@mlen@social.hackerspace.pl

(since @elaterite@mastoart.social posted the Big Boy, I thought I'd post a freight locomotive from Switzerland; I stood on its footplate in Brugg last year and I'm looking forward to do it again this year)

7

1

3

0

mlen @mlen@social.hackerspace.pl

· 8mo ago

Replying to

@zzt@mas.to @aral@mastodon.ar.al @element@mastodon.matrix.org "No backdoors are included, because none are needed."

6

3

1

0

mlen @mlen@social.hackerspace.pl

· 7mo ago

Replying to

@bagder@mastodon.social The name that the attacker used is likely fake. Unfortunately it happens to be the name of a person I used to work with that was not related to this backdoor at all. I know that they got harassed online because of that coincidence. When possible, I think it's better to omit the name or include a note that it's likely fake.

3

2

0

mlen @mlen@social.hackerspace.pl

· 8mo ago

Replying to

@zzt@mas.to @aral@mastodon.ar.al @element@mastodon.matrix.org This was posted out of spite in case it wasn't obvious, I really wish something better than irc (maybe matrix, maybe something else) is the future. There clearly are usecases that Signal doesn't fulfill.

2

0

mlen @mlen@social.hackerspace.pl

· 6mo ago

Replying to

@0xabad1dea We're just sloply moving to a new industry standard of nine fives.

1

0

mlen @mlen@social.hackerspace.pl

· 10mo ago

Replying to

@gunstick@mastodon.opencloud.lu @nixCraft@mastodon.social I don't have the config at hand, but this old post captures it well: https://web.archive.org/web/20210617212600/https://www.nginx.com/blog/running-non-ssl-protocols-over-ssl-port-nginx-1-15-2/ The only difference is that I map "" to ssh and default to web.

NGINX

Run Non-SSL Protocols on the Same Port as SSL in NGINX 1.15.2

The $ssl_preread_protocol variable introduced in NGINX 1.15.2 allows you to distinguish between SSL/TLS and other protocols when forwarding traffic using a TCP proxy. This is useful if you want to avoid firewall restrictions by running (for example) SSL/TLS and SSH services on the same port.

2

0

mlen @mlen@social.hackerspace.pl

· 10mo ago

Replying to

@nixCraft I put my ssh on port 443 with nginx doing the protocol multiplexing.

2

0

mlen @mlen@social.hackerspace.pl

· 7mo ago

Replying to

@Viss@mastodon.social One thing I really dislike about the wording is that it implies that sanitisation of data inserted into prompts is possible. As far as I understand there is no reliable way to do that.

1

0