jis

5 ms·

1.
by jis 1y ago
Another one to look at is vpncloud: https://github.com/dswd/vpncloud . It's written in Rust. I've used it in production for several years now.
2.
by jis 3y ago
I suspect that the definition of "Safe" in this context is that it has limited ability to mess with your computer. From what I have read, the application didn't violate the security of anyone's computer, it didn't n
3.
by jis 3y ago
In the 1990's we had Netscape with SSL and Microsoft with PCT. We (the world) really didn't need two protocols to do the same thing. So, we (the IETF) got the Microsoft folks and the Netscape folks to work together to come up with
4.
by jis 3y ago
P.S. It is a Rust program, I compile it as a static binary, so my ansible script can push the binary out to any Linux distribution (that is x86_64) and it will run.
5.
by jis 3y ago
Another tool to look at is vpncloud ( https://github.com/dswd/vpncloud ). It also builds a mesh network over UDP. Key setup is a bit easier, static keys are only used for authentication. Encryption keys are dynamically g
6.
by jis 3y ago
Another tool worth looking at is vpncloud ( https://github.com/dswd/vpncloud ). I used to use tinc, but switched to vpncloud 2 years ago. In my use case, I have a modest number of nodes. Although nodes learn of other nod
7.
Beware Chrome and HTTP/2 Debugging(jis.qyv.name)
1 points by jis 3y ago|0 comments
8.
by jis 4y ago
A less permanent solution is to use versioned buckets with MFA Delete turned on. You can then cleanup versions if you need to by disabling MFA delete, which requires the MFA to do. So as long as your MFA device is not on-line, then if someo
9.
by jis 6y ago
Congratulations from the MIT App Inventor Team. We're glad we could play a small part in your success. Wishing you continued success and happiness.
10.
by jis 6y ago
emacs -- Well, heck its emacs! git -- Change history is your friend, and you get out what you put in (hashes verify data against corruption) tinc -- There Is No Cabal: Mesh VPN lets you build a VPN across diverse environments including diff
11.
by jis 6y ago
Sorry to reply to my own comment. But I want to clarify. Two certificates (at least) expired. The root named "AddTrust External CA Root" and a subordinate certificate with a subject of "USERTrust RSA Certification Authority.&
12.
by jis 6y ago
It's actually worse. The new root (good I believe until 2038) uses the same key as the now expired certificate. It has to or it would not be possible to validate the certificates that were issued. And this new one is a root certificate
13.
by jis 6y ago
Nope. It ran an in-house OS named "Delphi". There was a PDP 11/45 at LCS and a PDP 11/40 in building 38 used to teach 6.031 (the predecessor of 6.001).
14.
by jis 8y ago
Amendment: If you are on the Internet, consider your traffic to be public. If you care about it, protect it (encrypt it).
15.
by jis 9y ago
Yep. The problem is that most customers cannot judge the level of security offered by a company. So Company "A" says they are "secure," but has a cumbersome process to follow to get a certificate. Company "B" s
16.
Microsoft Won't Fix a Skype Bug(9to5mac.com)
4 points by jis 9y ago|1 comments
17.
by jis 9y ago
Just to be clear. This is not an IETF Standard that has gone through the standards process. It is an "individual submission" published as an informational document. The IETF does not endorse documents classified as "informa
18.
by jis 9y ago
I put a copy in IPFS: https://ipfs.io/ipfs/QmcgWw89GFo3Z1w9ad1H6Gom4DV4t5VRBu5zhkW...
19.
by jis 9y ago
And old IBM computers!
20.
by jis 9y ago
http://gitblit.com/ is also worth looking into. It is more sophisticated then gitolite (which I also use) and less hairy then gitlab. It is Java based, but doesn't require a database. Also, for backup, rather then tar
21.
by jis 10y ago
I don't disagree. There are always engineering trade-offs. What I have issue with is sites that do not bother to even think about security. They operate under the false sense of security that no one will bother them.
22.
by jis 10y ago
Security is another one where the "fix it later" mentality leaks in, with the resulting consequences!
23.
by jis 10y ago
We are using "Custom" authentication where we issue tokens based on a stored application secret. Is this still supported? I cannot find it in the documentation.
24.
by jis 11y ago
I have a Kindle Fire HD 8 Tablet. Amazon has clearly optimized the software for it. For example it has three types of memory. Flash for storage, RAM for main memory and (presumably) slower RAM that is used as swap space. Most Android device
25.
by jis 11y ago
Years ago I was told by a colleague that he was required to setup an administrative system that was NOT connected the network, but also had to be able to send and receive e-mail. The inherent contradiction was lost on the people giving the
26.
by jis 13y ago
I remember looking into Microsoft's Healthvault product a few years ago. I was astonished to find this: "Microsoft may access and/or disclose your personal information if we believe such action is necessary to: (a) comply wit
27.
by jis 13y ago
Apparently it wasn't MIT's home page that was hacked, but cogen.mit.edu, a random server.
28.
by jis 13y ago
Your cloud hosting provider can easily be a passive adversary. Altering your data is risky for them (you might notice) so they won't alter your copy of openpgp.js or the public keys you use. But looking at all of your disk and memory a
29.
by jis 13y ago
We host MIT App Inventor on Google App Engine. However we have some folks who want to use App Inventor in locations that have difficulty reaching GAE. Either because they are located on a poor internet connection, or don't have one at
30.
by jis 13y ago
The Duo-Security people, who have an Android Token claim to use the secure element in NFC enabled phones. It is a TOTP token and can be used just like the Google Authenticator. You don't have to use Duo-Security's system to use it (though t

More ›