Tho85

6 ms·

1.
by Tho85 5y ago
This always reminds me of the 2007 incident on Czech TV, where someone hijacked a weather panorama broadcast: https://www.youtube.com/watch?v=ea4eft_3p-I IIRC the panorama cam was connected to the Internet and had been hack
2.
by Tho85 5y ago
It's been a while since I looked at it, but here's what I remember: In the UI, you can choose if the device should communicate to Chinese or US servers. Both of them are available under the boox.com domain, so I assume they are bo
3.
by Tho85 5y ago
I use Syncthing [1] to do all the syncing, works like a charm. I have a folder synchronized between my reader, my PC and my phone, and whenever I need to send a document to the reader or from the reader to my PC, I just put it into that fol
4.
by Tho85 5y ago
I bought the Onyx Boox Note Air some months ago, and I must say that I'm really happy with it. Screen refresh is good, there's almost no ghosting in default mode, and refresh rates are acceptable. There are only two downsides abou
5.
by Tho85 7y ago
Nice! I run a similar service at https://ip6.name/ . The service also supports empty groups, e.g. 2001.db8.8000.x.1.ip6.name resolves to 2001:db8:8000::1, as well as 2001.db8.8000.0.0.0.0.1.ip6.name. A neat one is x.ip6.name
6.
by Tho85 10y ago
Thanks for the feedback, I somehow missed that mistake. As a quick fix the server now returns NOERROR for both unknown records and names. That's still not 100% correct, but better than nothing.
7.
by Tho85 10y ago
Announcement: https://blog.tho.ms/network/2017/02/25/ip6-name-dns-record-a... I had the idea when I needed a TLS certificate for a system without a global DNS record. I recalled that http://xi
8.
Show HN: Ip6.name – A DNS record for any IPv6 address(ip6.name)
3 points by Tho85 10y ago|3 comments
9.
by Tho85 12y ago
For all those who can't upgrade to the latest versions of Rails: Zweitag (my employer) maintains a Rails fork with security fixes applied to all Rails releases since 3.1.0. https://github.com/zweitag/rails/bra
10.
by Tho85 13y ago
EncFS allows to deactivate some of these features at the price of reduced security. The EncFS manpage [1] has a good explanation of all the tunables. If you want to use Boxcryptor, you're even advised to deactivate most of these featur
11.
by Tho85 13y ago
I used that combination before, it works really nice. But at some point I hit the storage limit and had to come up with a self-hosted solution.
12.
by Tho85 13y ago
Good point, I fixed that.
13.
by Tho85 13y ago
What do you mean by 'vulnerable'? All encryption is done on your computer/notebook, so a chroot on the server doesn't decrypt the files.
14.
by Tho85 13y ago
They use some kind of heuristic to make change detection faster, see their documentation: http://www.cis.upenn.edu/~bcpierce/unison/download/releases/... Maybe that's the root cause of your issues?
15.
by Tho85 13y ago
Theoretically, it should be possible to have a web UI running on the server itself. You just need a decent AES implementation in Javascript to do client-side decoding of filenames and files. Any volunteers? :-) Edit: Looks like someone is a
16.
by Tho85 13y ago
The underlying sync software (Unison) has been around for years now and is regarded as stable. So syncing should work just fine, although you should keep a backup of your files just in case. You can also use Dropbox and Encbox together if y
17.
by Tho85 13y ago
You don't have to if you use EncFS. All encryption is done client-side. The only thing your VPS provider could do is delete your files, but Unison's backup feature should protect you from losing your files (in a way).
18.
Build your own private, encrypted, open-source Dropbox clone(gist.github.com)
175 points by Tho85 13y ago|63 comments
19.
by Tho85 14y ago
You're right! Thanks for the hint, I updated the blog post accordingly.
20.
by Tho85 14y ago
Was a pleasure! With love :-) Thomas
21.
by Tho85 14y ago
Some details on how this can be exploited: http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-ma...