ryan-c

56 ms·

301.
by ryan-c 8y ago
I had everything set up correctly, including DMARC. I've been doing this a long, long time.
302.
by ryan-c 8y ago
On a VPS, full disk encryption is not effective because the keys can be dumped from the hypervisor.
303.
by ryan-c 8y ago
Yes, but they don't have to log that, and given the way the system is described there's no reason it would by default.
304.
by ryan-c 8y ago
Do they handle a send-only smarthost configuration that allows arbitrary from addresses within a domain?
305.
by ryan-c 8y ago
I don't see what the issue with uniquely identifying a system is. The main metadata of concern is what other mail servers are being interacted with.
306.
by ryan-c 8y ago
I disagree. Seizing data stored on a server in your house is much, much more difficult that seizing data stored on a cloud server.
307.
by ryan-c 8y ago
WRT to TLS, see here: https://transparencyreport.google.com/safer-email/overview?h... It seems that Helm has no obligation or business need to log any metadata if they are providing each customer with a dedicated relay
308.
by ryan-c 8y ago
It's actually a totally different product vs Sendgrid/Mailgun/etc. Such a product would need to have a ToS that states it can only be used for low volume personal and business correspondence, and have per-account rate limitin
309.
by ryan-c 8y ago
Most (gmail claims ~90%) email is encrypted with opportunistic TLS in transit and can't be passively monitored. https://transparencyreport.google.com/safer-email/overview?h... Further, "the provider could int
310.
by ryan-c 8y ago
The only thing using a blockchain is being used for there is timestamping. This can be done by multiple trusted third parties just fine.
311.
by ryan-c 8y ago
I think this is intended to screw with tracking being done by your ISP.
312.
by ryan-c 8y ago
I reversed the algorithm for going from salt and passphrase to private keys a month ago. https://rya.nc/bitfi-wallet.html That particular version of the code doesn't print the private key, but it can be trivially modif
313.
by ryan-c 8y ago
Since knowledge of the salt and passphrase is sufficient to generate all the private keys needed to conduct transactions, the ability to extract those values is equivalent to being able to take any associated coins. Additionally, the design
314.
by ryan-c 8y ago
I got my report from them, it's a mix of disturbingly detailed and laughably inaccurate.
315.
by ryan-c 8y ago
Wasn't he supposed to eat a shoe?
316.
Bitfi's hardware wallet is terrible(rya.nc)
22 points by ryan-c 8y ago|3 comments
317.
by ryan-c 8y ago
I didn't say anything about 802.1x in my comment, and I'm one of the folks that has published information about how to bypass these crappy AT&T routers.
318.
by ryan-c 8y ago
From what I can tell, AT&T's "VLAN 0" exists in order to use 802.1p priority tags. Maybe you can just enable 802.1p?
319.
by ryan-c 8y ago
Mods, can we update the title of this to clarify it's about crypocurrency, not cryptography?
320.
by ryan-c 8y ago
> analyzing how much data flows in which direction and when Encapsulated TCP SYN packets, for example, smaller than any HTTP request inside TLS would be. Want to beat that by padding? Everything always being the same size is an anomaly t
321.
by ryan-c 8y ago
From what I've heard second-hand (my SO has a friend who frequently travels to China), they do actually block people's private one-off VPN servers quite effectively. Have a look at https://www.cs.tufts.edu/comp&#x2
322.
by ryan-c 8y ago
China's gotten pretty good at it. OpenVPN running over port 443 is generally going to be using a CA that is not a public CA, and issues certificates directly rather than through an intermediate. Even if you tunnel something over normal
323.
by ryan-c 8y ago
I believe rm -rf /* will work without --no-preserve-root
324.
by ryan-c 8y ago
Browser extensions that say they help with comparison shopping are a very common type of "Potentially Unwanted Application" (PUA - aka malware with a legal team). The infamous Superfish is an example of this type of thing, and the
325.
by ryan-c 8y ago
That entire class of browser extensions is shady. Do you make money on referrals to shopping sites?
326.
by ryan-c 8y ago
No, the forwarder has to re-send the message with different envelope information.
327.
by ryan-c 8y ago
Your domain registrar can probably still hose you. Where's your DNS hosted?
328.
by ryan-c 8y ago
It sounds to me like Mozilla identified your extension as potentially malicious and prioritizing user safety, shut you down first. As far as I know, Mozilla has no business relationship with extension developers, so I would actually be very
329.
by ryan-c 8y ago
Many services block all mailinator domains by simply doing a live MX record lookup and noting the domain is pointed at mailinator (there are SaaS companies that offer this via an API). Another thing I've noticed is blocking email addre
330.
by ryan-c 8y ago
Yes, the Visa gift cards work, at least as of a few years ago. Most of them will let you change the "billing zip code" online as often as you like, or simply always return success on Address Verification System (AVS) queries. Most

More ›