arete

I've been a Virtual Post Mail (https://www.virtualpostmail.com/) customer for 10 years so far and they've been great. Reliable and very quick to respond to support emails on the rare occasion it was needed.

Awesome work, this is a really cool idea and well executed.

I hadn't heard of borg before, but it appears to be a backup program. arc is a file archiver, like tar or zip.

Indeed. One use case I have in mind is using the Shamir Secret Sharing mode to create N backups on separate flash drives stored in diverse locations.

Safari Blocker is great, thanks Luke! Being able to add rules on the fly is really handy.

Conversely, check out Yoyogi park on the Monday after a hanami weekend. The ground is covered in garbage, broken bottles, cans, etc. Or check out the square at Shinbashi station after the salarymen finish their impromptu outdoor happy hour. All flat surfaces are littered with convenience store wrappers, empty beer cans and cigarette butts.

Yeah, Kernel Concepts sells the OpenPGP card in a SIM breakout style too.

I really wanted the CryptoStick, looks like they're temporarily about of stock pending the new 2.0 revision, but not holding my breath.

Can't comment on trustworthiness but Kernel Concepts sells a nice OpenPGP smartcard developed by Werner Koch, the GnuPG guy.

http://shop.kernelconcepts.de/product_info.php?products_id=4...

keys (https://github.com/wg/keys) is the password manager I've always wanted. It's a client/server application with a command line UI, and the server can run on a mobile device so your credentials are available wherever needed.

keys is open source (GPLv3) and includes a basic Android app that runs the server. The code should run on iOS as well, but the lack of background networking is an issue.

keys provides strong protection for credentials. For details please read SECURITY, but to summarize everything is encrypted with AES in GCM mode using a randomly generated key, which in turn is encrypted with with a key derived from a password via the scrypt KDF. Network communication occurs over mutually authenticated TLS 1.2 connections.

If you'd like to try the Android app without the hassle of building it yourself, please join https://groups.google.com/forum/#!forum/keys-app and I'll send you a Play store beta test link.

Enjoy!

The RDRAND circuits perform continual health checks and will signal a error instead of outputting bad data. See section 3.3 of http://software.intel.com/en-us/articles/intel-digital-rando...

RDRAND can do > 500MB/s when invoked by 8 threads running in parallel: http://software.intel.com/en-us/articles/intel-digital-rando... the theoretical maximum is 800MB/s

I wrote an x86-64 asm impl as part of my lightweight Java crypto library (https://github.com/wg/crypto) would be easy to drop into any C program: https://github.com/wg/crypto/blob/master/src/main/asm/rdrand...

Intel released an open source library too, though in tests my asm impl was faster ;-) http://software.intel.com/en-us/tags/20757

I'd never seen Threema before yesterday, but they just released an Android app and it's really well done! Great UIs on both platforms, nice security model, and very granular message status including "acknowledged" which is a great idea.

"For Evernote's consumer product, the current encryption algorithms are chosen more for exportability under the Commerce Department rather than strength, since our software permits the encryption of arbitrary user data with no escrow."

I guess Evernote's been around for a while, but wasn't it way back in 2010 that the BIS allowed simple self service registration and annual self classification of almost all "mass market" use of crypto?

http://www.bis.doc.gov/encryption/summary.htm

Is anyone running ZFS on Linux (http://zfsonlinux.org/) on their servers? Appears to be very bleeding edge, but the ZFS codebase itself ought to be pretty stable. I'm running a FreeBSD 9.0 system with ZFS and it's flawless.

I've been using Configgy which is now deprecated in favor of this, but am not a fan of executable configuration files.

Fortunately Typesafe has released a nice plain Java, with no dependencies, config library supporting similar syntax: https://github.com/typesafehub/config