sajagi

Best worldwide outdoor map there is, with offline support. I use it very often to find trails not even locals know about (e.g. Japan). Don't forget to switch to Outdoor mode!

There is an optional (web) gui. However the primary audience is for those who prefer scriptability (or console/config files in general) over GUIs.

It all depends on what kind of company are you in, what kind of people are your superiors, etc. How much politics and backstage dealing is involved?

In an ideal situation I would say call be honest and tell the stakeholders your view.

On the other hand, from my corporate experience, it's not always the best course of action. See - as lwj1001 already said - some companies play sort of meta-game, where certain things are known but never said out loud. If you are in a position to change the environment - great! (But this is not likely the best opportunity to do so). Otherwise... I would still say your opinion to those who need to be informed, or even better - write them an email. The reason is - you might have to cover your ass in the near future. The worst that can happen is that everyone assume everyone know yet there is someone who doesn't.

It's quite probably because of compatibility with the older clients. Unfortunately you can't simply use only the safest algorithms out there because the clients wouldn't be able to connect :/

I actually decreased the cache expiry to 10 seconds instead, I believe that should be ok for everyone.

(disclaimer: I work for Rebex)

SSH libraries written by Rebex. With the exception of ECC it's all closed-source.

Alright, thanks!

I'll take a look - it will take some time as I am currently swamped. Can you please check again in few days? Thanks!

I totally understand your concern.

However, here's my perspective:

- if the server is public already then black hats can simply probe your networks (IPv4 is not that big) and find the servers by themselves. The odds are that hackers are probably not interested in your company anyway.

- there are people who don't care about security of their servers (or rather are lazy / naive) and might find this service useful. Even if we were black hats it would at last alarm them that something is wrong. If they ignore the warnings - well - god help them.

EDIT: typos

Hi andreaso, do you happen to have a list of encryption algs on your side? We don't support chacha20-poly1305 (yet) and afaik aes in gcm mode, but e.g. aes ctr are reliable so I find it strange these are not supported on your side.

I am tempted to not interfere with the darwinian process ;) But seriously, we'll probably add some note like that.

It is not, but thanks for sharing that link, looks very useful!

Even if the IP address was guaranteed static then I wouldn't dare recommending admins to add an exception to firewall. That would certainly be a very bad practice. There are tools available (mentioned in the comments around) that do the same job and can be run in the DMZ (the question is, would anyone go through the source code and verify the tool does not contain any malicious code?).