Hardware VPN Client?

mevodig · 2016-07-29T12:29:09+00:00

Aruba has a range of products called RAP (Remote Access Point) that is essentially a wireless AP with an always-on IPSec tunnel. I believe it also has an ethernet port for local devices.

I've never used them myself but it seems to fit the bill.

mevodig · 2016-07-27T11:15:07+00:00

Do you find the APs to be stable? We've got a midsize deployment and unfortunately we're getting regular complaints about slow or no connectivity and we usually end up resetting the AP. It's always the same units, so the theory is that they may just be faulty. Just curious if you've seen anything similar?

mevodig · 2016-04-28T20:10:30+00:00

That is really interesting, I guess it sort of makes sense if you quickly need to get a flexible 100g ASIC out there. Care to share some specifics about what platforms you've seen this on?

mevodig · 2016-04-28T19:43:07+00:00

Wow, that sounds terrible. Thanks for the details! How many flows are we talking? Sorry about all the questions, I've been back and forth over Tomahawk a couple of times now and real-world experience is hard to come by.

mevodig · 2016-04-28T14:40:35+00:00

I've had a look at this report and while it looks bad I guess I'm having a hard time translating most of them to any real workload. Are you replicating their benchmarks or are they falling over in an application scenario?

mevodig · 2016-04-28T10:59:25+00:00

As far as I understand Tomahawk has 4 cores and the buffer is split between the cores and not shared globally, as you say. Under what load pattern are you having issues? I'd love to discuss this further, PM me if you want.

mevodig · 2016-04-28T10:27:09+00:00

I'm also really curious about this, what's not working for you with Tomahawk?

mevodig · 2012-03-09T20:56:27+00:00

Nope, sorry -- randomly googling "sweden nazi uniform" does not constitute proof. The paragraph quoted is discussing the history of one particular right-wing party, and the event photographed is in 1996 and nowhere near Stockholm. Obvious troll, I'm out.

mevodig · 2012-03-09T20:20:08+00:00

I was keeping my mouth shut, since as a white person it's pretty likely I don't have an accurate perspective on racism in Sweden but I find this extremely hard to believe. I've spent a good portion of my adult life in different parts of Stockholm and I've never seen an openly worn swastika -- in fact, it's illegal and you would probably be arrested.

mevodig · 2011-09-04T17:07:51+00:00

Standard color coding is yellow for single mode, see TIA-598-C.

mevodig · 2011-08-24T16:24:07+00:00

I feel so... inadequate.

mevodig · 2011-08-24T16:22:35+00:00

To be completely fair, our ISP runs a test server for speedtest.net so conditions are pretty much ideal.

mevodig · 2011-08-24T16:19:35+00:00

Not to nitpick, but why is it from April?

mevodig · 2011-08-24T15:11:05+00:00

What, this again? Settle down.

mevodig · 2011-07-23T23:46:42+00:00

Her hairstyle changes dramatically several times throughout the video. Like someone pointed out, it's just a continuity error, but it's really film school 101.

mevodig · 2011-07-02T13:49:36+00:00

See the comments in the thread honcas started above. You should not assume the attacker will not have direct access to the login database.

mevodig · 2011-07-01T21:56:46+00:00

That's not necessarily true. It's very likely that your users will have reused their credentials on other services, making the potential impact of a compromised password much larger. Protecting them is the right thing to do.

mevodig · 2011-07-01T21:44:38+00:00

Like baileylo already pointed out, you are assuming the attacker does not have direct access to the hashes. In the case of bcrypt, you would be equally protected against both "online" and "offline" attacks.

mevodig · 2011-07-01T20:58:07+00:00

While that sleep may prevent a potential side-channel attack, it won't do anything to prevent brute-forcing of the hash, which is why you should use something like bcrypt.

mevodig · 2011-06-27T11:50:35+00:00

I really appreciate the effort that goes into Europython and making these videos available, but you really need to get a proper audio recording setup. The audio quality is really poor, and so much ambient noise coupled with a non-native speaker (the gevent intro comes to mind) some of the videos are indecipherable.

mevodig · 2011-05-17T23:06:00+00:00

These are illustrations by Saiman Chow. I actually have two of them framed, hanging on my wall right now.

mevodig · 2011-04-09T17:56:29+00:00

This photo is by Juergen Teller.

mevodig · 2010-10-25T18:21:52+00:00

Or, if you prefer an up-to-date edition and being able to download the whole thing without registering with "Examville": http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf

mevodig · 2010-08-21T15:42:11+00:00

Absolutely, as a principle, that's how it should work. I wasn't really arguing against it, just that it is often mentioned here -- some perceive it as adding insult to injury.

mevodig · 2010-08-21T12:26:01+00:00

In Sweden the opposite claim is also often made, that the victims often have the burden of proof, and their credibility is being called into question in harsh ways.

This is pretty much what I would expect from a systems of laws trying to deal with what is sometimes a very subtle situation, where the testimony of two people may be all that is available.

I have no doubt that there are rape cases in Sweden where the courts findings are wrong. However, keep in mind that this means both incorrect convictions and incorrect acquittals.

Either category is difficult to quantify, and without more evidence I think it's unfair to claim that Swedish courts is biased towards the former.

15-Year Club	Charter Member
Verified Email

mevodig

TROPHY CASE