phicoh

59 ms·

631.
by phicoh 10y ago
Many in the Dutch hacker scene would never work for the Dutch government (at least, the more sensitive parts such as intelligence agencies, police, etc.). So mostly likely he didn't want to work for them anyway and was very unhappy abo
632.
by phicoh 10y ago
Note this interview: http://www.trouw.nl/tr/nl/4324/Nieuws/article/detail/4452683... Note they did offer him a position to manage young hackers. I guess the sad part is the threat. Hackers have
633.
by phicoh 10y ago
Right an attack on an RSA signature that leaks plain text. Really? Must be a super secret signature then.
634.
by phicoh 10y ago
Obviously. But for checking the padding on a signature you only need the public key. So you cannot leak any sensitive RSA key material while checking the padding.
635.
by phicoh 10y ago
How is this relevant in the context of setting up a connection protected by DH and RSA? Yes, it would be a problem any time you decrypt RSA. So pgp is tricky, but setting up a ssh or tls connection without DH is beyond foolish. For signatur
636.
by phicoh 10y ago
The problem is that address books pick up stuff out of "From: User <user@domain>". So if you now start sending mail with "From: User <no-reply@mailing-list>" you create a lot of chaos.
637.
by phicoh 10y ago
That's not a problem. Mailing lists have been doing that since long before DMARC. Having the mailing list name in the Subject is very handy. Footers are also more convenient that having to look in headers.
638.
by phicoh 10y ago
Actually, DMARC refines SPF to also apply to the header from. If you have only an SPF record on your domain then the old rule applies (only envelop from). If you also have the _dmarc.<domain> then SPF also applies to header from.
639.
by phicoh 10y ago
I'm always surprised how bad ads are on some systems. I usually like ads in specialty paper publications. It is nice to know what vendors are around, what new products they have. And you can skip an ad in a fraction of a second. Before
640.
by phicoh 10y ago
Google of course wants people to continue to use their DNS resolvers. So it is in their interest to focus only on techniques to improve access to their resolvers. One thing that happened in recent years is that a very nice library called &#
641.
by phicoh 10y ago
Two things. First, it is nice if you don't have to allocate ports on a NAT box to make a test system available. These days you can't really count on all non-production systems having public IPv4 addresses anymore. Obviously that o
642.
by phicoh 10y ago
If the DNSSEC validating resolver is a server then it is usually not an issue. Most server hardware has battery backed real time clocks. In the odd case that you are bootstrapping a server you would have to set the time manually or make set
643.
by phicoh 10y ago
It's a different threat model. Classical DNS (i.e. without port randomization and a whole host of other tricks) is very easy to spoof from all over the internet. Inserting yourself between a client and a server is way more difficult. N
644.
by phicoh 10y ago
Yes. I like what they are trying to do, but they don't seem to actually think things through. It took me forever to get some of the server tests fixed, where it would report that my server didn't properly support IPv6 (in DNS) whe
645.
by phicoh 10y ago
"00:00:00 on January 1, 2020" UTC is a rather useless timestamp for most practical purposes, unless you live close to th zero meridian. In most places you want to talk about 00:00:00 on January 1, 2020 localtime, which depends on
646.
by phicoh 10y ago
There are many ways to achieve the same effect. The most obvious is to install the private key of the service on the middle box and terminate the TLS connection there. More complex is to log the DH private key that is used and make that ava
647.
by phicoh 10y ago
The funny thing is, Snowden had no intention of going to Russia. So here you have a contractor who worked for the CIA and the NSA, and is clever enough to get a huge collection of documents out of the NSA and fly to Hong-Kong without anybod
648.
by phicoh 10y ago
You always have to do something to make things secure. TLS certificates don't show up out of thin air. So, yes systems that don't bother to use security mechanisms will be insecure. That's normal.
649.
by phicoh 10y ago
I don't know the details of how expensive it is, or how secure, but Dutch cities are installing charging stations on the street curb. Typically one unit can charge two cars. To charge, plug in your cable, enter payments details and the
650.
by phicoh 10y ago
Local DNSSEC validation allows your software to reject modified responses (provided the domain is DNSSEC signed). In the future, DNS over TLS, will also prevent this kind of tampering, and additionally prevent snooping on your DNS-to-resolv
651.
by phicoh 10y ago
And, unless something is serious broken in all of those systems, only if the target is also dual stack. So an IPv4-only website should not incur any delay.
652.
by phicoh 10y ago
I wonder if over time (and I'm talking many decades here) there is a shift from the military following the needs of trade to the military being used in a bigger power play that is actually unrelated to trade.
653.
by phicoh 10y ago
Free was doing 6rd, which is similar to 6to4 but not quite the same.
654.
by phicoh 10y ago
I focussed on your suggestion that it had to cost $100. If people don't need IPv6, then why bother. My impression is that the content providers don't care about IPv6, so I assume they have plenty of IPv4 space. Some large consumer
655.
by phicoh 10y ago
Anything that can run OpenWRT should be able to do PPPoE with IPv6.
656.
by phicoh 10y ago
This page claims 17 hours (with the test described as "Laptop Mag Battery test, which involves continuous surfing over Wi-Fi at 100 nits of brightness") http://www.laptopmag.com/reviews/laptops/lenovo-thi
657.
by phicoh 10y ago
The problem with the Pro line is while professionals have diverse requirements the line only seems to cater to the groups that travels a lot. Some people need beefy CPUs, some people need beefy GPUs, some people need lots of memory, some pe
658.
by phicoh 10y ago
At some point Apple had three line of MacBooks (Pro, regular and Air). That seemed to make perfect sense. People who want light, long battery life go for Air, people who want processing power go for Pro. The strange thing is that Apple kill
659.
by phicoh 10y ago
What was the author smoking? "This is also why the only laptops currently available which support >16GB RAM are huge, like this one which weighs 17 pounds (8KG). " Except that ThinkPad T460 can be ordered with 32 GB memory and
660.
by phicoh 10y ago
Statistically that is unlikely to be true. I have seen many people with injuries from falling of a bike and none of them were on anyone's head where a helmet would make a difference. So on most accidents a helmet is not going to make a

More ›