Viewing profile — xorbyte

Wallbleed, a buffer over-read vulnerability that existed in the DNS injection subsystem of the Great Firewall of China. Wallbleed caused certain nation-wide censorship middleboxes …

If he doesn't like your site, he may not allow you to use his service, which is something the TOS already cover. Over time, such capricious terminations could lead to the Board see…

macOS and iOS don't support OpenVPN with the built-in client. You can use strongSwan-based VPNs (e.g., as would be deployed through Algo) or Cisco, but for OpenVPN you'll need a cu…

I think you may be confusing deterministic reproducible builds (that remove randomness and ensure binaries have the same content hash regardless of who builds them (so you can repr…

Not all tonic water is low cal, a 350 mL bottle can be 100 calories from the 30g of sugar added.

Any comparatively large corporation very likely has a release process for these sorts of things where a bunch of groups (like PR, maybe Legal etc) would take a look. Releasing comp…

Back issues are always included in the current issue, hence the zip. Keep recursing that way (or use binwalk)

There's nothing in the OPs post suggesting SSH was exposed to the public, or that the breach happened over SSH. So it's important to secure that, but it's also important to think h…

You assume the breach happened over SSH. This is valuable information to securing SSH, but it's entirely possible the original breach happened over some other service, and there we…

The article makes no mention of TLS anywhere, and the example endpoints are all HTTP. So, this is a thoroughly insecure implementation, relying on very weak security mechanisms, pr…

Wouldn't that just be regular Xen?

Not sure how you see progress and innovation otherwise. Much of what is good in Linux comes from experimentation and people/distros 'doing their own thing' which sometime improved …

Similarly echoed in the OpenWRT talk from 30C3 https://www.youtube.com/watch?v=Y-OlUxeS57E

No, I think this means PayPal recognizes tptacek's CCs and forces a log in. Even with a new card, perhaps they'll just base it on the name and refuse to process it without an accou…

OTR is only used in one-on-one communications in CC; group chat mechanisms are custom, and may now converge towards the mpOTR draft but that's still a pretty big risk.

Much of Jacob's presentation echoes many of the articles he (and others) had published in Der Spiegel earlier that day, going into a little more into the technical aspects (to the …

Look if anyone in your institution has created a dissertation template for LaTeX, or if you can use one [from elsewhere]( https://github.com/briandealwis/ubcdiss ). I personally fo…

MultiMarkdown might be more suitable for large documents, as it allows the inclusion of files between documents, cross-references etc.

But ECB for media is particularly egregious, particularly since even the Wikipedia page on ECB shows how remarkably 'visible' large things encrypted with ECB are.

Would this legal around the world? AFAIK Canada and probably parts of the US don't allow wearing bulletproof vests, and while a suit might be harder to identify as such, I'm wonder…

von Neumann is 'skirt chasing' but Curie is 'slutty'?

The previous hackathon was near Zurich https://whispersystems.org/blog/hackathon-zurich/ , so it's certainly not out of the question it will be outside of the US again, some time i…