zx2c4

26 ms·

241.
by zx2c4 9y ago
We've got two official WireGuard open source clients coming in the pipeline for Windows and macOS -- one in Rust and another in Go. (Neither are TunSafe, which is C++.)
242.
by zx2c4 9y ago
As the author of WireGuard, I'd STRONGLY advise against using this closed-source implementation, which likely has interoperability and security issues. We'll have an official Windows client coming out shortly, which won't h
243.
Shedding old architectures and compilers in the kernel(lwn.net)
4 points by zx2c4 9y ago|0 comments
244.
by zx2c4 9y ago
Found here: https://github.com/Lochnair/vyatta-wireguard#vyatta-wireguar... and https://community.ubnt.com/t5/EdgeMAX/Release-WireGuard-for-...
245.
by zx2c4 9y ago
> It seems a bit like a toy project right now. Certainly not. However, I see how you might think that: the code base and design is deliberately small and readable. It's very far from being a toy, but it aims to be as auditable as a
246.
by zx2c4 9y ago
I should change the wording there indeed. It's a bit drastic.
247.
by zx2c4 9y ago
In tinc rather. The idea would be that tinc would use WireGuard as the underlying backend.
248.
by zx2c4 9y ago
Indeed we've had nice conversations with the author about using Tinc's full-mesh logic ontop of WireGuard.
249.
by zx2c4 9y ago
That's strange. Who made this sub-reddit? Not me (the creator). If you have questions, come to #wireguard on Freenode -- https://kiwiirc.com/client/irc.freenode.net/wireguard -- or ask the mailing list https
250.
by zx2c4 9y ago
Performance boost yes -- and security boost too. Here's the paper if you're interested in the nuts and bolts: https://www.wireguard.com/papers/wireguard.pdf Also, stickers: https://lists.zx2c4.com&
251.
by zx2c4 9y ago
https://en.wikipedia.org/wiki/Dropper_(malware)
252.
by zx2c4 9y ago
Pro-tip: if you pop a shell, only use it to run your own dropper. Use locally available tools as little as possible. Automate your entire post-exploitation payload and cleanup and get out as soon as possible. Reading this article is like re
253.
AF_Unix comes to Windows(blogs.msdn.microsoft.com)
4 points by zx2c4 9y ago|0 comments
254.
by zx2c4 9y ago
Of interest regarding this might be: https://twitter.com/InstLatX64/status/934093081514831872 > The sad thing is there is no CPUID flag to distinguish good AVX512 from useless AVX512. You can read the the avx51
255.
by zx2c4 9y ago
Happy to answer any questions about the project in general. For people interested in what WireGuard actually is, the best resources are the homepage and the whitepaper: https://www.wireguard.com/ https://www.wire
256.
by zx2c4 9y ago
Oh, wow, I didn't expect anybody to post this to a high volume site. The Android work is in some intense alpha-development state right now, but things are coming along nicely. If anybody wants to contribute to the efforts, please don&#
257.
by zx2c4 9y ago
The way to attract Linux users is to tempt them away from their Thinkpads. The way to do that is to offer a laptop with a trackpoint, this little red dot: https://www.google.com/search?q=trackpoint&tbm=isch
258.
by zx2c4 9y ago
This is why I don't run any Electron apps on my computers at all, ever. That means I'm stuck with the web browser version of Slack, Skype, Signal (going away), and so forth, which is a shame. But it's better than the security
259.
by zx2c4 9y ago
> Though, I think that the time between PSM1 and PSM2 will be significant. Indeed you're probably right there. Fortunately security-focused distributions and individuals would be able to change the defaults in the interim.
260.
The old speak: Wassenaar, Google, and why Spender is right(lists.immunityinc.com)
2 points by zx2c4 9y ago|0 comments
261.
by zx2c4 9y ago
I wrote the email that prompted this quite civil response. I'm very pleased with the outcome, because I think this clear statement of his position is a lot more useful for people to work with, rather than just assuming Linus hates secu
262.
by zx2c4 9y ago
Yikes indeed. WireGuard is neither "dial up era" nor "clunky". It also usually runs as fast as can be.
263.
by zx2c4 9y ago
WireGuard similarly moved from the .io to wireguard.com in July: https://lists.zx2c4.com/pipermail/wireguard/2017-July/001569... Less trendy, but otherwise, zero regrets.
264.
by zx2c4 9y ago
Nice to hear there's some hope... I managed to get some small grants and donations and things for WireGuard over part of this last year -- https://www.wireguard.com/donations/ -- but I don't have much lined u
265.
by zx2c4 9y ago
> Yeah for sure. Here are some screenshots: Looks real nice. Any plans to open source that? > Yeah but you try telling the person administering the combined firewall/vpn/router box that his/her firewall rules are no lon
266.
by zx2c4 9y ago
> I did a vuejs/html5 web interface for wireguard recently and found it delightful to work with. Sounds cool. Care to share? I'd love to see people's usage. > - there is no option to specify listener ip+port tuples Wire
267.
by zx2c4 9y ago
WireGuard enforces a very strict mapping between public keys and IP addresses, so you can't have two public keys with the same internal tunnelled IP address ("AllowedIPs"). This way you can have rules like "if it comes f
268.
by zx2c4 9y ago
I think for FreeBSD kernel-land, there will have to be significant rewrites, anyway, since the Linux code is fairly Linux-specific. At some point though, I'd love to do a kernel implementation for the BSDs (in addition to the userspace
269.
by zx2c4 9y ago
> he was able to work with the driver from managed (C#) code without actually modifying the driver source at all Yea, I wouldn't need to (or want to) modify the source, and using the actual driver from userspace isn't that bad.
270.
by zx2c4 9y ago
The OpenVPN Windows kernel TUN/TAP driver is really super scary. That alone has a larger code base than all of WireGuard... At the moment, the efforts around the cross-platform userspace-based WireGuard implementations have focused on

More ›