rkeene2

17 ms·

181.
by rkeene2 4y ago
Well, there's NSA certified devices (Type 1, Type 2, etc) which are military grade. Something using AES correctly could be a Type 3 device.. "when appropriately keyed" :-)
182.
by rkeene2 4y ago
It's the same reason people keep inventing VMs. Every process is also a VM (and can only do what the hypervisor... kernel... allows), but it's a more convenient abstraction to run a new kernel and its processes in a hardware emul
183.
by rkeene2 5y ago
The instance I use is called freshcode [0] [0] https://freshcode.club/
184.
by rkeene2 5y ago
Darwin also uses heirarchical namespaces by default; On Linux you can do this to a limited extent with dlmopen() but not as much as you may want (e.g., to link in a library linked to another libc -- but this is unique to Linux, most platfor
185.
by rkeene2 5y ago
The two semantic operations are increment then store.
186.
by rkeene2 5y ago
SSH can do this without any WireGuard: https://rkeene.org/viewer/tmp/ssh-ip-tunnel.txt.htm
187.
by rkeene2 5y ago
In the past I've explained this as a comparison of Costs and Outcomes. The total cost of the plan, and the outcomes (mostly as benefits). In the GP's example it could have been, for example, the cost in time for the existing to
188.
by rkeene2 5y ago
I do, of course, know about the possibility of changing the characteristics of a channel -- it's very likely that this question is not meant to be inflammatory but because it's such a basic thing that I cannot read it any other wa
189.
by rkeene2 5y ago
The link speed of the circuit doesn't indicate the bandwidth of a channel (MPLS or PVC/SVC), and there is no way to know the possible bandwidth since it's a variable (with upper and lower bounds) and so you always have to wor
190.
by rkeene2 5y ago
I haven't had time to read through the whole text but lots of it rings true with my understanding. I wrote an article that, if you like this one, you will probably also gain from: https://dev.to/rkeene/why-is-ther
191.
by rkeene2 5y ago
How about a web-facing she'll that allows arbitrary code execution ? [0] There's nothing fundamentally insecure about allowing C or any arbitrary code to execute on behalf of a user -- this is basically what cloud computing (espe
192.
by rkeene2 5y ago
The US Government thought they were bad, and got rid of them. In 2004 (Thanks George W. Bush!)
193.
by rkeene2 5y ago
That is a SOCKS5 proxy (as you said), however SSH can pass IP packets or Ethernet frames: https://rkeene.org/viewer/tmp/ssh-ip-tunnel.txt.htm
194.
by rkeene2 5y ago
I have a demo of this here [0] (all the software is in /opt/appfs/rkeene.org). It's using GoTTY [1] for presenting a Linux pty and terminal to your browser, and a simple sandbox. [0] https://rkeene.dev/j
195.
by rkeene2 5y ago
That's definitely the right style, though the particular example I saw was for Linux/x86, probably a port of that PDP-11 code.
196.
by rkeene2 5y ago
I think what I saw was older since "ret32-maker.c" was last updated in 2008.
197.
by rkeene2 5y ago
I once saw code like: unsigned short main[] = {0104525, 0xb8e5, 32, 0, 0xC35D}; and I made a tool to generate it automatically from a function [0]. [0] https://rkeene.org/viewer/tmp/ret32-maker.c.htm
198.
by rkeene2 5y ago
This reminds me of the time I wanted to run binaries compiled for SSE3 on a system that lacked SSE3. I started writing a tool to emulate this [0], and one thing it could do is rewrite the executable pages with replacement instructions if t
199.
by rkeene2 5y ago
I wrote a tool called hunter2 [0][1] which is very similar but uses PKCS#11 modules, which may be more common than GPG since the entire US Government uses them. [0] https://chiselapp.com/user/rkeene/repository&#x2F
200.
by rkeene2 5y ago
Using LD_PRELOAD you only affect dynamically linked executables, where using kernel enforcement using syscall filtering, every process is affected. Also, things are allowed to unset LD_PRELOAD, but not remove filtering. I thought about usi
201.
by rkeene2 5y ago
Tk has generally been easy.
202.
by rkeene2 5y ago
This is the reason I wrote "bash-drop-network-access" [0]. I use it as part of my package building system so that downloads are only done in the "download" phase of building where I validate and cache all objects. This
203.
by rkeene2 5y ago
AppFS [0] solves this by just providing every file any package needs, including libc. AppFS lazy fetch self-certifying system with end-to-end signature checks way to distribute packages over HTTP (including from static servers) so it's
204.
by rkeene2 5y ago
But the OS partition being shared with Windows isn't buying you these advantages. That is, you can still do all this with installing your Linux-based OS into a fixed size, well-known in advance size (40GiB). The things that grow over
205.
by rkeene2 5y ago
Tcl's safe interpreters [0] have various limits like instruction count, command count, time, and memory [1]. [0] https://www.tcl.tk/man/tcl8.6/TclCmd/safe.html [1] https://www.tcl.tk/man&
206.
by rkeene2 5y ago
It's also interesting because NIST doesn't generally follow these rules, since they don't use passwords (at least for most things).
207.
by rkeene2 5y ago
Does Apple not charge for OS upgrades anymore ?
208.
by rkeene2 5y ago
Yes, though primarily forge.mil as a patched OpenSSH source. It was based on an original PKCS#11 support [0] [1]. An old version of the patch is pretty small and available here [2]. Additionally, I wrote an SSH Agent (in JavaScript, for C
209.
by rkeene2 5y ago
You get X.509 certificates from the smartcard which can be used much more widely than GPG
210.
by rkeene2 5y ago
I use two keypairs, but with no ability to read the private key (smartcard).

More ›