maltalex

34 ms·

361.
by maltalex 8y ago
OpenVPN on IOS is horrible. But if you're looking for something a bit more mature than wireguard for now, IKEv2 IPSec VPNs based on strongswan work great. There are some ready made docker containers [0] that set up an IKEv2 VPN and can
362.
by maltalex 8y ago
> Combine this with exploits into one or more broadly trusted certificate authorities (which surely exist) and it's pretty amazing how much data China would have been able to obtain. The attacker doesn't even need to compromise
363.
by maltalex 8y ago
RPKI doesn't stop BGP hijacks. Sure, it's better than nothing but RPKI doesn't validate the entire path, only the origin. If you want path validation, you need BGPSec. But BGPSec is basically un-deployable in real-world netwo
364.
by maltalex 8y ago
> Go ahead, monkey around with BGP, since I have the public key of the recipient of my packets I can detect this and block any type of misdirection. And how did you get that public key? An attacker could pretty easily obtain a valid Let&
365.
by maltalex 8y ago
Hanlon’s razor.
366.
by maltalex 8y ago
Original Paper: https://scholarcommons.usf.edu/cgi/viewcontent.cgi?article=1... Bruce Schneier's blog post on this paper: https://www.schneier.com/blog/archives/2018/10/chinas_h
367.
China systematically hijacks internet traffic: researchers(itnews.com.au)
119 points by maltalex 8y ago|51 comments
368.
China's Hacking of the Border Gateway Protocol(schneier.com)
3 points by maltalex 8y ago|0 comments
369.
by maltalex 8y ago
Original title is China’s Maxim – Leave No Access Point Unexploited: The Hidden Story of China Telecom’s BGP Hijacking , but it was too long to submit.
370.
Leave No Network Unexploited: The Story of China Telecom’s BGP Hijacking [pdf](scholarcommons.usf.edu)
6 points by maltalex 8y ago|2 comments
371.
by maltalex 8y ago
> While there are some shady services to buy fake Github stars, with this exploit a company could just pay someone and get their repository with real user stars. Is that a thing? That link to duckduckgo doesn't return anything relev
372.
by maltalex 8y ago
> everyday you read code that other folks - many with brains much much bigger than mine - have written, and its great. I don't think that it's a language thing. It's probably popularity thing most of all. In popular langua
373.
by maltalex 8y ago
Actual paper: https://www.sciencedirect.com/science/article/pii/S074756321...
374.
‘Geek Girl’ gamers are more likely to study science and technology degrees(surrey.ac.uk)
15 points by maltalex 8y ago|5 comments
375.
The Web I Want(dev.to)
2 points by maltalex 8y ago|0 comments
376.
by maltalex 8y ago
What about setting up your own SMTP server? I’m genuinely curious. Just configure SPF and DKIM, and send email basically for free, no? Is there some back magic that these services perform to avoid getting blacklisted? What’s the benefit of
377.
by maltalex 8y ago
> Western countries are free democracies that don't spend 1 billion buck a year on propaganda, sedition, sabotage and subversion Right. Have you looked at the CIA's budget lately? How about the MI6?
378.
by maltalex 8y ago
> Is original Java still alive? That's the question. Yes. Very much so. It's either the top or one of the top languages in pretty much every benchmark: https://insights.stackoverflow.com/survey/2018#technol
379.
by maltalex 8y ago
There's a long list of authors at the bottom.
380.
by maltalex 8y ago
Better source (not google docs): https://itnext.io/java-is-still-free-c02aef8c9e04
381.
Supermicro firmware were easy to hack. So why would China need implants?(arstechnica.com)
8 points by maltalex 8y ago|0 comments
382.
by maltalex 8y ago
Market share is only part of the picture. What happened to the size of the market in the EU after GDPR?
383.
by maltalex 8y ago
> The system uses optical scans, microscopy, X-ray tomography, and artificial intelligence to compare a printed circuit board and its chips and components with the intended design. Could it detect a change within a chip? If not, then i
384.
by maltalex 8y ago
The first thing that comes to mind is extreme latency sensitivity.
385.
by maltalex 8y ago
Note that I've made a mistake with the first link. It should have been https://github.com/StreisandEffect/streisand
386.
by maltalex 8y ago
If you're interested in setting up your own VPN, take a look at streisand [0]. Also, running the VPN in a docker container is rather nice. There are a bunch of existing containers for that[1]. Oh, and if you're interested, Aruba C
387.
by maltalex 8y ago
> Indeed, noted security expert Bruce Schneier calls supply-chain security “an insurmountably hard problem.” Centrally, yes. But supply chain verification & tracking is one thing blockchains are genuinely good at. There are actual bl
388.
California Enacts First-In-Nation IoT Security Law(darkreading.com)
1 points by maltalex 8y ago|0 comments
389.
by maltalex 8y ago
In May Yubico announced IOS support for their nfc keys: https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-...
390.
by maltalex 8y ago
Congrats for launching! The kickstarter page mentions that Solo supports U2F and Fido2. What else does it support? Is it like the Yubico "security key" with just U2F and fido2 or does it support OTP, OpenPGP, Smart cards, PKCS11?

More ›