71–80 of 88 posts
Earlier quoted context omitted.
There isn’t one. They even had to suppress a warning about how the code can never be reached.
Hah, OK then :-) I figured there might be a unit-testy reason or something -- where you can temporarily disable panics and patch out process exits. Thanks!
Great to see protocol versioning over negotiation. I don’t think replacing OpenSSH is as important as wireguard replacing OpenVPN but it’s up there. Protocol tasting notes: - If you’re going to dole out PSKs, why care about signatures? If you’re going to dole out PSKs, why are they separate from the knock PSKs? (You sort of address this by sharing knock PSKs are per server and handshake PSK is per pair. But if I have…
It's really nice to see protocols where people use memo fields to make sure one key can't be derived for another purpose though, and that is a feature you get out of PBKDF2 (but not only PBKDF2, hence my question) :)
Earlier quoted context omitted.
OpenSSH supports, at the very least, PKCS#11 modules out of the box these days, which can be used with hardware security modules.
For a Yubikey, you don't even have to dick around with the PKCS11 mess. Just use gpg-agent, it will use the GPG key on your Yubikey as an SSH key.
By not using a standardized port, I can't firewall off UDP on non-essential ports... I hope there's a way to disable this.
Earlier quoted context omitted.
...and 10 lines of css would be nice.
Coming from years of open source software, I trust this sort of presentation more.
As a comparative: https://www.wireguard.com/
That how a serious open source project looks like.
Interesting! - Does this have the buffer limitations for file transfer that ssh has? i.e. Can I send near wire speed? - Which independent third party pen testing and code validation groups have reviewed this? - Since this does not depend on rsync helpers for file transfers, are there any plans to add multipart transfers similar to lftp's p-get or other mirror sub-system functions? i.e. split a 40gb file into 20 chunk…
U2F would be amazing. I hacked around with adding second factors to openssh and its possible but not great. There was even a hack to do it with U2F. But to have a ssh like thing that supports U2F out of box would be amazing.
https://github.com/gravitational/teleport https://gravitational.com/teleport/docs/admin-guide/#fido-u2...
Disclaimer: I work for gravitational, but not on teleport.
Earlier quoted context omitted.
I think some people sometimes use guy in the more casual non-gender-specific way, myself included. Maybe it's a cultural or regional thing? And I guess it could be said that using guy is assuming the gender of someone, but one the other hand isn't that also assuming that the someone saying guy is making an assumption, etc, etc? Perhaps it's just a bit sad when a whole point is disregarded because of a single ambiguou…
I have no problem with your original, or particularly with your use of "guy". But the dictionary excerpt seemed to clearly show that the usage was incorrect, as it only applies to groups. So my comment is entirely about the person who accused the other commenter of virtue signalling. And I agree with you about Mosh style features. That would be lovely.
> From The Collaborative International Dictionary of English v.0.48 [gcide]:
> [...]
> 4. A member of a group of either sex, usually a friend or comrade; -- usually used in the pl.; as, tell the guys to come inside; are any of you guys interested in a game of tennis?. [Informal] [PJC]
Earlier quoted context omitted.
I have no problem with your original, or particularly with your use of "guy". But the dictionary excerpt seemed to clearly show that the usage was incorrect, as it only applies to groups. So my comment is entirely about the person who accused the other commenter of virtue signalling. And I agree with you about Mosh style features. That would be lovely.
Maybe this from gcide is more appropriate: > From The Collaborative International Dictionary of English v.0.48 [gcide]: > [...] > 4. A member of a group of either sex, usually a friend or comrade; -- usually used in the pl.; as, tell the guys to come inside; are any of you guys interested in a game of tennis?. [Informal] [PJC]
Great to see protocol versioning over negotiation. I don’t think replacing OpenSSH is as important as wireguard replacing OpenVPN but it’s up there. Protocol tasting notes: - If you’re going to dole out PSKs, why care about signatures? If you’re going to dole out PSKs, why are they separate from the knock PSKs? (You sort of address this by sharing knock PSKs are per server and handshake PSK is per pair. But if I have…
The Noise framework (and Wireguard) deliberately support the combination of psk and public key authentication. One clear benefit is that you get redundancy against a failure in either mode. If your DH implemention is broken, the attacker still has to compromise your shared secret. Alternatively if the attacker compromises your shared secret, they still have to break your public key crypto. In short, its an excellent…
(The problem this addresses is a passive observer who eventually gets a quantum computer, but can't pop any machines to just steal the PSK or whatever.)
curl -O https://oxy-secure.app/oxy
chmod +x oxy
./oxy --help