coderrr

Joined 18 years ago

Karma

292

Submissions

119

Member since

Mar 24

View on Hacker News

Recent submissions

Comment · 13 years ago

@HNmods, any reason this was removed from the first page?

Comment · 13 years ago

Here is a way some of our customers are using OpenVPN on iOS:

https://www.privateinternetaccess.com/forum/index.php?p=/dis...

Comment · 13 years ago

FYI, this is the info page for our new (beta) OpenVPN based client which supports multiple encryption options:

https://www.privateinternetaccess.com/forum/index.php?p=/dis...

Comment · 13 years ago

We'll use standard DHE if the user selects an RSA cert (2048, 3072, or 4096). And we'll use ECDHE if the user selects an Elliptic Curve cert. We'll also be displaying a disclaimer about the potential issues with ECC (certain experts believe TLS curves may be compromised/weakened) if the user selects that.

Comment · 13 years ago

You're probably right. We've already changed to 2048 DH everywhere. Do you have any opinion on if that is a strong enough default?

Comment · 13 years ago

For OpenVPN - which is the only protocol we advise for real security (PPTP and IPSec/L2TP are fine for just hiding your IP) - we don't use pre-shared keys. OpenVPN uses TLS for exchanging strong symmetric keys. Your password is only used for authentication and its entropy isn't related to your session's security.

Comment · 13 years ago

If you use PIA our Windows (and OSX) app has a feature (on by default) which blocks IPv6 while you're on the VPN.

https://www.privateinternetaccess.com/pages/client-support/#...

Comment · 13 years ago

Uh, no. We aren't subsidized by the NSA or any part of any government or any organization or person for that matter. We bootstrapped Private Internet Access with 500$ and a lot of caffeine and have been profitable since our second month in operation.

We believe what the NSA is referring to when talking about "VPN startups" is the initial stages of PPTP sessions. PPTP has been crackable for a while, check out moxie's cloudcracker.com. We believe it highly unlikely that they have broken OpenVPN (which is what our application uses) or SSL.

Please see our stance on PRISM: https://www.privateinternetaccess.com/blog/2013/06/prism/

Comment · 13 years ago

Looks like app.net isn't perfect either. Their HSTS isn't implemented correctly. Only 'alpha.app.net' and 'join.app.net' are protected while 'app.net' is not. They fell into one of the common pitfalls with their http->https redirects: http://coderrr.wordpress.com/2010/12/27/canonical-redirect-p... You can verify this at: chrome://net-internals/#hsts

Comment · 13 years ago

http://bitcoin.stackexchange.com/users/85/david-schwartz?tab... ... ctrl-f, ripple

Comment · 14 years ago

Has anyone else not been receiving 'charge.succeeded' events on their Stripe webhooks? We have been receiving all events except that one, even when all charges are succeeding as verified through the management panel. This is a big problem as that is the event that's used to actually process a payment and create a new account.

The problem seems to have been going over for around 8 hours now.

We've received no reply from their support in 4 hours.

Anyone have any ideas how to get in contact with them at this time?

Comment · 14 years ago

I just remembered it's not actually custom protocols with raw sockets that are common and don't respect SOCKS settings but rather Flash's RTMP protocol.