zx2c4

29 ms·

271.
by zx2c4 9y ago
The kernel code is for Linux, which is already GPLv2, so I don't think it would help you much there. The userspace implementation is also GPLv2 at the moment. What motivations do you have for desiring a BSD license? Plans to make non-f
272.
by zx2c4 9y ago
Not open source, but I should probably clean things up and make it open source. It's just a bunch of markdown files that get rendered. I do accept contributions, though.
273.
by zx2c4 9y ago
Jeepers creepers. I'll try to fix it. Probably a yuv444p issue. Update: fixed now. I had to re-encode it to change the colorspace, as suspected, and now things should be working fine in Firefox (though I haven't a Mac to test Safa
274.
by zx2c4 9y ago
Greg KH, some others, and I had a great session stepping through every line of the codebase yesterday. Even though the codebase is quite small -- under 4k LoC -- studying some of the related topics is kind of like a fractal... Happy to answ
275.
by zx2c4 9y ago
Thanks for the feedback. Indeed there are the wg(8) and wg-quick(8) man pages, and probably you should read the whole _front page_ of wireguard.com, namely this part -- https://www.wireguard.com/#conceptual-overview -- whic
276.
“It's been great to see Wireguard mature over the years”(plus.google.com)
86 points by zx2c4 9y ago|61 comments
277.
by zx2c4 9y ago
Nice to hear! I'm mailing out stickers -- https://lists.zx2c4.com/pipermail/wireguard/2017-May/001338.... -- if you'd like to slap some on your server hardware...
278.
by zx2c4 9y ago
This is a plug for my stuff, but a relevant plug nonetheless: If you think you need a VPN, you probably need a good VPN protocol to go with it. Rather than using outdated legacy cruft like OpenVPN or IPsec, you might like WireGuard: https:
279.
by zx2c4 9y ago
If you join the mailing list [1], there'll be an announcement when it's ready, which hopefully won't be before long. Other perks include free stickers too :D [2]. [1] Send a blank email to wireguard-join at lists dot zx2c4 do
280.
by zx2c4 9y ago
Maybe I misunderstood your comment, but WireGuard is less than 4k LoC, which is a few orders of magnitude smaller than OpenVPN or IPsec.
281.
by zx2c4 9y ago
A neat thing about sshuttle is that it restreams TCP connections inside of the SSH tunnel so that you don't incur the classic TCP-over-TCP problem [1]. [1] http://sshuttle.readthedocs.io/en/stable/how-it-works
282.
by zx2c4 9y ago
The Go implementation is not done yet! But it will be soon. In the meantime, feel free to use the Linux kernel implementation, which works quite well and has extensive documentation and man pages: - https://www.wireguard.com&#x2F
283.
by zx2c4 9y ago
What a bunch of senseless FUD. WireGuard is based on the Noise Protocol Framework [1], designed by the same fella as the Signal Protocol, and already used in production by millions of devices all around the world inside of WhatsApp. Not onl
284.
by zx2c4 9y ago
Qt is leaps and bounds ahead.
285.
by zx2c4 9y ago
I came here to wonder the same. Is the key word in this sentence "cannot" or "currently"? Do they to force win32 to continue to be a viable server platform, by forever restricting reliable Linux daemons, or do they event
286.
by zx2c4 9y ago
bcachefs seems especially exciting because the built-in crypto uses authenticated encryption in the form of ChaCha20Poly1305. Most disk encryption operates in an unauthenticated mode (such as XTS) which means the ciphertext is malleable on
287.
Stratis Storage Software Design [pdf](stratis-storage.github.io)
60 points by zx2c4 9y ago|33 comments
288.
Stratis Is Red Hat's Plan for Next-Gen Linux Storage Without Btrfs(phoronix.com)
2 points by zx2c4 9y ago|0 comments
289.
by zx2c4 9y ago
I'm not in any financial hardship at the moment, but I am looking to stop doing other work and focus more exclusively on WireGuard, so I put up a donation and patreon page: https://www.wireguard.com/donations/ ht
290.
by zx2c4 9y ago
I've been experimenting with this exact kind of network setup -- open WiFi that only allows packets to and from the WireGuard endpoint. The nice part is that it means I just have WireGuard on all the time, and because it roams, when I
291.
by zx2c4 9y ago
Unrelated to the actual topic at hand, but anybody know which software generated this svg? http://wizsec.jp/images/theft_flow.svg I like graphs like this. They remind me of Charles Joseph Minard's famous Napoleon
292.
ChaCha speed update(moderncrypto.org)
3 points by zx2c4 9y ago|0 comments
293.
by zx2c4 9y ago
That's good to know. I'll add support for clip.exe with the next pass version. Send an email to the mailing list to remind me?
294.
by zx2c4 9y ago
Nice to hear somebody out there is using ctmg. I never bothered making packages for distros other than Gentoo, but ctmg is quite useful so maybe I'll do that.
295.
by zx2c4 9y ago
Probably the spthy code isn't the best as a reference for building an implementation. For that I'd recommend: https://www.wireguard.io/papers/wireguard.pdf https://www.wireguard.io/protocol&#x
296.
by zx2c4 9y ago
Sounds like you're using some Frankenstein kernel. But asking for tech support and posting random errors on hacker news comments is nearly always fruitless. You can write to the mailing list [1], or ask in #wireguard on Freenode. We&#x
297.
by zx2c4 9y ago
I've tested WireGuard against kernel 4.2.8 with success. It should work for the latest of each minor kernel version from 3.10 up to present. (Probably you should not be using 4.2.0 for anything at all, considering the 4.2 branch wasn
298.
by zx2c4 9y ago
One step is making sure that the crypto isn't bogus. That's what this formal verification is about here. The next step would be writing an implementation in a language that's verifiable -- such as F* [1] -- and then using tha
299.
Formal verification of the WireGuard protocol(wireguard.com)
165 points by zx2c4 9y ago|17 comments
300.
by zx2c4 9y ago
> TBH I don't remember toughing out a full build without resorting to goma. I have! Every time you guys bump a snapshot, my Gentoo boxes whirl away and heat my house, compiling a new version from scratch. On an octocore Skylake Xeon

More ›