Hacker News: dfa0

New comment by dfa0 in "The Government is Silencing Twitter and Yahoo, and It Won't Tell Us Why"

dfa0 — Sat, 19 Apr 2014 16:29:59 +0000

Why does a dog lick his balls?

New comment by dfa0 in "Update on Linksys WRT1900AC support for OpenWRT"

dfa0 — Sat, 19 Apr 2014 14:59:46 +0000

Wow, this costs more than a Chromebook!

New comment by dfa0 in "Ubuntu 14.04 LTS"

dfa0 — Fri, 18 Apr 2014 14:26:09 +0000

Xubuntu is the simpliest,light-weight choice that still has a lot of functionality available if you want to turn it on.

I am grateful for this choice.

New comment by dfa0 in "Ubuntu 14.04 LTS"

dfa0 — Fri, 18 Apr 2014 14:24:01 +0000

I know upgrades are supposed to work, but they almost never go 100% percent right.

Use dpkg/synaptic to backup your installed packages and backup your /home...then commit to the time to going fresh install. If you use LTS releases, you'll only be doing it at most every other year.

IMHO, it is worth the time.

New comment by dfa0 in "How to exploit home routers for anonymity"

dfa0 — Fri, 18 Apr 2014 14:19:58 +0000

The reason to secure your network is a good reason to secure your car.

Your network and your car can/will be used by bad guys to do bad things.

You should care.

New comment by dfa0 in "Ask HN: What encryption algorithms should we take as compromised?"

dfa0 — Fri, 18 Apr 2014 13:53:23 +0000

Ciphers to avoid DSS, MD5/RC4, SHA-1.

Ciphers to prefer ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256

A pretty good source/guide:

https://hynek.me/articles/hardening-your-web-servers-ssl-cip...

You'll need apache 2.4+[I think], or nginx. And possibly fresh certs to use DHE/EC.

A quick rundown of a fairly secure setup:

Cipher Priority list:

ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:!RSA+3DES:!aNULL:!MD5:!DSS:!SHA:AEAD

==========================================================

Generate the cert and private key:

openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:4096 -keyout serverkey.pem -out servercert.pem

==========================================================

Generate the DH parameters:

openssl dhparam -out dh2048.pem -outform PEM -2 2048

==========================================================

How to List Elliptic Curves:

openssl ecparam -list_curves

===========================================================

Note: Generating DH parameters is gonna take a while. If you are implementing this on a slowish machine like a Raspberry Pi, you might want to use a faster machine to do the DH step, then copy file the key over.

New comment by dfa0 in "How to exploit home routers for anonymity"

dfa0 — Fri, 18 Apr 2014 13:46:58 +0000

Another reminder to use strong, non-default credentials on something that is the edge of your network.

I'm still amazed by how many people drive around leaving their cars unlocked.

New comment by dfa0 in "My Ideas, My Boss’s Property"

dfa0 — Tue, 15 Apr 2014 01:35:41 +0000

Yeah, but the American dreams is to have one good idea and milk it for the rest of your natural life, then pass on the rights to your offspring who can milk it...and so on.

That way you can exponentially create useless people.

New comment by dfa0 in "What if we never run out of oil? (2013)"

dfa0 — Tue, 15 Apr 2014 00:43:01 +0000

We don't know how much oil exists,but we do know it is finite.

The sun's energy will out last us all, millions of times over. Plants have it figured out. We should ask them.

Plus what happens when we are ready to leave Earth? Surely we'll need a way to feed off of the stars then anyway, so why not start now.

New comment by dfa0 in "Drop Dropbox"

dfa0 — Thu, 10 Apr 2014 16:20:09 +0000

Vote with your bits[and dollars] if you disagree.

Nerd rage alone is fruitless without tangible follow-thru.

New comment by dfa0 in "Slashdot is Port Scanning Its Users"

dfa0 — Wed, 09 Apr 2014 21:55:40 +0000

Slashdot beta, a new redesign, is causing quite a stir these days amongst the vocal majority.

New comment by dfa0 in "Heartbleed"

dfa0 — Wed, 09 Apr 2014 16:15:46 +0000

I had no idea about IIS using a different implementation.

The More You Know...

New comment by dfa0 in "Heartbleed"

dfa0 — Wed, 09 Apr 2014 13:31:59 +0000

If it was your sole purpose in life to bust dams, and then suddenly you were given a cache of unlimited dynamite...what would you do?

To the point, when the nature of a thing is to foo and you remove all obstacles from that event, expect positive feedback...and lots of it.

New comment by dfa0 in "Heartbleed"

dfa0 — Wed, 09 Apr 2014 13:22:40 +0000

He's running on a Windows box?[IIS]

New comment by dfa0 in "Cafe theft suspect nabbed after video goes viral"

dfa0 — Wed, 09 Apr 2014 02:29:30 +0000

/4chan mode off/

New comment by dfa0 in "DynDNS ends free services"

dfa0 — Tue, 08 Apr 2014 20:07:52 +0000

When companies stop focusing on innovation, they start focusing on the bottom line so anything without a easily visible revenue stream gets cut.

aka short-sighted thinking is the final stage of most business before sale to the chop shop.

New comment by dfa0 in "Spinal cord work 'is a breakthrough'"

dfa0 — Tue, 08 Apr 2014 19:41:11 +0000

I know/have-worked-with too many MDs to believe that they are also hackers.

I am contending that the hacker is the missing part here.

New comment by dfa0 in "Spinal cord work 'is a breakthrough'"

dfa0 — Tue, 08 Apr 2014 16:18:03 +0000

I use hacker here is a broader sense than someone who writes an app for $platform and names it $-er(terminated with r instead of er).

New comment by dfa0 in "Spinal cord work 'is a breakthrough'"

dfa0 — Tue, 08 Apr 2014 16:07:38 +0000

Just imagine if we had a few thousand hackers working on this stuff full-time, what could be accomplished.

Here's hoping it happens.

New comment by dfa0 in "Spinal cord work 'is a breakthrough'"

dfa0 — Tue, 08 Apr 2014 16:05:04 +0000

Much easier to just manipulate the brain...

It is how a large portion of this country works already.