@encthenet@flyovercountry.social
@encthenet@flyovercountry.social avatar

encthenet

@encthenet@flyovercountry.social

FreeBSD developer, consultant.

Documentation!

crypto means cryptography.

tech is inherently political.

Do your part, encrypt the Net!

Add alt text to images.

All alt text posts are CC BY-NC-SA 4.0: https://creativecommons.org/licenses/by-nc-sa/4.0/

For commercial use, license available upon request, $75/post (i.e. if the alt text takes 3 posts, it'll cost $225 to license), just send me a message w/ where I can send the invoice.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

encthenet, to random
@encthenet@flyovercountry.social avatar

For the love of God, if you're talking megabits, say Mb. Not MB.

encthenet,
@encthenet@flyovercountry.social avatar

@qlp
Yeh, that works as well. As long as you don't spell it GBit. That just hurts my eyes. 😝

glyph, to random
@glyph@mastodon.social avatar

Does anyone happen to know if it is possible to get a projector for an open space at ? I have some ideas that involve discussions of code where it would be useful if a participant could share their screen with a larger group.

encthenet,
@encthenet@flyovercountry.social avatar

@meejah

Nifty combo.

I still need to get off my butt and try to add quic support to magic wormhole.

encthenet,
@encthenet@flyovercountry.social avatar

@meejah
It's partly more me deciding which quic library to use. Pure python means it just works everywhere, but it's slow. Using a C library means faster transfers (which with quic means 100% local network is possible and so theoretically >1Gb, and I know python quic can't do even 10MB/sec).

encthenet,
@encthenet@flyovercountry.social avatar

@meejah
I've started working on a cryptography replacement that doesn't depend upon rust. Not much there, but enough for an app I needed to use:
https://www.funkthat.com/gitea/jmg/pycryptowrap

I'm very familiar with ctypes so wrapping a library isn't hard.

And most of the libraries expect that you have an event system because the multiple streams can cause io at odd times, so it shouldn't be too terrible to plug in.

encthenet,
@encthenet@flyovercountry.social avatar

@meejah Looking at my past work, looks like ngtcp2 is the library I chose to go w/ for my ntunnel probject. It's MIT licensed, so a good fit, and I have some of the boilerplate implemented, but need to start implementing the basics for it.

encthenet,
@encthenet@flyovercountry.social avatar

@feld @meejah It is, but I haven't spent much time extending it. Partly as I haven't done much python stuff in the last year or two.

encthenet, to random
@encthenet@flyovercountry.social avatar

Good to see this, but this is very true:
"public industry specification for these Bluetooth trackers that have been around for over three years now says they care more about profit than protecting people – they'll get around to the safety features as an afterthought,"

Tracking devices and stalking were problems years before Apple brought the airtag to market and was a known problem to anyone who looked at news about them, but Apple chose profits over people's safety.

> https://infosec.exchange/users/patrickcmiller/statuses/112448459338454822

encthenet,
@encthenet@flyovercountry.social avatar

@feld Where did I say it should be illegal? I'm tired of you pretending I said something when I didn't even say anything of the like.

encthenet, to random
@encthenet@flyovercountry.social avatar

Arg! sigrok/PulseView is not arm64 native (even their nightly builds).

Anyone have a suggestion for other OSS/free/inexpensive logic analyzer software? (that's compatible w/ the inexpensive USB 24Mhz 8ch devices out there).

fanf, to random
@fanf@mendeddrum.org avatar

https://morsmachine.dk/tcp-consensus - TCP is an underspecified two-node consensus algorithm and what that means for your proxies.

encthenet,
@encthenet@flyovercountry.social avatar

@fanf
Have you looked at tcpcrypt and its implications?

https://datatracker.ietf.org/doc/rfc8548/

encthenet,
@encthenet@flyovercountry.social avatar

@fanf
It was created so that programs wouldn't have to implement tls, and that tcp sessions would be opportunistically encrypted.

encthenet,
@encthenet@flyovercountry.social avatar

@fanf First, it was created back in 2010, LONG before Let's Encrypt and TLS was seen as the solution to session protection. This was when lots of protocols were still plain text, and HTTP[S], though becoming more common wasn't quite the defacto standard, so it was making sure that ALL connections would be encrypted w/o having to update all the applications to support them.

It also means that all applications could be "updated" to deal w/ security issues by simply updating the OS.

1/

encthenet,
@encthenet@flyovercountry.social avatar

@fanf instead of having to update all the different applications. We still see issues w/ applications using old versions of TLS because either their closed source, or they haven't been updated to the latest API of their library.

Yes, TOFU isn't the best solution, but it's a lot better than allowing middleware boxes to do things like XXX out STARTTLS in SMTP sessions because they want to be able to sniff email traffic.

(SMTP is a good use case for this.)

2/2

encthenet,
@encthenet@flyovercountry.social avatar

@fanf Oh, one more comment, tcpcrypt tried to standardize it in 2011, but the IETF didn't (still doesn't) care about security, so they didn't complete it. Only after they had a few public embarrassments wrt their terrible security posture, did they finally realize they should do something, and then a second try was made to standardize it, but it took 5 years, mainly due to rrs insisting that tcpcrypt be TLS instead of the existing working w/ code solution.

1/

encthenet,
@encthenet@flyovercountry.social avatar

@fanf by the time it was completed, the industry had effectively moved to very few plain text protocols, wrapping TLS, and HTTPS now being the standard for more comms, so wasn't as needed as when the project first was created.

2/2

encthenet,
@encthenet@flyovercountry.social avatar

@fanf oh, re: why did I mention it, because you said:
> If we pull the cryptography into TCP, we might be able to simplify things further.

encthenet,
@encthenet@flyovercountry.social avatar

@fanf Oh lol. sorry for the confusion. Should look closer next time.

encthenet,
@encthenet@flyovercountry.social avatar

@fanf Yeah, someone else who did that had preceding text like, article I just read.

encthenet, to random
@encthenet@flyovercountry.social avatar

Yikes, all of these are bad.

Guess I had good reasons to not like submodules. (Give me subtrees.)

> https://60228.dev/users/leo/statuses/112440994650189429

encthenet, to random
@encthenet@flyovercountry.social avatar

One habit I need to get out of is logging out of accounts when they have their own browser container. For decades I'd make sure I'd log out of accounts to help prevent XSS attacks, but w/ containers that is/shouldn't be a problem as that container is only used for that specific site.

encthenet,
@encthenet@flyovercountry.social avatar

@feld Yeah. It should be easy enough to say, if you access this domain, auto open in container w/o the need to do the BS to "create" a container for that site. e.g. auto containerize this site. Though it is complicated by some stupid crazy SAML/SSO redirects that some sites do.

This would also apply to iframes, where if it attempted to access a site in an iframe, it'd deny the site, and open a new window for that site.

encthenet,
@encthenet@flyovercountry.social avatar

@feld and GC of "old" containers doesn't even need to be that complicated either, only keep the last 10, or say anything used in the last 2-4 weeks or some blend as well.

and it does look like the plugin is pure JS, so seems like it'd be totally doable.

encthenet, to random
@encthenet@flyovercountry.social avatar

This is why Dems like Nancy Pelosi want/need a "strong" GOP. If they didn't have a strong GOP, then the center/right Dems wouldn't be able to control the party and more left wing candidates would get elected.

> https://kolektiva.social/users/sidereal/statuses/112430915564456740

patrickworld, to random
@patrickworld@mastodon.online avatar

Subtitles in movie theatres NOW. I will not back down on this

encthenet,
@encthenet@flyovercountry.social avatar

@patrickworld
Most (all?) US theaters have captioning devices available upon request.

I haven't used them myself, and I have heard of troubles getting/using them, but they are suppose to be available.

E.g.
https://www.regmovies.com/captioning-and-descriptive-video

  • All
  • Subscribed
  • Moderated
  • Favorites
  • β€’
  • megavids
  • InstantRegret
  • magazineikmin
  • tester
  • everett
  • osvaldo12
  • Youngstown
  • ngwrru68w68
  • slotface
  • Durango
  • rosin
  • tacticalgear
  • kavyap
  • DreamBathrooms
  • JUstTest
  • khanakhh
  • thenastyranch
  • Leos
  • anitta
  • mdbf
  • ethstaker
  • cubers
  • cisconetworking
  • modclub
  • provamag3
  • GTA5RPClips
  • normalnudes
  • lostlight
  • All magazines
    •