Live data from Hacker News

Oxy – A Security Focused Remote Access Tool

oxy-secure.app

81–88 of 88 posts

Re: Oxy – A Security Focused Remote Access Tool

#81
post #19
post #11

Man if this guy copied Mosh's feature-set it would be really awesome. edit: I guess I assumed something I shouldn't have

It does not appear to be a "guy".

It is a "guy":

"Dylan Davis (@JennaMagius) is a senior security analyst at RiskSense. He has performed a variety of Fortune 500 incident response engagements, discovered new CVEs in major software, and performed vulnerability analysis on a wide variety of embedded devices."

Re: Oxy – A Security Focused Remote Access Tool

#83
post #19

Earlier quoted context omitted.

It does not appear to be a "guy".

It is a "guy": "Dylan Davis (@JennaMagius) is a senior security analyst at RiskSense. He has performed a variety of Fortune 500 incident response engagements, discovered new CVEs in major software, and performed vulnerability analysis on a wide variety of embedded devices."

¯\_(ツ)_/¯

I was just going off the name and the fact that their (Github, I think?) bio described them as a "girl".

Re: Oxy – A Security Focused Remote Access Tool

#84

Earlier quoted context omitted.

> Since source is available, of course you should audit it, or at least glance over it before compiling. Really? I don't think everybody auditing the source of the apps we use is at all realistic, and I don't think glancing at the source is worthwhile. Barring an organized audit, I think confidence in an open source tools like this just comes with popularity, rightly or wrongly.

I think it's reasonable to wait for the community to audit it, and to trust that. Popularity tends to include a certain amount of vetting by people who do have time, resources or knowledge.

That worked really well for openssl

Re: Oxy – A Security Focused Remote Access Tool

#85
post #20

>Well how does rsync work, then? rsync relies on executing a non-ssh helper program on the remote. And that's a bad idea why?

It is a "bad idea" in terms of attackable footprint, although I don't think it was being called out as a bad idea in this page, more of clarification that the stated feature really doesn't exist in SSH.

>It is a "bad idea" in terms of attackable footprint

So the more the features jammed in, the safer? Something about that doesn't seem alright to me.

Re: Oxy – A Security Focused Remote Access Tool

#87
post #49

Earlier quoted context omitted.

If you meant the font choice for the general text of the website, than that's just whatever default font your web browser has chosen. In essence this website's code has not designated any font choice. So, whenever web browsers are not directed to use a certain font/typeface, they defer to their default font - usually some default system font. This has been the practice of web browsers since the very beginning of the…

The questions are styled to use courier, though. .question { font-family: Courier; }

Yes, this is what I meant! Thank you!
Post reply on HN