GuidoW

7 ms·

1.
by GuidoW 5y ago
Thanks, My use case is to get my VPS run a web and mail service on Nixos but without the bloated binary logging of journalcontrol. The indexes in these log files change heavily between snapshots so they take up way more disk space than appe
2.
by GuidoW 5y ago
Agreed. One point is that processes other than root cannot start services on ports < 1024. That was a sensible precaution computers where big and multiuser, like in a university setting. However, with single-serving services (e.g. in vm&
3.
by GuidoW 5y ago
> Use NixOS and you'll love systemd. I use NixOS but certainly not love systemd. Instead, I've created a way to replace it with s6.[1] 1: https://sr.ht/~guido/nixos-init-freedom/ Cheers, Guido.
4.
by GuidoW 5y ago
> TLS gets you an encrypted secure channel between the client and the server, and DNSSEC gives you... a signed name lookup. I respectfully disagree with that second part. The risks for DNSSEC/DANE might be higher, the rewards are bi
5.
by GuidoW 5y ago
My beef with many chat apps is to have to authenticate with my telephone number or an email address. Both are hard to acquire in sufficient quantities for a 'normal' user. So I came up with a decentralised authentication system. I
6.
by GuidoW 5y ago
The problem is that the input is parsed twice. First by the netmask function that reads 0127 as 127 and the second time by the js-network stack code that reads it differently. The solution is not to change netmask to ignore leading zeros. T
7.
by GuidoW 8y ago
The failure mode of TOTP, SMS is that the user needs to be sure to be connected to the correct site. The hidden assumption is that the use is able to distinguish the fake from the correct site. For any authentication system to work in the
8.
by GuidoW 10y ago
I've designed this protocol[1] to make client certs work easy for end users. Signing up at a site is just requesting a client cert at the site's private CA. It requires a user agent (a browserplugin) on the client side. The agen
9.
On the internet, there is only Alice(eccentric-authentication.org)
4 points by GuidoW 10y ago|0 comments