Viewing profile — einaros

Sure. That's not really my issue though. I got a few thousand followers, in batches, after random press coverage through the years, but never had much of anything I wanted to share…

I've never (within otherwise normal times) been more stressed out and miserable than during periods when I've tried to interact systematically with and through Twitter.

I’ve been meaning to translate the WebGL version embedded there, but never got that far. The downloadable versions (linked under the video) for Windows and Mac both have subtitles …

Not entirely sure what you mean by that. But I realised some time ago how lucky, and extremely privileged, I was to grow up with the unconditional support my mother gave me. And I …

Thank you. I'm very sorry to hear that your mother passed so early. Missing someone, even after many years, is a testimony to the strong bond you shared. The loving memory lives on…

Thank you, although I feel much more sorry for her loss, than I do for mine. Cancer stole her life at a time when everything was supposed to be getting better. A brutal reminder fo…

Mother's day or not, those who can make that call, should. My mother passed away one week ago. I really, really wish I could call her today.

https://encrypt.today - who said the new TLDs were useless?

Ah. Well if you want to dig, I've still got the 43 GB from CloudFlare!

I didn't actually write mine to collect primes :) I'm working with data dumped from other network devices, and for the most running various Yara rules during and after collection.

Doing realtime prime detection is trivial in mine as well. Either pipe the outfile or add to the lib. I didn't write the dump tool with keys as primary target; they just happened t…

No, the primes (and thus key) can be retrieved at any time, but it may be more frequently found right after reboot. I would recommend you to gather at least a gigabyte before diggi…

I've published another toolset in Python here: https://github.com/einaros/heartbleed-tools The final test I did before publishing yielded ~100Mbit/sec of bleed from the challenge s…

Could you shed some light on how this research was conducted? From reading the OpenSSL source and docs it seems pretty clear that the RSA struct will be on the heap somewhere.

That would pretty much cover the use of CDNs that have proper versioning schemes. Analytics, however, will remain something I'm not overly fond of. For many sites it's unnecessary.…

While an absolute necessity, it doesn't solve the immediate issue of NSLs and widespread use of unnecessary services. Let's say that the NSA would like to track bitcoin transaction…

Where did you read that it's mail traffic they were after? I'm beginning to strongly believe that it's Google's other services are considered for use in specific attacks. Imagine i…

This doesn't just affect services that are hosted by Google, but also encrypted sites that pull scripts in from Google Analytics, Google's CDN, etc. I wrote a semiparanoid rant abo…

And here I was thinking I was being an all paranoid nutter when I expressed privacy concerns with US hosted CDNs and analytics services .. https://2x.io/read/would-the-nsa-infiltra…

Firefox: "about:config" and "media.peerconnection.enabled = false"