jvehent

14 ms·

91.
by jvehent 10y ago
Firefox has a similar feature enabled in dev edition: https://blog.mozilla.org/security/2017/01/20/communicating-t...
92.
by jvehent 10y ago
RSA is safe. You should keep using it. Modern crypto is starting to use ECDSA because smaller key size means faster computation, but you wouldn't notice the difference in SSH anyway. More info: https://wiki.mozilla.org/
93.
Video-conferencing the right way(jve.linuxwall.info)
3 points by jvehent 10y ago|0 comments
94.
by jvehent 10y ago
https://github.com/hakimel/reveal.js/ is my framework of choice when making slides.
95.
by jvehent 10y ago
Yeah, that's definitely how cryptographers should be ranked. See this guy, for example, what a joke: http://cr.yp.to
96.
by jvehent 10y ago
LE needs $2MM/year to run and bootstrapped under an existing CA, so there's your starting point ;) It might be easier to resell someone else's certificates.
97.
by jvehent 10y ago
An interesting review would be to compare this XPS13 with the upcoming Lenovo Carbon X1 as a Linux laptop.
98.
by jvehent 10y ago
I just implemented directed graphs with cytoscape.js and it was fairly straightforward.
99.
by jvehent 10y ago
In cryptography, "zero knowledge" means something very different than "service providers cannot access cleartext data". > In cryptography, a zero-knowledge proof or zero-knowledge protocol is a method by which one par
100.
Fixing an SVG Animation Vulnerability(blog.mozilla.org)
2 points by jvehent 10y ago|0 comments
101.
Firefox web extensions and innovation(mckay.pub)
5 points by jvehent 10y ago|0 comments
102.
by jvehent 10y ago
Being a good sysadmin in 1996 and 2006 also required skills in programming. Sysadmins who don't code have always been limited in their career evolution. The same is true for developers who don't know anything about operations. The
103.
Certificate Transparency Monitor(ct.tacticalsecret.com)
1 points by jvehent 10y ago|0 comments
104.
by jvehent 10y ago
Remote workers, who represent a growing population of developers, use their webcam daily to chat with colleagues.
105.
by jvehent 10y ago
> The other major reason I went with the x250 is that I'm a big fan of the trackpoint. The trackpoint is the only thing that keeps me on Lenovo laptops (Carbon X1, probably P50 next). I keep the touchpad disabled on my laptop.
106.
by jvehent 10y ago
Most offices I visit no longer provide RJ45 to the desk. It's all wifi nowadays, which makes sense since you're supposed to get 600+Mbps on a modern access point (which never happens, but that's the sales pitch). At least the
107.
by jvehent 10y ago
pentadactyl is co-developed by a member of the Firefox Add-ons core team [1]. I don't know what the plan is to port it to web extensions, but at least you can be sure the team is aware of it ;) [1] https://github.com/5d
108.
Firefox web extensions in 2017(blog.mozilla.org)
4 points by jvehent 10y ago|0 comments
109.
by jvehent 10y ago
If you're wondering why this is useful, or if you need it at all, ask yourself if you would want to get an alert when nginx execs a shell, or opens /etc/shadow. Syscall auditing gives you the lowest possible interface to capt
110.
Our Role in Protecting the Internet – With Your Help(blog.mozilla.org)
2 points by jvehent 10y ago|0 comments
111.
by jvehent 10y ago
Having worked close to a few highly skilled C/C++ developers (the author of HAProxy, core Firefox developers, people who write highly sensitive crypto code, ...), it is amusing to see them constantly doubt their knowledge of the langua
112.
by jvehent 10y ago
Lenovo tried this in the 2nd generation of the carbon X1 and swiftly went back to the traditional F keys in gen 3. I had to use one of those for a short while, it was highly unpleasant. http://shop.lenovo.com/us/en&#x2F
113.
Remediation Plan for WoSign and StartCom(groups.google.com)
1 points by jvehent 10y ago|0 comments
114.
by jvehent 10y ago
I've been writing Go daily for various security project for over 3 years now, and so far it's been a trusted ally. I can't remember being anywhere as productive in any other language I've used in the past.
115.
by jvehent 10y ago
You can do it with HAProxy by checking for SNI and falling back to a SHA1 cert when the extension is absent. https://jve.linuxwall.info/blog/index.php?post/2015/10/04/SH...
116.
by jvehent 10y ago
> You can't support Windows XP users who use IE anymore with HTTPs. Sure you can. Just ask a CA that has an old root trusted by XP but no longer trusted by modern browsers, and they'll issue a SHA-1 cert for you without risking
117.
by jvehent 10y ago
Which would require creating new roots to be submitted to Mozilla's CA program, and passing the bar for inclusion of a new CA. That's a multi-year process, unless they can get another CA to cross-sign their root, like LE did. I do
118.
by jvehent 10y ago
Have you tried writing that code from scratch without any libraries?
119.
by jvehent 10y ago
I couldn't agree more. At Mozilla, the Services Security team is part of the team that develops and builds services. We work with devs and ops every day. We write application and infrastructure code. We share successes and failures. Th
120.
by jvehent 10y ago
I'm not a fan of the "DevSecOps" or "SecDevOps" terms. Security is just part of DevOps, the same way QA or product management are. It's not its own thing bolted on top of DevOps practices, it's an integral

More ›