Ta Xrhsima Tutorials Toy Xrhstou Rikoudh Parousiazoyn....

[Kostas Liakakis]

"Christos Ricudis" <ricudis at paiko.gr> wrote :

> Profanws kai den exei, alla stis perissoteres periptwseis se ena VPN einai
> kalytero na kryptografeis ta panta stous border routers toy VPN, para na
> paideyesai na kaneis end-to-end kryptografhsh sto application layer kai
access
> control stous border routers gia na bebaiw8eis oti kanenas de 8a
prospa8hsei na
> steilei sth grammatea sou sto Doublino unencrypted th syntagh gia
ntolmadakia
> ths giagias toy.

Synepos, oxi adynato alla afeles. Symfonoume diafonontas :-)))

>  KL> Skepsou omos oti ena bug den 0a se 3ebrakosei entelos...
> Wraia, 8a se ksebrakwsei en merei. Ti einai kalytero, na kaneis aplws
recompile
> to IPSec h na kaneis recompile to OpenSSL, na sou xtyphsei to mod_ssl, na
8elei
> recompilation to IMAP/SSL, ktl ktl ktl?

Baboura megalh e? Alla gia ena mikro bug sto OpenSSL den pisteuo na alla3ei
to API toso poly pou na baresei ki allou. An prokeite gia megalo, tote
sigoura kai xreiasteis ki allh ekdosh tou mod_ssl opote ginetai ga'i'tanaki
h ypo0esh.

Koita ypo0eto pos telika e3artatai apo to load sou. 4-5 shmantikes efarmoges
pisteuo einai h "krisimh maza". Otan xreiastei na kano kati analogo 0a sou
po :-)))


>  >> 3) Wireless networks opoy einai apo dyskolo ews adynaton na
>  >> kaneis eykolo access control sto MAC layer. Se megales poleis
>  >> me deployed amateur 802.11 networks hdh kapoioi arxisan na
>  >> kykloforoun stoys dromous me laptops kai sniffers psaxnontas
>  >> kapoio diktyo gia na bgoyn ston aera :>
>
>  KL> Mpaaa... na se ypoklepsoun nai. Na bgoun ston aera mesa apo sena
>  KL> apokleietai. 0a to katalabaines eu0eis amesos. Apla kai mono giati
>  KL> 0a kobotan ena meros tou diktyoy sou.
>
> Giati? Nai, 8a kobotan ena meros toy bandwidth - poy ante na to
katalabeis -

Oxi meros tou bandwidth... Meros tou diktuou, sta0mo `h oloklhro subnet.

> To mono poy exei na kanei kapoios einai na plhsiasei ena access point sou
me
> ena laptop, kai n'arxisei na sniffarei. Amesws gnwrizei th diey8ynsh toy
> gateway, to LAN address, ki akomh ki an xrhsimopoieis WAP to spaei mesa se
15

Kai to noumero papoutsiou pou foras 0a ma0ei... :-))))

> lepta. Dialegei mia unused (h silent) address mesa sto subnet (poy
manteyei ta
> oria toy), kai ante meta esy na ton breis. Ase poy de mporeis kan na
> akoloy8hseis to kalwdio kai na breis ton papara sto allo akro, otan den
yparxei
> kalwdio :>

Oxi alla mporeis na kobeis oti dieu0ynseis den exeis dosei. Kai pisteuo pos
se tetoia diktya den einai idiaitera polles. Opote h monh lysh tou einai na
xrhsimopoihsei mia pou den akougetai poly. Thn stigmh omos pou 0a akoustei,
0a baresei kampanaki...

>  KL> Opos kai na to koita3eis, se ena point-to-point dyktyo, mporoun
>  KL> na synhpar3oun mono dyo points.
>
> Den einai aparaithto h topologia na einai point-to-point, oute h
texnologia se
> periorizei se mono 2 points. Prosekse, milaw gia 802.11. Nai, yparxoyn
point-

Poso apexei auto apo to 802.11b ? Me tetoia mhxanakia exo empeiria. Mporoun
na einai point to point `h point to multipoint (asteras).

> ksexnas oti akoma kai sthn point-to-point periptwsh, exeis kapoies keraies
oi
> opoies sthn kalyterh periptwsh twn waveguides me parabolic reflector exoyn
ena
> eyros peripoy 10 moires ston kyrio lobo kai exoyn kai ena sxetika isxyro
lobo
> akribws pisw apo thn keraia. Den einai dioloy api8ano na brisketai ki
allos
> kosmos mesa stis 10 moires.

Ma auto leo ki ego. Mporoun aneta. Alla mono gia na akousoun. An
prospa0hsoun na steiloun kati prospoioumenoi ena kanoniko sta0mo/LAN 0a
epel0ei xaos... Opote pali ta kampanakia pou legame.

>  >> 4) Pros ta kei katey8ynetai to internet engineering, sto IPv6
>  >> to IPSEC einai 'sxedon' mandatory. I love standards [1]
>
>  KL> I couldn't agree more. To mono pou me anyshxei einai mhpos to
>  KL> standard mporei na to metafasoun oi diaforoi echelon. Asxetos
>  KL> key length. Katalabaineis...
[snip]
> Kalh h synwmosiologia, alla toylaxiston ta open standards ta meletaei KAI
h
> ereynhtikh koinothta ektos apo tous echelonades - an yparxoyn back doors
> yparxei megalyterh pi8anothta na to myristei kapoios exontas to plhres

Kai poios sou leei oti 0a einai dia0esimo to full specification? Na to
paroun kai oi Taliban na stelnoun skonh kryptografhmenh se xartomanthla?
Apapapapa....

> specification. 8ymasai thn periptwsh toy DES?

0ymasai poso sklhra palepse h nsa na to krathsei sta 56bit? Akomh ki otan to
espase arxika to distributed.net se 68 meres (kai teleutaia se < 24 ores?)

Telos panton, to paratrabh3ame... :-)

-K.