sg2342

5 ms·

1.
by sg2342 13y ago
there was a related talk [1] at the usenix 2013 in which this (quite old i might add) method of information ex-filtration was analyzed. bottom line: amateurs get caught. [1] https://www.usenix.org/conference/usenixsecur
2.
by sg2342 14y ago
I will write software that will be released under a GNU license because the entity that bought my time to do it can decide to put the result under whatever license suits their goal. However, if the result of my work will be made available u
3.
Small coding mistake led to big Internet voting system failure(fiercegovernmentit.com)
4 points by sg2342 15y ago|1 comments
4.
by sg2342 15y ago
It is known[1] that tracker sites insert random IP addresses. [1] http://opentracker.blog.h3q.com/2007/02/12/perfect-deniabili...
5.
by sg2342 15y ago
on top of my head: libgmp (not a crypto library but used by some), libgcrypt, openssl (requires a dynamic engine to do this), libssh2, libmcrypt ... IMHO the user of an encryption library (the developer of a crypto application) should at le
6.
by sg2342 15y ago
When i was still doing such things i preferred to use the facilities provided by the Operating System. That is: svc on Solaris, rc on FreeBSD and services on Windows. I never did anything serious with Linux but i suspect there is a way a L
7.
by sg2342 15y ago
I would require this in every C library that provides a crypto framework or provides support functionality for such a framework. And to extend this: i would require this in every c library that touches cleartext (in an cryptographic applica