ryan-c

74 ms·

811.
by ryan-c 11y ago
RMS refused to speak at a Linux Users' Group I used to be involved with because it was a "Linux Users Group" and not a "GNU/Linux Users' Group", so this doesn't surprise me.
812.
by ryan-c 11y ago
Not for everyone, but I rageported my wordpress site over to pelican one too many instances of it running slowly for no apparent reason. It's great if you're willing to author content in markdown or restructured text.
813.
by ryan-c 11y ago
I didn't miss what you meant, I just didn't want to remove the part of my comment that you were talking about because then someone reading your comment might be confused. I've been a little scatterbrained due to commenting wh
814.
by ryan-c 11y ago
(I am a friend of the author and host the site for him) Sources were cited, the submitter deep-linked. A redirect is now in place to the page that has more information. Edit, for clarity: * 000024.org is owned by my friend, Alex Fink * The
815.
by ryan-c 11y ago
We just made changes to run it through cloudflare, but that'll take some time to go through. It's on a faster server in the meantime.
816.
by ryan-c 11y ago
The site may go down entirely for a moment... This site belongs to my friend Alex Fink. Edit: Mods, please adjust link to point to http://000024.org/religions_tree/ I've done an emergency move of the images to ano
817.
by ryan-c 11y ago
The private key in the article was generated specifically for the article as an example - there's no CA-signed certificate that used it. Also, certificate revocation is very unreliable.
818.
by ryan-c 11y ago
If one wanted to be even more pedantic , N is the modulus, e is the public exponent and d is the private exponent. N is required for both public and private operations.
819.
by ryan-c 11y ago
Right, I was referring to what values are in the PEM serializations of the private and public key, since that was what e12e seemed to be confused by.
820.
by ryan-c 11y ago
The modulus - the part that has data embedded in it - isn't a secret part of the key. I think the part confusing you is that the modulus (N) is included in both the public and private key. The private key contains: [p, q, N, e, d, d_
821.
by ryan-c 11y ago
I updated the server certificate to one signed with RSA+SHA256 to make chrome happy, but the new one has the same thing done to it.
822.
by ryan-c 11y ago
It does say "stupid" right there in the title :-) The article about prime gaps is interesting, thanks for sharing. There's a paper[0] that appears to use a very similar technique to achieve an RSA backdoor, however I don&#x27
823.
Stupid certificate tricks(rya.nc)
224 points by ryan-c 11y ago|25 comments
824.
by ryan-c 11y ago
...60 octane? Looking through the Wikipedia page on octane ratings[1] that seems absurdly low. 1. https://en.wikipedia.org/wiki/Octane_rating
825.
by ryan-c 11y ago
Chase recently updated the terms on my safe deposit box to state that I'm not allowed to keep cash in there, and I doubt this was specific to me. How they intend to enforce that, I don't know.
826.
by ryan-c 11y ago
What about providing people with a pass through email address to use on shopping sites? A nice value add there would be having the option to give a unique email address to each site to track who's fault spam is (I've been paying s
827.
by ryan-c 11y ago
http://www.garrisonhost.com/ssl-certificates/alphassl.html $45 for a one year wildcard (not affiliated, but have bought a few certs from them without problems)
828.
by ryan-c 11y ago
No common browsers support cipher suites without encryption.
829.
by ryan-c 11y ago
The article says they charge $3/week.
830.
by ryan-c 12y ago
What CA do you use that requires you to include the SANs? Every one that I've used has a form where you list them.
831.
by ryan-c 12y ago
This is not a good guide. The CA will discard all the information from that openssl.cnf file when signing the certificate which makes it a waste of time. The first part of the article can be replaced with the following command: openss
832.
by ryan-c 12y ago
ProxyCommand is a command that runs locally on the system your connecting from. The only thing the potentially compromised middle machine is doing is forwarding a TCP connection.
833.
by ryan-c 12y ago
Something I cooked up a while ago: #!/bin/bash REMOTE_HOST=$1 REMOTE_SSH_AUTH_SOCK=`ssh $REMOTE_HOST 'find /proc -maxdepth 2 -user \$USER -wholename */environ 2>/dev/null | xargs grep -zhm
834.
by ryan-c 12y ago
libtrash does this by hooking libc so it works for anything that deletes files (unless it's statically compiled...) - it's been around for ages. http://pages.stern.nyu.edu/~marriaga/software/libtrash&#x2F
835.
by ryan-c 12y ago
Interesting, I'd heard it mentioned a number of times and I just assumed it was true.
836.
by ryan-c 12y ago
One CIA funded company that is definitely scanning Facebook chats is Facebook. https://en.wikipedia.org/wiki/In-Q-Tel#Software
837.
by ryan-c 12y ago
In practice, some CAs do require certain things in the CSR subject even though they create their own subject when they sign. I've seen the country required, for example.
838.
by ryan-c 12y ago
It's correct. The signature on the CSR is not used in the actual certificate.
839.
by ryan-c 12y ago
It's just an example, but zoom should scale both the element coordinates and the mouse coordinates. This sort of validation can be made a lot more elaborate.
840.
by ryan-c 12y ago
function validateClickEvent(e) { var r = e.target.getBoundingClientRect(); if (e.x >= r.left && e.x <= r.right && e.y >= r.top && e.y <= r.bottom) { console.log('lo

More ›