Collaborate Disseminate
I am learning how to configure a multi-region AWS system. However, everything I read says "if you want/need more security then do X". Why would anyone want less security (is what I start thinking)… Is there a way to create a bu… Continue reading Is there a bulletproof way to configure your AWS system?
I am new to VPNs, have used them a few times, have read about "how they work" (which is all very high level), and am now confused about how this is actually implemented (so I can come full circle and understand what kind of secur… Continue reading How is VPN tunneling actually implemented?
I am wondering how you should setup your network (AWS) so you can debug different things that might occur. Obviously there’s logging, but it seems at some point you might require SSHing into the actual machine of interest and checking arou… Continue reading Should you let yourself ssh into every machine in your network?
I am setting up AWS stuff and wondering how to setup a secure bastion host. They all say to only allow access to your IP address, but how can I do that if my IP address is changing every few hours or days (just in my house wifi, or going t… Continue reading How do you get a secure bastion host if your IP address is constantly changing?
I had an idea a little while back to have an ID card with a QR code on it that you kept in your wallet. When you want to access your passwords (view them directly), you need your ID card and to scan it with your password protected iPhone. … Continue reading Could you store your passwords in a phone app governed by a QR code?
I asked a more specific question yesterday on SO but haven’t had any luck with responses. Basically I am trying to get OpenSSL wired up in low-level C with minimal dependencies. In that link I referenced some GitHub gist/repo… Continue reading How to obtain trusted certificates for use with OpenSSL in C (on a Mac)?
I see this which charges $30/month for a list of ~600 anonymous HTTPS proxies in ~150 countries, updated every 5 minutes. Is there anything online that has basically an updated real-time list of proxies around the world that … Continue reading Is there a real-time-updated list of HTTP or HTTPS proxies around the world somewhere online for free? [on hold]
Say I have a document. I want to encrypt it, then give it to my friend, and I don’t want them to be able to decrypt it. I want them to encrypt it again using their GPG system. Then to decrypt it my friend has to first decrypt… Continue reading How to use GPG to pass along encrypted content and double encrypt
Here is what I have done roughly, starting from scratch:
$ brew install gnupg
$ cat >foo <<EOF
Key-Type: RSA
Key-Length: 4096
Subkey-Type: RSA
Subkey-Length: 4096
Name-Real: My Name
Name-Comment: …. Continue reading How do I properly encrypt a document with GPG2 on Mac?
Say you created some IP in the form of some files. How do you prove that you created the IP, in a theoretical cryptographic sense? A major constraint is to maintain security as well, so you can’t just create a patent which will share the i… Continue reading How to Prove you created Intellectual Property (IP) using a Notary