zx2c4

23 ms·

211.
by zx2c4 8y ago
> The only downside I've notice is slightly increased battery consumption on my phone, but that's to be expected (it uses approximately 5% of the battery per day). Note that if you run a phone that has the WireGuard kernel modu
212.
by zx2c4 8y ago
Adding the masquerade rules and forward rules as an example in the wg-quick(8) man page sounds like a good idea. Want to send a patch to the mailing list?
213.
by zx2c4 8y ago
> I meant more in terms of the Android app, not really a WG issue, but it has a check box to add exclusions to the allowed ip list, by basically adding ranges inverse to what you'd input if you were saying "exclude these".
214.
by zx2c4 8y ago
Exactly this. WireGuard and wg(8) are meant as building blocks. For example, the wg-quick(8) tool is a simple bash script I built out of wg(8) and ip(8) that mostly works for my use cases and those of some other folks. But if you want somet
215.
by zx2c4 8y ago
> I also saw nothing anywhere about how if you modify your config file and down/up with wg-quick it'll delete anything you entered in your config as the 'down' will write back the current state of the interface. No. O
216.
by zx2c4 8y ago
> but I believe Wireguard is held back by its lack of documentation. Indeed having good documentation is super important. I'm not so arrogant as to proclaim, "I don't have time to write docs! Understand it yourself!",
217.
by zx2c4 8y ago
There's the mailing list: https://lists.zx2c4.com/mailman/listinfo/wireguard And there's the IRC channel: #wireguard on Freenode And in both of these there is quite a bit of discussion. > There is an
218.
by zx2c4 8y ago
I can't think of a Qt app that looked odd on macOS. I've developed quite a few pieces of software in Qt for the mac, and they all perfectly use the OS's styles and colors.
219.
by zx2c4 8y ago
Qt Creator is a fantastic editor and IDE. If you're doing cross-platform GUI development, Qt is a good choice (especially compared to something grotesque and unseemly like Electron), and for Qt development, Qt Creator is as good as it
220.
by zx2c4 8y ago
Since WireGuard securely attaches an IP address to a public key, NFS over WireGuard may actually be a viable solution.
221.
by zx2c4 8y ago
Algo also supports WireGuard these days.
222.
Linux Cryptography: Speck's real standing with the academic community(spinics.net)
230 points by zx2c4 8y ago|108 comments
223.
by zx2c4 8y ago
Also, see the Coppersmith method: https://en.wikipedia.org/wiki/Coppersmith_method
224.
by zx2c4 8y ago
Yes. https://mullvad.net/en/blog/2017/9/27/wireguard-future/ https://www.azirevpn.com/wireguard https://www.privateinternetaccess.com/blog/2018/01&#x2
225.
by zx2c4 8y ago
Before I fixed it, it wouldn't restore the previous non-DHCP-set DNS servers when you took the interface down. Now this bug is fixed.
226.
by zx2c4 8y ago
Linux kernel module supports 2^20 (1048576) peers per interface. Go userspace version supports 2^16 (65536) peers per interface. Both limits can quite easily be raised if necessary.
227.
by zx2c4 8y ago
Pointed out on the mailing list, too. Did you make a concerted effort to link to the file revision that doesn't contain the fix for that? Anyway, this is taken care of now, and will be released with the next snapshot. https:/&#x2
228.
by zx2c4 8y ago
We'll have a Windows client in due time.
229.
by zx2c4 8y ago
That's a fine and fair principle. I understand where you're coming from, and getting this mainlined is important to me too. But for the record, we're maintaining meticulous compatibility with all kernel.org kernels back to 3.
230.
by zx2c4 8y ago
We're just conservative. At some point we'll change the webpage.
231.
by zx2c4 8y ago
The macOS client mentioned in the article uses the Go implementation: https://git.zx2c4.com/wireguard-go/about/ It should be very easy to port to FreeBSD, and I'd like to make this happen. Care to help?
232.
by zx2c4 8y ago
Yep! Usually all you need is `wg-quick up myserver` and `wg-quick down myserver` -- the wg-quick(8) command wraps all the others for the most common trivial use cases. By the way, I believe https://github.com/StreisandEffect
233.
by zx2c4 8y ago
Not yet, but I'm working on readying the v1 [PATCH] submission.
234.
by zx2c4 8y ago
Development of security software is slow and careful, so we're not trying to rush anything. But, you can indeed donate to the efforts, which makes a big difference: https://www.wireguard.com/donations/ https:&#x2
235.
MacOS command line version of the WireGuard VPN is now available for testing(latacora.singles)
333 points by zx2c4 8y ago|193 comments
236.
by zx2c4 8y ago
> If you care about this, then put the laptop in a tamper-evident bag. How does this procedure work for multiday evil maid situations? The first day while you're out the maid replaces your collection of plastic disposable tamper-evi
237.
by zx2c4 9y ago
There's another paper besides the RHUL one, which preceded it, using tamarin: https://git.zx2c4.com/wireguard-tamarin/tree/wireguard.m4 https://www.wireguard.com/papers/wireguard-formal-v
238.
by zx2c4 9y ago
> TunSafe will not be able to communicate with the wireguard servers if it does not use the correct encryption and protocol scheme There's a lot more to writing secure software than merely implementing something that appears to spea
239.
by zx2c4 9y ago
Actually there are a couple open source alternatives around the corner -- one in Rust and another in Go -- fully supported. I agree that software really does thrive with an abundance of alternatives. An important thing is that we can verify
240.
by zx2c4 9y ago
I'm not going to be playing the interoperability game or wasting time with closed-source proprietary garbage. Simply use a real implementation of WireGuard and you'll be fine.

More ›