the detail of the score calculation. It's rather confusing at the moment, and I have no idea what criteria contributes to a better score. DH
394.
by jvehent 13y ago
> How much of a security and performance increase is there to gain with it? The time it takes to establish a TCP connection to an OCSP responder, send a query, wait for a response, parse it and close the TCP connection. I think it's
395.
Security/Server Side TLS(wiki.mozilla.org)
134 points by jvehent 13y ago|26 comments
396.
"A" Grade SSL/TLS with Nginx and StartSSL(jve.linuxwall.info)
2 points by jvehent 13y ago|0 comments
397.
Learning From a Recent Security Vulnerability in Persona(blog.mozilla.org)
4 points by jvehent 13y ago|0 comments
398.
by jvehent 13y ago
When you've been a sysadmin for long enough, you just know that stuff by heart. This is what they are looking for. You don't have time to google anything when your system is down.
399.
by jvehent 13y ago
This is the ciphersuite that we recommend at Mozilla. We're working on publishing our work on SSL/TLS recommendations. It's very similar to Qualys's work. ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-R
400.
by jvehent 13y ago
You know google has a security program with bounties, right?
401.
TLS ciphers preferences of top domains(gist.github.com)
6 points by jvehent 13y ago|2 comments
402.
by jvehent 13y ago
Opened the link. Did ctrl+f "api". Nothing found. Closed the link. Unless it has an API, I'm not interested in your SaaS.
403.
My phone does crypto faster than my servers(jve.linuxwall.info)
2 points by jvehent 13y ago|0 comments
404.
by jvehent 13y ago
And like vim, you will probably never use, nor need, all the shortcuts available. I use about a dozen keys in mutt, some of which are custom binding I use to send messages to separate maildir in one keystroke. All my emails get into my Inbo
405.
by jvehent 13y ago
People who haven't taken the time to work with mutt sometime fail to understand how convenient and user friendly it is. Pretty colors and nice interfaces do not always increase productivity. Sometimes displaying threads properly is all
406.
by jvehent 13y ago
Brian Smith works at Mozilla in the Security Engineering team. He's one of the brain behind NSS.
407.
by jvehent 13y ago
<plug> If you use Chef, check out AFW. https://github.com/jvehent/AFW </plug>
408.
by jvehent 13y ago
He's talking about wrappers. Wrappers are dist specific. Some people like to use UFW and so on. It's their choice. But real men call iptables directly.
409.
by jvehent 13y ago
Simple bashrc function # go up X directories up_dir() { num_of_dirs=$1 for i in $(seq 1 $num_of_dirs) do cd .. done } alias up=up_dir Usage: $ pwd /home/us
410.
by jvehent 13y ago
Not tracking the user's personal information doesn't mean you're not tracking the number of clicks, or calculate geoip stats.
411.
by jvehent 13y ago
- Where do I put my binaries ? in /usr/bin of course - But it's kinda personal stuff... so put it in /usr/local/bin - Oh right, but now I have more stuff that's not really important but still useful that&#
412.
by jvehent 13y ago
I filmed Pablo's presentation at the last Netfilter workshop. Check it out if you want a long, in depth, presentation of Nftables. 616 MB video: http://jve.linuxwall.info/talks/NetfilterWorkshop2013/NFTabl...
413.
Which web browser do you trust?(nakedsecurity.sophos.com)
1 points by jvehent 13y ago|0 comments
414.
by jvehent 13y ago
I had missed that. Thanks for clarifying.
415.
by jvehent 13y ago
* User-friendly support for both OpenPGP and S/MIME encryption and signatures * A very fast, scalable search engine I'd like to know how they achieve both without having the keys, and without shipping code (JS, java applet) that
416.
Hardware RNG in Via CPU(jve.linuxwall.info)
1 points by jvehent 13y ago|0 comments
417.
by jvehent 13y ago
That kind of stuff, is why I've always wanted to be an engineer. In my mind, I visualize arrangements of systems and networks exactly the same way as these. Building stuff, pressing the "On' button, and seeing it all work is
418.
Firefox OS sandboxing support(hg.mozilla.org)
27 points by jvehent 13y ago|6 comments
419.
by jvehent 13y ago
ZTE phones are coming this friday for $79: http://stores.ebay.com/ztemobileus This is the phone that was launched in Spain. The Ebay version will be vanilla FxOS, unlocked and upgradable!
420.
by jvehent 13y ago
I run my own mail server. Linux + Postfix + Dovecot. The standard stuff. How do I enable Persona on user@example.net ?

More ›