Viewing profile — michaelrash

The design decisions that govern fwknop provide guidance on how fwknop is different from knockknock: http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#d...

Not exactly. OpenSSH gated by SPA can only be interacted with by an attacker that can either hijack an SPA-authenticated connection, or is on the same network as the SPA client if …

There are some similarities between this and SPA: -> | SPA / fwknop | ssh There are important differences too though (beyond the fact that SPA is not encrypting/decrypting traffic …

An adversary who can watch port knocking sequences is one reason why SPA was developed: http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#w...

SPA is applicable to arbitrary services - not just SSH. Essentially it is a lightweight UDP authenticator, and it can be applied to commercial VPN's, webservers, or anything else. …

Some information on this is located in the fwknop tutorial: http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html

Here is a rebuttal to the "why not" argument: http://www.cipherdyne.org/blog/2013/10/port-knocking-why-you...

Ok, that sounds like a reasonable alternative, and Brendan Greeg is certainly a powerful force in this area. I'll run dtrace and see what happens, but I'm going to let a current lo…

On the VM, AFL is rewriting the same small file millions of times, and the fuzzed program is reading this file from disk (as opposed to stdin). I think the main question is why doe…

Remember from the article that AFL is being run from a VM. So, my guess is that OS X (host) doesn't know anything about whether what is being written on the VM is a small file or n…

First, let me state that I have a lot of respect for Moxie. That out of the way, knockknock is not above criticism too: 1) It is possible to mount a MITM attack against knockknock …