marios

33 ms·

91.
by marios 12y ago
LibreSSL is ready for prime time. It is the default SSL library on OpenBSD since version 5.6 [1], which was released on November, 1st 2014. Since then, more cleanup went in, and they developed libtls which is a new TLS API. The latter is al
92.
by marios 12y ago
"Twitter poll for Unix users: do you still use SSH v.1? If so, how often? Pls. only reply if 'yes' to first question, otherwise RT welcome :)" https://twitter.com/damienmiller/status/57040939691
93.
by marios 12y ago
Most of the time, I use straight gdb to debug my C code because that's how I was introduced to it. Then I was told about gdb -tui, which starts gdb with a curses like interface in your shell. It's a nice little trick I wish I was
94.
by marios 12y ago
Any software implementing STUN will do this. Listing all IPs is also done when using ICE, another method for NAT traversal. In my opinion, it's not really news; just a reminder that browsers have become monstrous pieces of software tha
95.
by marios 12y ago
Title should be changed to "Programming sockets in Python". This blog post has nothing to do with websockets.
96.
by marios 12y ago
No, certainly not cheaper (for any value of cheap). I haven't measured but I can't see how it would be possible, as in the first case the network stack takes care of it (in kernel land) and in the other case you have to go all the
97.
by marios 12y ago
Slower DNS responses with big hosts file is something to be expected. The solution is to feed the data to a DNS caching resolver such as unbound or dnsmasq, as I have explained in reply to UserRights. Answering here also to point out I orig
98.
by marios 12y ago
DNS blocking works quite well. It's also very effective if you can set it up on your gateway so that it blocks ads/malware for all devices (PCs, phones, tablets ... even your guests will get adblocking for free!). However, while t
99.
by marios 12y ago
Most of the features described come from the fact that FreeBSD ships with OpenBSD's PF (among others). Why would you build it pick FreeBSD considering their PF version is very outdated ? I think going with an OpenBSD base would make
100.
by marios 12y ago
I have been following the LibreSSL development and the number of memory leaks fixed is nothing short of amazing. From what I have gathered, OpenSSL PRNG routines are being too smart for their own good. Randomness should be provided by the O
101.
by marios 12y ago
VapourSynth[1] is what the AviSynth rewrite was supposed to be from what I have gathered. Hence the name ;). OTOH, it is still for the Windows platform, so not really what you were after but I thought I'd mention it anyway. [1] http:&
102.
by marios 12y ago
MinimaLT [1] comes to mind. Minimal latency through better security sounds very appealing, especially when it's not a marketint trick but a paper signed by people like DJB. The way I see it though, is not only to have a protocol, but h
103.
by marios 13y ago
Or you can run IPv6 only core-network, perform NAT64 on one side and NAT46 on the customer side. There is an implementation for this on android [1], which is trivial to run on Linux (I've ported it, there's nothing difficult as it
104.
by marios 13y ago
OpenBSD does not have loadable kernel modules, so the techniques described for FreeBSD most likely do not apply. As for the Azazel rootkit, it uses LD_PRELOAD. According to the ld.so manpage[1] it is ignored for setuid/setgid executab
105.
by marios 13y ago
I have no experience with ruby / passenger / puma etc, but what you say about OpenBSD is wrong. From the OpenBSD FAQ[1]: "As mentioned in the introduction, packages are compiled from the ports tree. In this section we will ex
106.
by marios 13y ago
Interesting. AFAIK, it depends on the oils and from what you're telling me on the countries too. For instance, olive oil that stings in Greece is a no-no. Tell a greek that the olive oil you get in other european countries stings you i
107.
by marios 13y ago
I've found PF easier to get started with and more manageable due to the config syntax. Now onto something that PF can do but iptables can't: address family translation. There is a module somewhere on github that does NAT64, but is
108.
by marios 13y ago
I kept using ghostery because I didn't know of any alternative and sometimes I can't install adsuck. (which is is better than a huge hosts file. An oversized hosts file can have a negative impact on DNS and overall network respons
109.
by marios 13y ago
What's wrong with "man date" ? ;) Except of course if you are using Windows in which case manpages are a no-no.
110.
by marios 13y ago
Modules are loaded as they are needed. I think it's cleaner to configure your VM to _not_ have a sound card, rather than blacklisting all those snd* modules.
111.
by marios 13y ago
If you with the commercial router route, checkout OpenWRT / DD-WRT / Tomato. There are several forks, so depending on what features you want, and what hardware you have, you may opt for a different version. If you go with an exist
112.
by marios 13y ago
The efficiency and comments part read like a tl;dr version of Kernighan & Pike The Practice of Programming[1], which, I might add, is an excellent read. As for coding conventions, I quite like OpenBSD's (man style)[2], which are also pr
113.
by marios 14y ago
Gmail > Settings > Accounts and Import > Send mail as > Edit info Then untick 'Treat as an alias'. I remember having the same issue with 'via ...' and I think doing this did the trick.
114.
by marios 14y ago
I find it ironic that the h-online was 'corrected' following a reader's comment ("IPv4 host can not initiate a connection with a IPv6 only host with NAT64"). This is actually false. The NAT64 gateway _can_ do this, provided you have configu
115.
by marios 14y ago
I'm curious as to why they are benchmarking against code compiled with GCC -Os instead of GCC -O3
116.
by marios 14y ago
In certain cases you may not even need to visudo :) AFAIK, Ubuntu's default /etc/sudoers contains this : %admin ALL=(ALL) ALL So you just need to make sure your 'deploy' user account belongs to the admin group and you're good to go.
117.
by marios 14y ago
Depending on your OS, it is possible there is already something like this in place. IIRC, Ubuntu shipped with dnsmasq [1] at some point, thus maintaining a local DNS cache which in turn speeds up browsing. Otherwise, it's as easy as install
118.
by marios 14y ago
I like this approach, although I don't have a router that I can flash with TomatoUSB. Instead I setup adsuck[1] which is a DNS blacklisting daemon. It can be setup on individual machines, or on the perimeter like in your case. I prefer the
119.
by marios 14y ago
It's bad if users are trained to only recognize _your_ phishing attempts :-) I'm not sure I understand which users jacques_chester is talking about. There are users that can recognize phishing, and they are entitled not to care about your t
120.
by marios 14y ago
This. The only effective solution is to educate users, but that in itself is a difficult task. Phishing attacks rely on users being gullible / distracted / ignorant. Telling users _not_ to be any of these usually results in angry answers su

More ›