nelop

3 ms·

1.
How to Hypothetically Secure $1B in Bitcoin(nelop.com)
2 points by nelop 9mo ago|1 comments
2.
by nelop 9mo ago
This is entirely hypothetical. It is not advice. It is not a recommendation. It is a thought experiment that assumes a slightly paranoid mindset and a background in locking down systems that most people are happy to just plug into the inter
3.
by nelop 9mo ago
Ohhh that's a good point, you can set the Rx pin to Tx, then it still has to get through the opto isolator, and then it's talking to a port that's set to Tx.
4.
by nelop 9mo ago
Pretty confident, if the recieving machine is compromised, it is only connected to the opto coupler, that ensures only one way traffic, on one pin. Somehow you would have to get a receive pin to transmit, and then get through the opto coupl
5.
by nelop 9mo ago
Ohhh that's a cool idea. I love any project that uses audio.
6.
by nelop 9mo ago
Two separate networks, completely isolated, the only bit connecting the two is the opto coupler. Was all audited by their internal sec department. They are happy, it was an interesting problem, they need a bunch of seriously old kit well aw
7.
by nelop 9mo ago
Yep they are pretty simple, on one end you have a python script that listens to syslog messages, when get gets an interesting one it converts into a binary string and sends out over GPOI14. This goes through an opto coupler On the other en
8.
by nelop 9mo ago
There are lots of ways to solve this problem. In the past I have worked in defence, for highly sensitive stuff they wouldn't even allow a common ground between two networks. That's why I chose an option iolsator, it ensures the tw
9.
by nelop 9mo ago
The problems was all my fault :-) I was trying to use a port that was not designed for serial data. When data was sent across it was getting mashed. I think it's because both ports were not uart, therefore when the binary data was sent
10.
by nelop 9mo ago
The final product is in a pi enclosure that is stackable, the two pi's live inside with the opto coupler installed inside. It does the job, but the enclosures are plastic, they are tough, but I would preferred some machined aluminium.
11.
by nelop 9mo ago
Yep that would work, there's a whole heap of ways to solve the problem, have heard of people using fiber connections and curring one side. But I just wanted something simple for me, I know Linux and Raspberry pi's so decided to g
12.
by nelop 9mo ago
I just let them use my ubuntu machine, they 50% of what they do is through a browser, so have setup their own profile, and the other 50% is gaming.
13.
Creating a bespoke data diode for air‑gapped networks(nelop.com)
37 points by nelop 9mo ago|84 comments
14.
by nelop 9mo ago
I wrote this to share my experience building a secure one-way data transfer solution for air-gapped systems. Happy to answer technical questions about why we chose this architecture and the challenges we faced, lots of ways to solve this pr