Nusyne

197 karma · joined March 16, 2015

There are examples in the author's presentation at SSTIC '19 -- in french only https://www.sstic.org/2019/presentation/GUSTAVE_FuzzItLikeIt...

Typed the following :

  hello
  -----
  hello

a scroll bar appeared, could not see first line anymore without scrolling up.

TextSecure is either Text (SMS, which are not encrypted), OR secure (data). Not both simultaneously.

Relevant fixes have been commited to OpenBSD

Duplicity allows using gpg in a rather painless way:

  PASSPHRASE="myBackupGpgKeyPassphrase" duplicity ...

I use one gpg key per machine for backups, so having the passphrase in cleartext on that machine is not much of a problem.

Attic seems good. Its encryption makes me uneasy (https://github.com/jborg/attic/blob/master/attic/key.py), and I don't feel qualified to review it:

  * use of pkbdf2(passphrase)[0:32] as encryption key?
  * is AES correctly used? there are many pitfalls

I would be much more comfortable with it using gpg for encryption.