Viewing profile — Tho85

This always reminds me of the 2007 incident on Czech TV, where someone hijacked a weather panorama broadcast: https://www.youtube.com/watch?v=ea4eft_3p-I IIRC the panorama cam was …

It's been a while since I looked at it, but here's what I remember: In the UI, you can choose if the device should communicate to Chinese or US servers. Both of them are available …

I use Syncthing [1] to do all the syncing, works like a charm. I have a folder synchronized between my reader, my PC and my phone, and whenever I need to send a document to the rea…

I bought the Onyx Boox Note Air some months ago, and I must say that I'm really happy with it. Screen refresh is good, there's almost no ghosting in default mode, and refresh rates…

Nice! I run a similar service at https://ip6.name/ . The service also supports empty groups, e.g. 2001.db8.8000.x.1.ip6.name resolves to 2001:db8:8000::1, as well as 2001.db8.8000.…

Thanks for the feedback, I somehow missed that mistake. As a quick fix the server now returns NOERROR for both unknown records and names. That's still not 100% correct, but better …

Announcement: https://blog.tho.ms/network/2017/02/25/ip6-name-dns-record-a... I had the idea when I needed a TLS certificate for a system without a global DNS record. I recalled th…

For all those who can't upgrade to the latest versions of Rails: Zweitag (my employer) maintains a Rails fork with security fixes applied to all Rails releases since 3.1.0. https:/…

EncFS allows to deactivate some of these features at the price of reduced security. The EncFS manpage [1] has a good explanation of all the tunables. If you want to use Boxcryptor,…

I used that combination before, it works really nice. But at some point I hit the storage limit and had to come up with a self-hosted solution.

Good point, I fixed that.

What do you mean by 'vulnerable'? All encryption is done on your computer/notebook, so a chroot on the server doesn't decrypt the files.

They use some kind of heuristic to make change detection faster, see their documentation: http://www.cis.upenn.edu/~bcpierce/unison/download/releases/... Maybe that's the root caus…

Theoretically, it should be possible to have a web UI running on the server itself. You just need a decent AES implementation in Javascript to do client-side decoding of filenames …

The underlying sync software (Unison) has been around for years now and is regarded as stable. So syncing should work just fine, although you should keep a backup of your files jus…

You don't have to if you use EncFS. All encryption is done client-side. The only thing your VPS provider could do is delete your files, but Unison's backup feature should protect y…

You're right! Thanks for the hint, I updated the blog post accordingly.

Was a pleasure! With love :-) Thomas

Some details on how this can be exploited: http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-ma...