slasaus

6 ms·

1.
by slasaus 2y ago
No buffer overflows, no user-after-free and no double free issues. There is a garbage collector which stops the world here and there to cleanup, but for anything that is not constantly busy, like a small mail server, this is not noticeable.
2.
by slasaus 4y ago
Author here, I'm currently trying to get mongovi into Debian, if anyone can help that would be highly appreciated. :) https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028418
3.
mongovi v2.0.0 - command line interface for MongoDB(github.com)
4 points by slasaus 4y ago|1 comments
4.
by slasaus 8y ago
I think this is huge. It reminds me of the early days of Firefox (back then still known as Phoenix) in a world where IE6 and pop-up ads dominated. At launch IE6 was really the best and most innovative browser of it's time (IMHO). But a
5.
by slasaus 10y ago
> That's not really the sort of decision application programmers should be making for sysadmins. As a programmer you have the right (or maybe even obligation?) to write secure software and I would argue software that's hard or
6.
by slasaus 10y ago
> If you take the time to enter the voting booth when it opens and verify that the ballot boxes are empty at the start, and stay in the voting booth until it closes Too late to edit my own post but please s/voting booth/polling
7.
by slasaus 10y ago
Knowing what one voted opens the door for coercion. Think of family members wanting you to vote a certain way. If you vote anonymously you can never prove to them what you voted, which protects the voter from any social, religious or other
8.
by slasaus 10y ago
If you take the time to enter the voting booth when it opens and verify that the ballot boxes are empty at the start, and stay in the voting booth until it closes, you can verify yourself if everyone put at most one ballot in the ballot box
9.
by slasaus 10y ago
How anonymous is your vote in the blockchain(s)? And how can you still verify the vote is counted correctly and exactly once while lacking hard proof to others about what you voted?
10.
by slasaus 10y ago
After trying json, yaml, json5, java properties, ini and toml, I finally choose hjson* as the configuration file format for the software I'm building. It's the easiest format to read and write IMHO, a bit like nginx config files.
11.
by slasaus 10y ago
Really love the new persist option. It makes `doas su -` less compelling when you have to run multiple commands and use a complicated password.
12.
by slasaus 10y ago
Ok, just wondering, would "v=spf1 ?all" be the same in that case? I.e. a neutral spf policy?
13.
by slasaus 10y ago
Interesting note about DMARC, but still, if you're concerned about breaking forwarding for your domain, then why bother using spf at all? I still don't see the benefit of setting up ~all rules.
14.
by slasaus 10y ago
I think it's pretty weak they're advertising the use of "~all" in their spf records. Either use "-all" or just don't use SPF I would say. If you can't make a decisive statement about your own domain t
15.
by slasaus 10y ago
FWIW, there is a petition for Intel to release an ME-less CPU design: https://puri.sm/posts/petition-for-intel-to-release-an-me-le... (as mentioned in a comparable thread five days ago: "Intel and ME, and why we s
16.
by slasaus 10y ago
FWIW, there is a petition for Intel to Release an ME-less CPU design: https://puri.sm/posts/petition-for-intel-to-release-an-me-le...
17.
by slasaus 10y ago
OpenSSL announced several issues today that also affect LibreSSL. - Memory corruption in the ASN.1 encoder (CVE-2016-2108) - Padding oracle in AES-NI CBC MAC check (CVE-2016-2107) - EVP_EncodeUpdate overflow (CVE-2016-21
18.
by slasaus 10y ago
(I've updated the parent about bypassing bgp/dns etc. before I saw your reply) The nice thing about using the onion address (transport layer) is that you have mandatory e2e authentication with only one id that solves multiple real
19.
by slasaus 10y ago
I can see that but I think the self authenticating nature of Tor Onion Services and therefore bypassing bgp, dns and CA weaknesses is worth something†. Maybe in the future when prop224†† is implemented the encryption will be more solid. †
20.
by slasaus 10y ago
Don't forget Ricochet†, it only does synchronous communication but it does solve the problem of leaking meta-data. All the other clients except Pond leak meta-data. † https://ricochet.im/
21.
Apple V FBI: It’s About Control(puri.sm)
1 points by slasaus 11y ago|0 comments
22.
by slasaus 11y ago
My hardened ~/.ssh/config on OS X 10.11: Host * Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-
23.
by slasaus 11y ago
The client that wants to login always needs to execute a browser (or at least a render and JavaScript engine). See this (stalled) proposal to make it more compatible with non-browser/simpler agents: https://groups.google.com
24.
NSA Helped British Spies Find Security Holes in Juniper Firewalls(theintercept.com)
189 points by slasaus 11y ago|57 comments
25.
by slasaus 11y ago
some signal cli clients were discussed on the mailing list yesterday: https://lists.riseup.net/www/arc/whispersystems/2015-12/msg0...
26.
by slasaus 11y ago
A downside with Ricochet is that it reveals when you are online to anyone who knows your id. > Anyone with the onion address can still estimate availability by watching descriptors https://github.com/ricochet-im/rico
27.
by slasaus 11y ago
I'm currently using Proxy to transparently version data that is saved in an IndexedDB.
28.
by slasaus 11y ago
But isn't it that in practice most of the time this "last leg" is the only leg that crosses the internet? Most of the servers I see in the mail headers I receive are servers in the internal network of the sender. So IMHO tran
29.
by slasaus 11y ago
Only the OS can guarantee that some entropy is not handed out twice. If you can't trust your OS with that, you might have bigger problems.
30.
by slasaus 11y ago
> This is quite expensive compared to systems such as Civitas, but it is arguably, cheaper than the current system where governments often count vote ballots by hand. Maybe cheaper, but I'm not sure if having to trust my computer wi

More ›