zx2c4

18 ms·

151.
by zx2c4 7y ago
For an even cooler trick, check out pwnat, also from Samy: https://samy.pl/pwnat/ Server sends constant icmp pings with fixed payload to unreachable dead Internet IP. Client sends icmp time exceeded message to server c
152.
by zx2c4 7y ago
Work is progressing steadily by the day on WireGuard for Windows and Wintun, the TUN driver we're writing that this uses. Hopefully this won't be "pre-alpha" for much longer. You can get the former at https:/&#x2F
153.
by zx2c4 7y ago
"I don’t know how to make a screenshot, because I normally use my computer in text-mode." --Richard Stallman
154.
by zx2c4 7y ago
We're doing something better on other platforms. But for OpenBSD I'm not entirely sure the best way. Suggestions welcome.
155.
WireGuard for Windows Pre-Alpha(lists.zx2c4.com)
5 points by zx2c4 7y ago|1 comments
156.
Signify(1) Signatures with a YubiHSM(marc.info)
2 points by zx2c4 7y ago|0 comments
157.
by zx2c4 7y ago
https://github.com/mdlayher/wireguardctrl This is what you're looking for. We'll probably make these "official" at some point, as they seem to be pretty nicely done. I'm looking forward to read
158.
by zx2c4 7y ago
No. You need your traffic to look like TCP, for your particular network filtering. But you do not need to achieve that by using the naive and inefficient approach of, "stick the packets into a TCP stream prefixed by a length field.&quo
159.
by zx2c4 7y ago
Transforming generic layer 3 datagrams into traffic that looks like something else is the general domain of obfuscation. Making WireGuard traffic look like TCP is one form of such obfuscation. Making it look like TLS or DNS or HTTP are othe
160.
by zx2c4 8y ago
The Go implementation is fine. I don't think you have much to worry about. But we're pretty frequently running into limitations and fighting with the runtime; we've submitted quite a few random patches to it. I think Rust is
161.
by zx2c4 8y ago
With the exception of the kernel-specific code, we're actually pushing more and more of our stuff as MIT/Apache2 licensed. If there's a project we haven't done that to yet that's not permissively licensed, just emai
162.
by zx2c4 8y ago
I had posted the announcement email here a while ago, but that didn't make the HN cut. It's got a bit more context and info if you're interested: https://lists.zx2c4.com/pipermail/wireguard/2019-Marc
163.
Wintun: Layer 3 TUN Driver for Windows(lists.zx2c4.com)
4 points by zx2c4 8y ago|0 comments
164.
by zx2c4 8y ago
In addition, Windows 10 requires that Microsoft approve and sign each kernel driver that's loaded, actually. https://github.com/MicrosoftDocs/windows-driver-docs/blob/HE...
165.
by zx2c4 8y ago
SEEKING FREELANCER WireGuard | Open Source Project | Remote | https://www.wireguard.com/ We're not a company, but an open source project, but we do have a small amount of funding available for interesting subprojects a
166.
by zx2c4 8y ago
WireGuard | Open Source Project | Remote | https://www.wireguard.com/ We're not a company, but an open source project, but we do have a small amount of funding available for interesting subprojects and useful ways of a
167.
by zx2c4 8y ago
wg-dynamic was proposed well before that email. Actually, that email came after discussion the two of us had shortly prior to the email.
168.
by zx2c4 8y ago
https://lists.zx2c4.com/pipermail/wireguard/2019-February/00...
169.
by zx2c4 8y ago
Check it out: https://data.zx2c4.com/network-extension-is-mac-app-store-on...
170.
by zx2c4 8y ago
Details on 10.14 APIs are in this mailing list post: https://lists.zx2c4.com/pipermail/wireguard/2019-February/00...
171.
by zx2c4 8y ago
There's also a WIP OpenBSD port in progress. Over the next week or so I've got some plans to try to start working more closely with these developers and make sure the BSD kernel ports are first party supported implementations.
172.
by zx2c4 8y ago
https://developer.apple.com/documentation/networkextension/n...
173.
by zx2c4 8y ago
Indeed we looked in to UWP and got something sort of working there, but it's super new, undocumented, and has a lot of limitations that wouldn't have worked well for WireGuard, like roaming. Actually when we asked Microsoft for do
174.
by zx2c4 8y ago
You can bulk import by selecting a .zip archive of files, actually. But perhaps we can make the open file dialog multiselect. Good idea. I added it to the TODO list here: https://docs.google.com/document/d/1BnzImOF
175.
by zx2c4 8y ago
Sorry if I didn't make it clear before: wg-quick(8) is part of wireguard-tools, because people find it useful sometimes. But it's in no way essential and WireGuard functions entirely without it. That's what I mean when I say
176.
by zx2c4 8y ago
WireGuard doesn't require bash. The main configuration utility, wg(8), is written in vanilla C. However, the tools ship with a little convenience script, called wg-quick(8), which is indeed written in bash. It started out as the thing
177.
by zx2c4 8y ago
We're now working on that basically full time, sprinting ahead to the finish line. The EV code signing certificate arrived a few days ago, even: https://twitter.com/EdgeSecurity/status/1073599888158535680
178.
by zx2c4 8y ago
It might still take some time to show up in search, but if you visit https://itunes.apple.com/us/app/wireguard/id1441195209?ls=1&... on iOS, it should take you to the right place in the App Store.
179.
by zx2c4 8y ago
We do need to port wg-quick to use scutil instead of networksetup.
180.
by zx2c4 8y ago
https://lists.zx2c4.com/pipermail/wireguard/2018-November/00...

More ›