cmars

I made a little utility for tunneling with the Tor daemon. Check out https://github.com/cmars/onionpipe.

onionpipe forwards ports on the local host to remote Onion addresses as Tor hidden services and vice-versa.

I've been researching altcoins, and RaiBlocks sounds interesting.

xrb_3wq3d975sq1oef7y35mzakrywke18hab85g548wkshu61pec4fxkixbwhr48

Thanks!

In a forward-secure manner?

Tor onion services solve the setup-your-own-server issues, it's just not super easy yet.

Lately I've been trying to make this easier. I developed ormesh (https://github.com/cmars/ormesh) in an attempt to simplify setting up hidden services for private use.

I think both Tor and IPFS are both awesome and useful decentralization projects, they just have different use cases & characteristics. AIUI IPFS lacks fine-grained access controls. Last time I looked, it seemed like I either had to run all my own infrastructure of IPFS nodes with pre-shared private keys, or open everything to the public and encrypt on top of that... I prefer the Tor hidden service model, where I can decide on a per-service basis how I want to share it, revoke client access if necessary, and have my traffic securely routed on existing infrastructure.

Edit: fixed link

I feel the same way about depending on, and routing my traffic through third-party services.

I've recently developed a utility[0] to help simplify setting up hidden services w/client auth for this purpose, you might find interesting.

[0] https://github.com/cmars/ormesh

There was some controversy [1] [2] about Nokia decrypting SSL connections for their accelerated browser. Not familiar with their platform, or whether you could remove them, but Nokia proxy certificates are certainly being trusted by default.

If you're this paranoid, build one of those laser cut Arduino GSM phones instead[3]. You could add your own discreet baseband kill switch.

[1] https://gaurangkp.wordpress.com/2013/01/09/nokia-https-mitm/

[2] https://freedom-to-tinker.com/blog/sjs/how-the-nokia-browser...

[3] http://web.media.mit.edu/~mellis/cellphone/

Lately I have been feeling we as builders had this responsibility to build the Internet that the world needed, and we failed. We were distracted, we got rich, we ignored or misread the needs of our fellow humans.

The walled gardens that we now find so insidious and creepy are due to our own failure to empower the users. We made HTTP, SMTP, XMPP protocols. Large companies brought these to the masses, in ways the masses can understand and interact with in their limited capacity... for a price.

Can we reclaim humanity's birthright? Can we build a vision of the world we wish to live in, that is accessible to and understandable by many? Or is our entire collective fate to become a monetized click stream of suckers?

This article names Google, but to me that is beside the point. Google is a large system set in motion by shareholders and market forces that has equilibrium. It consumes click streams and subscriptions, and excretes money, like others of its kind. Can such an organism ever serve the best interests of humanity all the time?

If you find yourself hating Google, better to look within yourself. Do you have the courage to walk away from these kinds of services and build an alternative, however humble it might be, that empowers and liberates your fellow humans?

I am still working on this in myself. My email is still gmail, I would miss some personalities in my G+ circles, but I am uncomfortable, and I find current trends unsettling.

(edited for grammar)

It's just a click. For it to matter so much whether I am clicking this link or that link with the right intent, that all this supposed meaning and morality hangs in the balance, that it could make all this difference, it all seems so absurd. Almost makes me want to disable ABP, Allow Scripts Globally (dangerous), shut my eyes, and just start clicking. None of it really matters.

Eh, I think I'm done with the Internet for today. Might run afoul the click police.

Same here:

  Linux (redacted) 3.2.0-41-virtual #66-Ubuntu SMP Thu Apr 25 03:47:17 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

  [  413.309308] BUG: unable to handle kernel paging request at 0000001781eef4e8
  [  413.310359] IP: [<ffffffff8108d605>] atomic_dec_and_mutex_lock+0x15/0xa0
  [  413.311025] PGD 1c4ec067 PUD 0 
  [  413.311680] Oops: 0000 [#6] SMP 
  [  413.312007] CPU 0

One strong drink is enough for me, so I just tip 100% at the local place where I regularly camp -- whether I'm camping or picking up a drink. If your coffee shop is near a university, bring your regular barista something nice, some food, etc. during finals. He or she is probably pulling doubles. This is coming up soon...

"Personally, I regard it as rather sad that simply collecting such basic anonymous data about a smartphone or tablet could cause such an overreaction. Simply using the Internet, without extra effort to erase your digital footsteps, reveals far more about you than the information CM was going to collect."

Some users choose the extra effort to minimize their digital footprint. What I find sad is the trend in software and hardware products making that choice impossible to make.

I think Cyanogenmod deserves praise for listening to their users and addressing their concerns, even if they did not agree with them.

I mostly agree, but SQLalchemy queries and the occasional complex conditional could cause one to reconsider or start making allowances.

Quick project I made last night -- an SSH public key scanner. Mind your P's and Q's and only use this on networks you have permission to scan.

I'd rather have the opposite -- a client that can use multiple DVCS repositories while preserving the identity of commits.

I find this recommendation interesting because I am developing an OpenPGP keyserver in Go, called Hockeypuck (https://launchpad.net/hockeypuck). I started the project because of problems I ran into with SKS in a very specialized, write-heavy use case. SKS is developed in OCaml.

I've been porting the reconciliation algorithm in SKS to Golang so Hockeypuck can peer with SKS servers. I think it will be very useful in other applications beyond keyservers. The mathematical definitions of finite fields and polynomials are elegant in OCaml, and I definitely understand the choice of language from that point-of-view.

If you want to see a comparison of finite-field arithmetic and polynomial factoring in Go vs OCaml, my recon port is in a separate project called conflux (https://github.com/cmars/conflux). It's an incomplete work in progress, needs tightening up, tail-call elimination, etc. but early feedback is welcome.

As a developer unfamiliar with OCaml & without much formal mathematics background, I had a hard time understanding some of the intent of the SKS sources -- in those cases, conflux is a straight-up port from OCaml with unit-tests also ported from SKS to back it up. Some of it, I understood the math concept, but not the OCaml, so I ported from SymPy instead.

Wolfram Alpha was also helpful to validate my work and create test cases -- it does polynomial factoring over finite fields!

I had posted a side project (ssh-auth-id) earlier this weekend. My friend & co-worker Dustin was working on this in parallel (doh!), and we've merged our efforts. If you picked up ssh-auth-id, my apologies, please switch over to ssh-import-id.

Thanks!

Indeed it has merged. Read more here: http://blog.dustinkirkland.com/2013/02/ssh-import-id-now-sup...

This project may merge with the ssh-import-id project. Will post updates on this.

Does not work with Javascript disabled. Temporarily allow qz.com, still broken. Lots of overly generic and/or suspicious tracking domains blocked. Tab closed.

Making an RDBMS feel more like labix.org/mgo.. I like it!

konec allows you to perform general public key cryptography operations (encrypt/decrypt/sign/verify) with your OpenSSH RSA keys.

This is also possible to do with openssl rsautl, but I wanted a simplified interface, so I wrote one in Go. Build/installation instructions are here: https://launchpad.net/konec/+announcement/10904

So what's the point of konec? As I mention in the man page, encrypting with an OpenSSH key is probably most appropriate for publicly posting a nonce or expiring session key to a remote host, because you're using what is otherwise (in OpenSSH) an authentication/identity key. But what about signatures? Signing a message with an SSH host identity seems interesting from a trust perspective.

Edit: Right now the encryption is rather limited (I'm doing direct RSA-OAEP on the plaintext) so I'm considering adding a wrapped symmetric cipher. Or maybe this is a feature?

What do you think? What features should I add? How would you use konec?

I'm developing an OpenPGP keyserver in Golang. http://launchpad.net/hockeypuck

I'm the lead developer at Gazzang on this product.

I'd like to hear your feedback on zTrustee. What are your key management needs? What features would you like to see in a service like this?

If you're interested in learning more about the product, I'd like to invite you to our webinar on Aug. 29th (register here: http://gazzang.com/resources/webinars-and-events/item/329-au...)

Thanks! -Casey

Great fun, but it's picked up some NSFW gifs. Can you add a filter or at least make NSFW opt-in like reddpics, scrolldit, etc.?

When the current entertainment cartels are replaced by lighting and shading algorithms, algorithmically generated or enhanced sets and story lines, artifically-intelligent actor agents and remotely live-actor operated machinima drones, the world will be a more creative and entertaining place. I for one welcome the coming Diamond Age.

To quote Public Enemy, burn Hollywood burn!

Require equal paternity leave, and the author will be forced to consider married men just as risky a prospect.

Better solution: make the employment restrictions apply to a company of a certain size. A large enough company should be well-enough equipped to take care of its employees. A startup company isn't.

Also closed-source, proprietary software.

This might be heresy, but how could one do something similar in Go? Would it be worthwhile?

I work from home now, I could go take a walk - right now! I work from home now, I could ride a bike - right now!

Then freaking do it and return to your work with new vigor.

Stop feeling guilty about it. This always makes you more productive. If you were stuck in a cube you'd just be miserable and reading reddit anyway, or you'd walk around the campus. No different.

Last time I looked into zmq, it was not recommended for use in public internet services -- not resilient enough against a potential DoS attack or buggy client implementation. Has this changed?