pt
Joined 18 years ago
Karma
115
Submissions
88
Member since
Oct 30
Recent submissions
Comment · 1 year ago
When we close and reopen VSCode (and some other IDEs), it updates the NPM packages for the installed plugins. Would these mitigations steps (e.g. pnpm) also take care of that?
Comment · 6 years ago
Baby bullet.
Comment · 7 years ago
From https://github.com/google/private-join-and-compute:
"Our protocol has security against honest-but-curious adversaries. This means that as long as both participants follow the protocol honestly, neither will learn more than the size of the intersection and the intersection-sum. However, if a participant deviates from the protocol, it is possible they could learn more than the prescribed information."
Also: "Disclaimers: This is not an officially supported Google product. The software is provided as-is without any guarantees or warranties, express or implied."
Comment · 7 years ago
Is there a way to setup an “always on” VPN on my device, such that it disallows any traffic to egress unless connected to the VPN?
Comment · 8 years ago
On the client, is it possible to setup an “always on” VPN? Such that when the client restarts on reboot, there is no internet connection until the VPN is on. Or when either the client or server glitches, the end point computer/mobile does not connect to the internet in the clear?
Comment · 8 years ago
“Thinking about what's next, I returned to my roots, rented the original Google office where I started my career, and founded a lab with my longtime friend and teammate @eamunozt. A bit of info: lumilabs.com”
https://twitter.com/marissamayer/status/986716678682587136?s...
Comment · 9 years ago
How do you compare it with PubNub?
Comment · 10 years ago
Check out https://www.trustedpassage.com (private beta right now). It's like ngrok but with security as the primary focus.
Disclaimer: I am one of the co-founders.
Comment · 10 years ago
I was referring to the browser side certificate that can be generated using the <keygen> tag, and then used for the subsequent HTTPS sessions. Would this be equivalent to ssh-keygen for SSH?
Comment · 10 years ago
Do TLS client certificates make HTTPS equivalent to SSH?
Comment · 10 years ago
I am actually working on build something similar. So, you could roll out an app-specific VPN like secure tunnel real easy. It is inspired by the work at Google IT called BeyondCorp [1].
The target market is companies whose employees require secure remote access to internal apps, but IT does not want to give a broad network access via VPN. So, marketing/sales like employees who simply want to access internal portals, etc. without the hassle of dialing into a VPN.
Comment · 11 years ago
Yes, DNS history is one way to leak your IP. There are several other ways that the origin IP may get leaked, so you should be very careful if you use Cloudflare:
* Keep all subdomains on CloudFlare
* Don't use wildcard subdomains if you are not on Pro account
* Don't host mail or other services on the same server as your web server (email headers have origin IP)
* Never initiate an outbound connection based on user action
* Make sure that your web server and web application are patched against all known information disclosure vulnerabilities.
* Change your origin IP once configured for maximum DDoS protection on CloudFlare
Cloudflare documents it here: https://blog.cloudflare.com/ddos-prevention-protecting-the-o...