Viewing profile — ech

had to edit title to have it fit length limit. paper title is "More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema" my edit should…

absolutely. raising the noise floor would make it harder for the adversary to pick up valuable signals. but why bother with complicated jamming setups that require you to cover a v…

air gapping removes connectivity to the wider world, and a computer system (as in, a system of computers) can totally have value without being connected to anything that is outside…

you'd be surprised. when specifications get passed around in the endless maze of defense affiliated sub contractors and sub sub contractors, they may be implemented in all kind of …

it has been submitted as such on both HN and reddit. i think it is reasonable to clear any misunderstanding.

that is not what an air gap is. if at any time there is an exchange of data between the air gapped hosts/network and a non air gapped one, there is no air gap anymore. and yes, tha…

i am, i get people to use it, and it works well. but superuser2 is right. to be honest, i think we're touching to fundamental limitations in the git model that gitlab cannot solve …

if locked code review is coming in, i'll be all over it. just let me select multiple approvals, and nested approvals. it's an immensely useful feature. once again, the more i can d…

yeah i read the scope. but since the border between scheduling, configuration management, monitoring etc... is extremely blurry, with a high number of interconnection between syste…

firefox has a plugin that works fine from what i've heard from the others. i still rely by default on totp for generic dual factor auth, since i can provide already working solutio…

gitlab is gearing up to be the one-stop-shop from development to production. i really like that. unifying the toolset developers and ops have to understand is really a boon for eve…

pyrotherapy is a real thing, and has been used very successfully in the treatment of the later stages of syphillis. of course, it only works because syphillis is really temperature…

ccTLDs are the responsibility of "designated managers" for each sovereign country (see https://tools.ietf.org/html/rfc1591 ).

cough https://news.ycombinator.com/item?id=10352001 cough we're in the process of getting all the zone files we can to reduce the amount of DNS requests we have to do, but the real…

Hi HN a lot has changed since our last Show HN, and i guess it was time to share these change with you. for those who weren't here the first time, we try to catch domain squatting …

yes apparently i broke OCSP. thanks for the tip i'm fixing it now. edit: apparently the error lies around certificate transparency and us lacking a public CT log. the security of t…

Hi HN. (one of the) squatmon developer(s) here this is squatmon, an application we built the last few month, with the goal of automagically detecting brand and domain squatting. i'…