Oxy – A Security Focused Remote Access Tool
oxy-secure.app
Oxy – A Security Focused Remote Access Tool
1–10 of 88 posts
Re: Oxy – A Security Focused Remote Access Tool
#2>Memory Safe + Fast
$ grep 'unsafe {' -R ~/oxy --include=*.rs | wc -l
13
Not bad.
Re: Oxy – A Security Focused Remote Access Tool
#3Seems really good! Might be interesting when there's an official third party audit (Yeah i know you do pentesting as a profession but that's biased, we need unbiased).
A link to the Github repo would also help with gaining usage: https://github.com/oxy-secure/oxy
Re: Oxy – A Security Focused Remote Access Tool
#4> Years of testing and battle hardening? No, it's super green. But hey, if you try it you'll help make it less green!
I’m interested: how long does it take for a piece of critical software like this to gain widespread adoption with a non-shite incumbent?
Re: Oxy – A Security Focused Remote Access Tool
#5This is interesting, but shows some of the problems with the word "secure"
The app. promises to be more secure than OpenSSH and provides a number of reasons why it thinks it will be.
However the site is entirely anonymous, so you have no idea who wrote this tool and what their affiliations or background are. So either you audit the code to get some assurance, or you trust the author(s) without any evidence.
Also the lack of any form of signed binaries would make me a little nervous from a security focused tool. You're then not only trusting the author(s) but their web hosting providers as anyone with access to that webserver can change the binary without it being obvious that they have.
Re: Oxy – A Security Focused Remote Access Tool
#6> Years of testing and battle hardening? No, it's super green. But hey, if you try it you'll help make it less green! I’m interested: how long does it take for a piece of critical software like this to gain widespread adoption with a non-shite incumbent?
Having it in all Linux/Unix default repos would certainly help?
Re: Oxy – A Security Focused Remote Access Tool
#7This is interesting, but shows some of the problems with the word "secure" The app. promises to be more secure than OpenSSH and provides a number of reasons why it thinks it will be. However the site is entirely anonymous, so you have no idea who wrote this tool and what their affiliations or background are. So either you audit the code to get some assurance, or you trust the author(s) without any evidence. Also the…
...and 10 lines of css would be nice.
Re: Oxy – A Security Focused Remote Access Tool
#8>Memory Safe + Fast $ grep 'unsafe {' -R ~/oxy --include=*.rs | wc -l 13 Not bad.
It's a good start, but the problems with SSH lately have largely been things like timing attacks that even the smartest compiler won't catch.
In fact a smart optimizing compiler can make that even harder to avoid since it is more difficult to know exactly what machine code it will produce.
Re: Oxy – A Security Focused Remote Access Tool
#9Author seems to be
https://twitter.com/JennaMagius/status/1010893277069914113
Re: Oxy – A Security Focused Remote Access Tool
#10This is interesting, but shows some of the problems with the word "secure" The app. promises to be more secure than OpenSSH and provides a number of reasons why it thinks it will be. However the site is entirely anonymous, so you have no idea who wrote this tool and what their affiliations or background are. So either you audit the code to get some assurance, or you trust the author(s) without any evidence. Also the…
...and 10 lines of css would be nice.
Coming from years of open source software, I trust this sort of presentation more.