uuid_to_string

6 ms·

31.
by uuid_to_string 12y ago
Might that be because OpenVPN uses OpenSSL? Or maybe because OpenVPN is less auditable relative to something like SigmaVPN?
32.
by uuid_to_string 12y ago
Experiment: Put a listener on port 443. Log traffic to port 443. As far as I know this scanning is still ongoing. The src IP is assigned to the University of Michigan. I am told if start a listener on tcp/443 you can expect to get sc
33.
Internet-wide port 443 (https) port scans(scans.io)
2 points by uuid_to_string 12y ago|2 comments
34.
by uuid_to_string 12y ago
For x86, it is something other than those two.
35.
by uuid_to_string 12y ago
It could be just my perception but it seems like the authors of Heartbleed exploit code are focusing on www and email servers. Doesn't OpenVPN use OpenSSL?
36.
by uuid_to_string 12y ago
Who knows, maybe one day we'll be able to install OpenSSL without having to first install Perl? IMO, this a symbol of OpenSSL's unreasonable complexity. OpenSSL is a default system library yet the user cannot compile it with only
37.
by uuid_to_string 12y ago
I just like the one I have been using. I understand it reasonably well and am hesitant to switch. I have tried others and have not been impressed. I am a connoiseur of bootloaders I guess. It's an important program, maybe the most impo
38.
by uuid_to_string 12y ago
Is this the same fellow who has called for the end of "calf-cow"? I like his thinking. I do the majority of my "web surfing" without a graphical web browser. This makes reading much faster and easier. The www is a sewer
39.
by uuid_to_string 12y ago
Can the user use their own choice of bootloader (besides those two)? The bootloader I use can boot Xen kernels; no need for GRUB2. Is the Qube boot process described somewhere?
40.
by uuid_to_string 12y ago
Love the comment by "z". :) The people working on this are sharp, for sure. But I will never think of VM's as a path to "security". Xen is useful for a variety of purposes (including resiliency, which can help if yo
41.
by uuid_to_string 12y ago
I think you misunderstood what I meant. I mentioned "free" only to point out that there is no financial cost to switching to it. I guess I did not type the sentence with enough care; words are missing. My apologies. I imagine pe
42.
by uuid_to_string 12y ago
You are entitled to your opinion and your preferences. As I am to mine. From the tweetnacl.cr.yp.to paper: "OpenSSL is the space shuttle of crypto libraries. It will get you to space, provided you have a team of people to push the ten
43.
by uuid_to_string 12y ago
Wow. I guess "more or less" was not strong enough wording for you? The point is that using something like NaCl costs you, the developer/user, nothing more than if you are using OpenSSL. Do you agree?
44.
by uuid_to_string 12y ago
As a PoC, I would be willing to "turn the web into data", i.e., produce one of the formats offered by these "services": CSV. I will use only standard UNIX utilities, no Python, etc. As such, you "own" the code
45.
by uuid_to_string 12y ago
This is one of the better comments I have seen on OpenSSL in the past week. Well said. "This is why OpenSSL looks like a hodgepodge of hacks upon hacks in order to accomplish narrow goals with limited impact testing." It doesn&#x
46.
[non-Google] "NaCl is also much faster than OpenSSL"(tweetnacl.cr.yp.to)
2 points by uuid_to_string 12y ago|0 comments