Viewing profile — HurrdurrHodor

<3 Emily Short <3 I should replay Savoir Faire.

I am somewhat surprised by the statements about asymmetric crypto algorithms. Given a good library they don't seem more error prone and given many common use-cases they are not sig…

Just a guess but maybe they wanted to build this in a way that it would actually get used.

1. Click on link. 2. Get huge GDPR banner. 3. Close tab. GDPR, the new productivity booster.

Seriously? You want people to switch from software A to software B and you write an article that for the first half of the page sounds like you want them to stop using either of th…

Whatever the reasoning: HAHAHAHAHA! No.

Actually I think, the misunderstanding is on your side. Unauthenticated DOES mean that the attacker can modify anything without you noticing. You might only notice because you are …

But here's the point: Do you want people to spend their 10 minutes picking good passwords or setting up public key auth or should the spend them switching their server to port 24? …

But obscuring may take away time from securing and it adds complexity to the system but systems with less complexity are easier to secure. So you at least have to be careful.

I've just tried this and in my case it leads to "cd \~[...]" which obviously does not work.

The appropriate way for users to defend themselves is to simply install https-everywhere and check "Block all unencrypted requests". This avoids sslstrip, requires no redirect magi…

I have been using http://neo-layout.org/ for years now and it works very well comes out of the box with Linux and does pretty much the same. If you type only in english you will be…

My high-school math teacher used to say that we have our best ideas for solving problems in the shower and on the toilet. :)

Write a crypto library and blog about how great it is. Apply the tools that other people used to find bugs in it and repeat blogging about how great it is. ... In the end you get a…

TLDR: Crypto library with two claimed advantages: Better usability and smaller code than libsodium. However, it is also slower.

I think this needs a bit more motivation (why do I want to know about BDDs) and more pictures. The code is great for playing with things and remembering better but the fundamental …

Well, if you already know which updates are non-breaking, of course you have solved this problem.

For sharing code snippets you can just do something like this: alias paste='curl -s -F '\''sprunge= http://sprunge.us | tee >(xclip -selection clipboard)' Which on my system will c…

"Trace the flow of data from client to network to app to disk to app to network to client etc." How would one go about doing that?

I know of lavabit but I want to know what this software does.

Can somebody tell me what this actually does? All I see is an MTA and some hand waving.

It doesn't work with Firefox, right?

"fiddling feels a lot more productive than it actually is" Best thing about this article. Unfortunately he didn't derive anything from this wise statement.

A more viable competitor: https://www.n-auth.com/

2FA requires 2 authentication factors like a password & a token i.e. your PIN and banking card. It doesn't really have anything to do with where you enter those. https://en.wikiped…