kfreds

28 ms·

271.
by kfreds 7y ago
Hi Andrew! Thank you. I definitely took notice when PIA followed our lead and decided to donate to WireGuard as well. I suspect that was your initiative? As far as innovation goes we published our vision for the VPN industry a few months ag
272.
by kfreds 7y ago
Thank you for the recognition! If you haven't read our blog post about System Transparency as a vision for more transparent and trustworthy computing I think you would enjoy it: https://mullvad.net/en/blog/201
273.
by kfreds 7y ago
Thank you. I agree with that vision. Please note that you might have misunderstood the article though. Specifically you seem to have missed these two passages: > Modern Intel and AMD processors unfortunately still require some closed-sou
274.
by kfreds 7y ago
I’m the author of the article. Currently on my phone, but feel free to ask questions and I’ll answer as I’m able.
275.
by kfreds 9y ago
Mullvad | Gothenburg, Sweden | FULL-TIME | ONSITE or REMOTE | Mobile Rust developer Mullvad is a VPN service that helps keep internet users’ online activity, identity, and location private. We are a team fully dedicated to our goal - making
276.
by kfreds 10y ago
More information will come in due time. We are only going public now because of the open letter published yesterday. Freedom of the Press Foundation called on camera manufacturers to build encryption into their cameras. https://f
277.
by kfreds 10y ago
Fair enough :) The product looks and feels like a memory card, and identifies as such to a laptop, camera, dictaphone, or other device. The biggest functional difference is that all files written to the card are automatically encrypted on-t
278.
by kfreds 10y ago
I'm developing a solution to this problem. Longer version: Since I last posted about this on HN (check my comment history), I put the project on ice, and then started it again a year ago. Follow @ZifraTech on Twitter for more informati
279.
by kfreds 10y ago
"All versions (SSL3.0, TLS1.0, TLS1.1, TLS1.2) are affected." according to http://security.360.cn/cve/CVE-2016-8610/ It would be helpful if the researchers clarified how potent this DoS attack vector is.
280.
by kfreds 10y ago
Hi, I'm Fredrik Strömberg, one of Mullvad's founders. I'm a frequent lurker on HN. Thank you both! Like you said you can trust what we say regarding logging, but you are unable to verify it. Since that's true for all VPN
281.
Proposed limited exception to SHA-1 issuance(groups.google.com)
2 points by kfreds 11y ago|0 comments
282.
by kfreds 11y ago
The latest version (2.3.7) of the official OpenVPN client is vulnerable, as is Tunnelblick for OSX. No fix has been published yet. The OpenVPN clients for Android and iOS are not affected. See https://mullvad.net/en/v2&
283.
by kfreds 11y ago
I'm curious, if you use a stream cipher for file encryption how do you avoid the two-time pad problem?
284.
by kfreds 11y ago
Yes, I'm Fredrik, one of the founders.
285.
by kfreds 11y ago
Here's a link to the original presentation: https://youtu.be/mpbWQbkl8_g?t=2851 Remember L0pht and cDc? This is a project lead by Peiter Zatko aka Mudge. His Wikipedia page is a piece of hacker history. Also see https
286.
by kfreds 11y ago
If you're looking for an open source HSM take a look at cryptech.is
287.
by kfreds 11y ago
None of those products are, to my knowledge, open source. Vault might very well implement the ASSD specification. However, to use ASSD the OS needs to be able to send ASSD-specific low-level SD commands to the card. It would require patchin
288.
by kfreds 11y ago
This makes me very excited but also a bit sad. I'm developing a similar product, so this is great validation. On the other hand, this is quite the competition. Could someone share a link to the original presentation? I'd love more
289.
by kfreds 11y ago
> I myself want an open crypto chip, not one that still needs blobs in 2015. And I've seen a few movements in that direction. Who's working on this? Anyone else than the team behind cryptech.is?
290.
by kfreds 12y ago
The most important information is missing - did the attackers get the package signing key? The comment "the window for package compromise was very very small" is a bit ambiguous. That the security of package integrity is so fragil
291.
Shellshocking OpenVPN servers
86 points by kfreds 12y ago|6 comments
292.
by kfreds 12y ago
Pick one that can deliver the full certificate chain without using SHA-1. The faster the web moves away from SHA-1 the better, and rewarding companies that are already abstaining from SHA-1 contributes to our collective security, in the cas
293.
How VPN services responded to Heartbleed(torrentfreak.com)
2 points by kfreds 12y ago|0 comments
294.
by kfreds 13y ago
No, I didn't think of any rewards. Thanks for the link though.
295.
by kfreds 13y ago
I published on the openvpn-users mailing list before HN. I'll also be contacting them directly with technical details.
296.
by kfreds 13y ago
No problem, I only added the quotes for more clarity. I'm glad I could help :)
297.
by kfreds 13y ago
No, our target server did not use tls-auth because it would only have added complexity and no valuable information. The threat model for tls-auth is pretty straightforward. You're correct in your second paragraph. I'll quote James
298.
Successful private key extraction from OpenVPN using Heartbleed
181 points by kfreds 13y ago|21 comments
299.
Ask HN: How is our incident response to the Heartbleed Bug?(mullvad.net)
1 points by kfreds 13y ago|0 comments
300.
by kfreds 13y ago
Video: https://www.youtube.com/watch?v=VjzZPdQ_VV0 tl;dr: The lecture description says most of it. The most interesting thing that hasn't been published before is how to do off-chain transactions with minimal trust. St

More ›